Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
File: IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft (raw, json)
Hash identifier: O8mHMOFhH0QBGMlE5Rsa7vIN0MrhtISmJiKhiVpAZA0=
Subject key identifier: BF:5B:86:ED:8B:86:0E:D0:E0:D5:EF:D1:E9:75:84:FD:45:EA:F6:23
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Certificate issuer: /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial: 0197B745BF97C5E698420FF7184C14581D2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
Manifest number: 15F0
Signing time: Sat 28 Jun 2025 16:01:30 +0000
Manifest this update: Sat 28 Jun 2025 16:01:30 +0000
Manifest next update: Sun 29 Jun 2025 16:01:30 +0000
Files and hashes: 1: B6aGxUDSSan1LbYvufjyd3IQLUs.roa (hash: dwUg5aBoWkQufw+jFxFp1hxo39/3rnNdCzkl0XPMgUM=)
2: IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl (hash: vOo47kKzqSnRTHf4/jLA3KDxLDxm66aQGlyOALQbIek=)
3: P1ooM0tRadnnfs7yPA4JyGHOu90.roa (hash: qt3kTikonByn5yyGAReXdJ6ZcgQBVF+qY0HIxFsZ/us=)
4: P2j-hUrnI_G8_z_xhTDbKbOjagw.roa (hash: KXKpMQn72rg2fYHpKvlZTFcp58U/Tju8WHXUSLpo2kU=)
5: RC7wgRAs2o4H2l1TLqn8NZUndUY.roa (hash: SCrWR5DUqk0ILJy6T4Si10/+i7OXDOm/wTyU6YmTVRU=)
6: TU-tMONGCT3DfIZWWAUdCOe9_Ro.roa (hash: F4YEB/jOyjkaM49IR5P9MseesiwqC68DyQAyT79ZX1E=)
7: jNrtD4zRsZVN6RiJAEomlUdUZdA.roa (hash: KgT9cW1vNdUm5rrXt6b08EWBC589TMe3HgUs7IKuzA4=)
8: vNOS5vUWCqJEMFsm4Huo1TSEvCc.roa (hash: yDPHPi4lOHCdMJ+/kRIvQ07jiloiQq/r5yFG565XkNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:bf:97:c5:e6:98:42:0f:f7:18:4c:14:58:1d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Validity
Not Before: Jun 28 16:01:30 2025 GMT
Not After : Jun 29 16:01:30 2025 GMT
Subject: CN=bf5b86ed8b860ed0e0d5efd1e97584fd45eaf623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b3:7f:aa:f9:37:b9:ad:16:e9:5e:17:62:b7:
1a:52:72:e1:48:02:46:29:a9:dc:4d:b5:e1:05:2e:
69:61:1f:4d:4a:47:2e:34:e7:c3:6c:f2:9f:98:a5:
b5:ca:80:2c:bd:44:3f:b7:b7:6b:96:5b:ad:0c:20:
62:ae:8f:76:22:c2:47:6e:ed:42:ec:d2:51:2c:46:
f2:6a:34:85:65:cf:a6:ee:be:24:c2:ab:b9:ae:6b:
48:49:1f:d9:81:a3:d6:6e:37:be:2c:05:be:9d:db:
f0:2b:6a:34:77:5c:b0:14:82:88:be:15:b1:b9:c7:
f4:e4:16:c8:65:28:fe:c5:53:c0:6b:fd:63:58:ef:
e3:6d:22:46:35:67:c4:fc:8f:37:26:ee:ef:b3:d8:
1a:d9:05:a9:77:8c:b6:2d:c7:41:d7:5d:63:a3:73:
63:95:7b:7e:67:75:bc:ea:48:76:24:41:ad:99:c6:
27:03:2c:e8:a6:33:fb:89:06:40:f7:75:d8:92:ba:
ca:97:f3:35:68:9c:64:8d:b9:d8:ca:b7:69:0a:ee:
16:91:35:01:92:bd:f0:92:da:80:1a:7d:34:d4:99:
57:7d:59:40:51:d2:03:2b:88:27:a8:d2:8c:3c:0b:
53:58:f8:44:86:db:6e:d3:49:32:32:d6:6d:e8:7f:
07:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5B:86:ED:8B:86:0E:D0:E0:D5:EF:D1:E9:75:84:FD:45:EA:F6:23
X509v3 Authority Key Identifier:
keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:66:90:15:93:75:09:bd:cb:ba:ae:f9:31:82:e8:f1:dd:93:
c2:e6:36:e5:f5:6d:fd:47:de:83:ae:2f:b1:cd:3e:bd:be:0c:
07:ff:21:16:a2:bc:35:74:ee:5b:d9:92:c5:e7:63:a6:f1:3c:
a0:bd:34:f9:8f:ac:ef:12:2e:90:b3:ff:6b:9b:25:6e:5a:15:
9f:37:f7:23:b4:2d:15:61:59:f3:e0:2f:ac:07:7a:d6:c2:1d:
c8:78:a2:8f:5a:11:db:fb:35:ac:61:7a:73:4a:a6:8a:b2:74:
cd:79:57:f0:95:42:a7:07:88:56:8f:6e:1b:5c:9a:fd:a7:eb:
19:28:bb:c2:63:b1:9e:20:45:fc:3c:2c:2c:35:c5:1e:91:82:
2f:de:a2:5a:73:84:8d:9c:0f:99:c9:12:53:ab:25:e8:5f:96:
e4:c6:cc:9f:cf:8d:cf:59:c0:d3:96:5d:a5:61:cc:e2:da:02:
68:4c:07:c8:e1:e6:0e:d2:86:0d:b2:e9:aa:c7:ee:2d:2e:dd:
8e:f2:a7:7f:cc:0f:f9:c6:85:8d:10:d5:a4:08:61:6e:1c:50:
6f:56:08:79:a0:b6:21:42:35:cd:06:7e:35:80:f4:47:00:b5:
a7:4c:81:67:1b:17:f7:c9:59:06:fb:f5:3f:10:7d:2f:66:e6:
2f:a4:e6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:13:37 2025 by rpki-client