Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
File: IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json)
Hash identifier: 4gQb4vaMnjhklL+gSgu0PanKu/DxjyUJjwwq3bAqXdY=
Subject key identifier: 5A:4C:54:CD:4E:F1:3A:C9:F3:B2:F6:87:52:30:6B:6F:CB:42:57:4C
Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
Certificate issuer: /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Certificate serial: 01984B1C8B92D7BAE24BB91941063736F735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
Manifest number: 05D3
Signing time: Sun 27 Jul 2025 09:00:18 +0000
Manifest this update: Sun 27 Jul 2025 09:00:18 +0000
Manifest next update: Mon 28 Jul 2025 09:00:18 +0000
Files and hashes: 1: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: WWyr/g/mMIJGdx+YS8DVJNRkXGg21ip2QXhu+kevqF4=)
2: P4joPrMbyyf9eJU97dD_0zc8DJY.roa (hash: gl6GZ/HrB5BKfA9rjfcCYlZhjRwEwX8+Blcs80phGI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:1c:8b:92:d7:ba:e2:4b:b9:19:41:06:37:36:f7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Validity
Not Before: Jul 27 09:00:18 2025 GMT
Not After : Jul 28 09:00:18 2025 GMT
Subject: CN=5a4c54cd4ef13ac9f3b2f68752306b6fcb42574c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ff:76:bf:0f:cd:24:12:11:a2:4e:ac:f1:a5:
31:06:33:21:82:04:1b:71:f7:29:20:95:f1:11:02:
4c:e1:b2:08:eb:61:c7:32:e9:ff:3d:f2:86:0a:5d:
fb:da:94:fd:78:d4:da:10:dc:ed:3b:fc:5a:23:bb:
54:23:92:19:66:16:fb:f4:3d:e0:96:7f:0e:0f:2c:
e9:a3:74:10:9f:5e:be:14:e5:c6:0d:26:8b:bb:26:
83:0f:7b:5a:d4:91:83:e1:50:cb:91:71:e0:ed:4a:
f0:00:eb:2d:b7:65:a0:23:8d:ef:19:40:5e:2e:54:
4d:88:8d:7b:3a:db:01:44:d4:43:be:98:7a:15:4b:
06:9f:91:c4:64:68:15:cd:43:c3:12:d2:64:37:16:
38:d7:a6:9e:c9:90:d0:18:36:d1:ed:88:43:3f:d2:
f6:b0:5c:80:37:a2:80:06:86:e8:bd:fc:d2:d9:cf:
1b:fb:cb:fd:26:ad:22:26:15:ec:c5:ac:c6:7f:d2:
14:ee:39:f8:37:3d:ee:a5:0c:1b:fa:20:8b:5f:a9:
4e:42:e9:95:89:3c:ca:3c:f2:5d:42:9d:dd:58:63:
0a:40:3c:80:13:b3:5c:b3:34:ae:92:ce:45:2b:7c:
74:b5:87:c3:2a:a3:70:74:63:ca:11:b5:19:59:b1:
55:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4C:54:CD:4E:F1:3A:C9:F3:B2:F6:87:52:30:6B:6F:CB:42:57:4C
X509v3 Authority Key Identifier:
keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:54:49:34:9e:49:79:95:d6:d7:70:01:7d:d4:b3:1a:06:d8:
5f:38:30:2a:03:6d:d6:32:19:21:d6:8d:8a:d1:d4:3b:42:79:
1a:c2:07:1d:5b:e0:cc:6e:f5:fc:ad:47:da:3d:f2:15:19:64:
ca:9a:53:da:4e:1f:93:1d:21:e7:ab:8e:3f:a9:a6:85:db:aa:
3c:a6:59:44:a7:0e:61:62:f4:ee:3a:db:77:d0:eb:a9:4e:b3:
e1:f4:d4:7e:67:b4:98:e7:7f:5f:ae:60:38:08:6e:1e:c5:38:
c6:4b:83:53:c3:1e:89:fe:9f:cd:fa:a3:2c:3e:52:53:f8:b5:
b6:f6:91:9d:06:d1:5c:b4:7f:18:af:4c:9e:39:70:33:8f:cb:
c4:f5:6b:9c:3f:ed:06:53:bb:d2:88:ec:9f:46:1f:01:cc:41:
2d:d3:db:20:cd:df:a2:1b:30:65:f8:e6:96:10:9e:bb:ed:1a:
ff:ae:81:6a:0c:0b:ff:39:3d:ec:88:6d:27:29:f4:96:a4:a0:
4b:0d:c3:b5:6b:14:0f:fc:de:b6:90:88:86:eb:27:6f:b5:6c:
10:78:14:e2:2f:47:48:11:c2:b1:e4:cf:ca:9e:31:76:b2:39:
4c:04:9e:dd:cc:9e:e2:87:54:33:93:3e:8e:83:73:85:70:b4:
66:c7:9f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:39:16 2025 by rpki-client