Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
File: IjCHszf3R2yNYwSusIzuBX9L9pE.mft (raw, json)
Hash identifier: LsQ2hOCreKlaXbt4w+5n+ZUaRNJTstX0ZOWCJrOGq7Y=
Subject key identifier: D9:92:D2:50:C7:4E:54:08:F6:BE:8B:6A:3F:8B:31:47:B6:39:2A:D8
Authority key identifier: 22:30:87:B3:37:F7:47:6C:8D:63:04:AE:B0:8C:EE:05:7F:4B:F6:91
Certificate issuer: /CN=223087b337f7476c8d6304aeb08cee057f4bf691
Certificate serial: 019752352D8BB63388BAC982CB667A86B812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
Manifest number: 36
Signing time: Mon 09 Jun 2025 01:01:46 +0000
Manifest this update: Mon 09 Jun 2025 01:01:46 +0000
Manifest next update: Tue 10 Jun 2025 01:01:46 +0000
Files and hashes: 1: Bn1M99Q5tBtvDTvfZYaWs9lGXls.roa (hash: UYAuM2HQAJGmsbB/aQecotRTuL+/vxYhXSj3RQuXtrM=)
2: IjCHszf3R2yNYwSusIzuBX9L9pE.crl (hash: F/dW5mQlE07opJp6/TDnrgLn5qKWG2vZU7jJvRSl+lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:35:2d:8b:b6:33:88:ba:c9:82:cb:66:7a:86:b8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=223087b337f7476c8d6304aeb08cee057f4bf691
Validity
Not Before: Jun 9 01:01:46 2025 GMT
Not After : Jun 10 01:01:46 2025 GMT
Subject: CN=d992d250c74e5408f6be8b6a3f8b3147b6392ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1f:98:8c:b1:a2:07:04:b9:a2:a0:b2:3f:f1:
89:01:bf:65:4f:0a:4a:e2:e4:3a:5f:05:3c:de:18:
a3:86:f8:cf:8e:e7:85:c6:8d:90:bc:a3:4d:14:23:
38:f7:36:f9:36:1b:5c:72:2a:a5:d1:92:58:04:40:
de:d6:7e:80:ee:36:51:25:86:ba:8e:69:e1:90:c3:
86:b0:bc:f4:36:d6:ff:be:e3:1f:ea:41:1a:4b:29:
bf:47:24:90:f9:3d:09:55:fb:73:71:3d:be:ca:a4:
8b:2b:cc:96:09:60:cf:d3:99:35:ab:58:a7:eb:7c:
95:f4:0b:9b:51:c2:5b:c7:c7:c6:3d:bd:4a:4b:55:
be:65:8a:9b:c9:ce:90:3b:1b:c0:7d:b0:24:01:43:
b0:c6:e2:c9:b9:d7:8d:20:69:4d:b2:ec:9e:a1:97:
2f:c8:e0:df:ba:55:18:72:e2:d8:c1:04:70:07:41:
7f:33:dd:5c:d1:e3:7e:09:b4:a4:03:c2:af:10:b2:
d6:9f:2b:6e:ed:17:aa:ba:d9:4f:75:59:7e:9b:0c:
d5:7f:09:21:4c:b4:6d:41:55:77:16:24:13:25:39:
a6:52:64:04:8a:d4:c6:da:c6:6f:fa:8c:95:23:89:
c2:bc:33:1b:7d:79:45:0e:dc:b8:b8:e4:30:4a:6d:
8b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:92:D2:50:C7:4E:54:08:F6:BE:8B:6A:3F:8B:31:47:B6:39:2A:D8
X509v3 Authority Key Identifier:
keyid:22:30:87:B3:37:F7:47:6C:8D:63:04:AE:B0:8C:EE:05:7F:4B:F6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:2c:ef:9f:3d:05:a4:f5:c1:6a:06:f5:33:dc:b6:17:b1:81:
21:59:0e:1a:a4:2b:4a:af:0d:cd:6c:51:e6:f8:3c:f2:d7:40:
48:45:43:f8:e2:79:d4:55:ec:7b:14:e5:52:e6:54:c6:f8:81:
95:12:ea:89:01:8b:14:b1:8e:0d:23:95:07:f1:c9:23:c4:72:
39:e5:f2:fc:24:b6:ab:f6:10:57:c9:2b:44:5a:a9:87:89:54:
a1:fc:cf:7e:63:78:9c:db:96:59:ac:3f:0a:19:26:ae:51:17:
6d:51:58:14:14:24:05:ca:e0:91:22:94:0b:3a:2b:b4:1d:c8:
88:4c:30:3b:e3:74:53:45:12:6f:5a:e9:54:bf:7a:82:62:74:
b5:2c:90:78:03:8c:1c:cd:53:25:f1:b2:7a:6c:f0:31:d7:19:
b0:9a:9a:b5:bd:35:76:d6:d3:a2:ca:5c:8f:42:7d:e1:d5:3d:
c5:bc:ea:a3:89:2a:47:b6:e5:6b:a0:ca:a3:ec:2c:92:db:ab:
77:df:20:dd:e4:f5:f8:f6:db:c4:4c:ff:e3:12:ee:35:1f:2e:
c2:9d:22:63:2d:fe:39:f4:11:bb:99:d8:f3:81:98:2c:5b:f2:
f4:9a:f6:ae:e9:45:1c:e7:cc:d9:3f:52:0f:cf:e4:41:91:b6:
4f:e9:4c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:51:41 2025 by rpki-client