Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
File: IcOUybOja2n57l-JNqL1G5XqzrQ.mft (raw, json)
Hash identifier: vPeTJmCmI2V/i+EqjtrwSO/7PrrnnCETzRvQphrAtoU=
Subject key identifier: 68:C0:A9:24:3D:38:CB:8A:6A:98:D9:52:D0:38:56:55:22:4C:B7:41
Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Certificate serial: 019747B0D960975409744DE48220EE35BD55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 00:01:01 +0000
Manifest this update: Sat 07 Jun 2025 00:01:01 +0000
Manifest next update: Sun 08 Jun 2025 00:01:01 +0000
Files and hashes: 1: HevIcw-udVLHAsRMuVL8AXS5DmE.roa (hash: /vwUjeGhMDVH5p9rxYTRis9U3GgQG40VBJ1bShqGwbM=)
2: IcOUybOja2n57l-JNqL1G5XqzrQ.crl (hash: +Uu70QTVTD8t+BUxq30jvqtBPs5KgL2gsd7/f69muNM=)
3: dfcipKIHJhkLM8tES7y9qnzOa0g.roa (hash: hdMZ+zVZPKGH8nt9Efyy+7bQ/S/VggiNWiYJsxgZkUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:d9:60:97:54:09:74:4d:e4:82:20:ee:35:bd:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Validity
Not Before: Jun 7 00:01:01 2025 GMT
Not After : Jun 8 00:01:01 2025 GMT
Subject: CN=68c0a9243d38cb8a6a98d952d0385655224cb741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:50:81:4a:16:6d:f9:5f:25:dd:45:64:f8:
3f:2e:f2:a1:41:2b:2c:db:e1:49:80:3d:8f:5e:d0:
c9:52:b1:e0:91:0f:a6:97:e5:75:10:ff:65:47:d3:
02:86:b6:be:0b:09:7d:cd:e9:61:9c:cb:62:7c:f2:
59:97:e5:7e:ce:4e:ee:4c:e4:39:72:3d:52:4a:b4:
96:7b:2b:b5:08:5e:ef:14:58:42:11:a5:6d:6d:43:
c7:9e:f0:70:1c:b3:38:6c:43:1d:44:fc:f0:2c:6f:
49:22:21:46:6b:ab:13:8a:46:f8:20:bb:6e:c7:5e:
b7:01:87:af:87:8f:57:92:2d:19:36:75:59:b4:4f:
d5:04:af:6f:9e:3b:e4:8f:ba:10:ea:0a:34:cd:0f:
53:f9:c6:c1:e8:2b:3f:e4:4b:ad:9f:3c:52:9c:83:
2c:dd:92:bc:f5:d6:0d:17:9c:f1:a4:eb:29:a2:25:
eb:42:8f:34:24:69:84:61:6e:06:58:89:24:f9:49:
e6:ae:d6:c6:e4:08:e8:12:28:71:fa:38:f8:82:11:
ca:43:25:22:25:09:e4:ca:cc:72:68:7f:85:2b:39:
af:2b:e6:cb:1c:ae:27:08:48:1f:ae:d8:e5:64:53:
e7:82:59:a3:3c:14:67:22:ea:ad:fc:f8:5b:f1:28:
00:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C0:A9:24:3D:38:CB:8A:6A:98:D9:52:D0:38:56:55:22:4C:B7:41
X509v3 Authority Key Identifier:
keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:61:10:9e:89:70:e2:09:ba:a8:dc:d1:16:9d:16:b7:28:f7:
5a:1b:99:df:e4:78:54:38:63:9b:4a:12:bc:d6:57:e0:7f:be:
51:37:6c:30:2a:72:0d:a0:d3:c1:08:fb:26:ee:b6:bd:49:89:
27:6f:ad:e3:92:8b:c4:8c:64:bc:4a:3b:33:93:3e:60:9d:07:
8c:b9:8d:6e:d3:e4:54:4b:aa:3c:5b:c3:7e:80:d3:8f:41:0b:
18:22:5c:e8:18:a1:d8:f0:c0:5a:09:b2:ee:2e:0b:75:9c:70:
20:9b:fe:a6:d9:d2:a5:53:34:01:93:f8:22:77:c5:c0:47:ee:
e1:7e:f0:31:62:d3:ef:4e:85:4b:9a:30:46:30:f0:68:87:96:
4b:50:ac:c5:53:50:8b:92:ff:16:61:aa:05:e0:d6:2e:14:a0:
16:6f:da:2c:68:a6:90:dc:0e:e7:7e:f3:37:d8:12:1f:c0:6c:
e1:a1:3f:cd:76:dc:52:ae:8d:38:0c:5a:36:80:80:f0:1f:a8:
9c:86:b0:4b:22:11:6b:b2:51:74:e1:9e:d9:ee:72:22:70:21:
c5:df:e6:2d:09:16:7f:42:8c:62:18:cf:9d:fe:54:6f:99:20:
96:d4:35:12:4f:79:3a:d7:05:3d:0f:60:da:b4:6c:4a:33:e0:
b7:91:f1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:16:39 2025 by rpki-client