Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
File: Ib-nezzXgpM-XyVURdQorfvcoOE.mft (raw, json)
Hash identifier: PSnv9TcQVQblQds34JSNOsXoi3VtAGd+3URCzuMHUas=
Subject key identifier: E0:6B:35:9C:93:A0:12:15:79:55:5A:09:92:6F:2F:E7:0E:52:E0:8A
Authority key identifier: 21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
Certificate issuer: /CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Certificate serial: 01974FD7E9AF1FED2C9CB8C9E04199EAD102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 14:00:39 +0000
Manifest this update: Sun 08 Jun 2025 14:00:39 +0000
Manifest next update: Mon 09 Jun 2025 14:00:39 +0000
Files and hashes: 1: 4lN9UMCt9-jT04o2voesNzfPwGs.roa (hash: t3RT/PpcRecUqHyCeVTaRV/4YmAPhY6KAKsv8Og5F9U=)
2: ACmM5xMJG5d1YVOZ4RZKGVZYg9k.roa (hash: Fvp/3zg9VXW0brdKzJ0fdm3mkA4lR5zaksqsabjZcF4=)
3: Ib-nezzXgpM-XyVURdQorfvcoOE.crl (hash: wfUErUzuczkzCIGvgAflOvRmpZDBBsb0CLkjHc5mEfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:e9:af:1f:ed:2c:9c:b8:c9:e0:41:99:ea:d1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bfa77b3cd782933e5f255445d428adfbdca0e1
Validity
Not Before: Jun 8 14:00:39 2025 GMT
Not After : Jun 9 14:00:39 2025 GMT
Subject: CN=e06b359c93a0121579555a09926f2fe70e52e08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:f7:42:c6:51:25:f8:0c:a1:46:7a:c7:21:3a:
a9:c0:d4:78:01:6b:18:9f:17:62:2a:f1:b4:b4:59:
d3:a0:34:04:b0:42:64:82:b0:12:ca:3e:8f:9f:f5:
48:1c:b4:9e:0d:4d:c5:26:57:d2:2b:77:4d:73:91:
5a:0d:1a:cb:d6:90:3d:5c:e9:4d:54:7a:46:72:1a:
79:11:df:75:b8:30:24:41:1a:83:dc:c1:23:43:b4:
d6:cd:0a:28:8c:fa:65:5a:7e:f1:48:bc:a5:ba:e1:
5e:90:da:f4:c7:2e:18:be:0a:cd:da:61:f0:17:5a:
e8:0c:3a:48:89:ed:59:f6:5b:30:7f:23:15:70:62:
a7:4b:51:60:d1:0b:9a:1c:4b:41:9a:d8:b0:81:21:
c9:e4:8a:20:ab:52:bc:80:68:b8:02:6c:3d:67:e5:
fc:a8:54:8f:d7:a6:8a:ae:c0:bf:c1:68:31:03:a6:
68:28:19:83:c1:e4:90:f1:97:a6:2e:cc:dd:9b:94:
1b:e0:20:35:6c:26:a7:70:1d:51:29:4c:e3:af:7e:
3a:a9:57:bc:b0:86:d2:34:6e:c3:ce:67:2b:ca:d8:
ac:66:e1:0e:33:9d:d7:36:cf:6b:c8:c3:02:64:f4:
3b:5e:33:ec:85:cc:91:d3:24:46:89:85:46:c6:d2:
ae:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6B:35:9C:93:A0:12:15:79:55:5A:09:92:6F:2F:E7:0E:52:E0:8A
X509v3 Authority Key Identifier:
keyid:21:BF:A7:7B:3C:D7:82:93:3E:5F:25:54:45:D4:28:AD:FB:DC:A0:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ib-nezzXgpM-XyVURdQorfvcoOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9c7aff-d83e-4f51-9b96-5484c39b2d4e/1/Ib-nezzXgpM-XyVURdQorfvcoOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:0b:73:a7:61:90:bd:fe:7d:c6:e1:ca:dc:8d:b8:1d:a2:7b:
44:06:61:f5:e1:cd:f6:8b:56:20:03:6e:db:56:eb:5e:a1:c3:
eb:46:be:61:87:95:e5:f8:55:b4:be:d6:e3:2c:5f:9d:86:8b:
94:4f:9c:62:c9:5d:92:61:0e:4a:e0:d0:ba:6b:56:a6:e5:f0:
c4:71:98:b3:b9:ef:96:fd:84:4d:d1:ed:55:e2:24:c2:80:af:
d4:0c:22:bf:de:5c:26:e8:5d:3b:ef:01:66:5f:58:43:fc:52:
04:5b:4f:33:28:be:73:a0:d3:62:85:3f:a7:7e:93:d4:86:0c:
39:54:fd:b1:a0:a6:77:76:a3:11:6e:5f:49:c0:bf:63:26:8b:
aa:07:96:4e:ba:e9:6b:9e:d0:83:b0:94:42:f9:8e:60:b9:7e:
be:c4:40:e1:9d:66:04:97:b2:9c:55:02:de:ce:08:d0:19:58:
a8:ef:a8:4d:b2:3f:3a:68:93:13:74:3f:e5:1b:cf:de:2b:90:
d1:90:2e:c9:77:36:c4:a4:2f:8c:ae:20:c8:31:74:22:aa:28:
30:37:bf:f5:95:3e:fc:0a:2b:ae:75:33:0e:bb:9a:4a:41:3e:
6a:22:e7:20:69:c6:2a:9e:4d:e5:96:46:fa:16:b1:03:96:a7:
39:ff:13:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:14:46 2025 by rpki-client