Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
File: IjayuK-mA20sjoMXc2-qpy2AxPI.mft (raw, json)
Hash identifier: XR/0xnBjE8YHg9iuSXOGDPtKBVtPI7i2uHXixQmvoyI=
Subject key identifier: F1:1A:89:CC:0D:52:6E:81:7C:BF:A6:33:88:42:9D:E7:0F:D6:8C:95
Authority key identifier: 22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
Certificate issuer: /CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Certificate serial: 019746D4D323BEEDCAA3ABCD1FCD4A31ED02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 20:00:42 +0000
Manifest this update: Fri 06 Jun 2025 20:00:42 +0000
Manifest next update: Sat 07 Jun 2025 20:00:42 +0000
Files and hashes: 1: IjayuK-mA20sjoMXc2-qpy2AxPI.crl (hash: DOxRX26Thr9dhmuBqGnqPIVA5joS+vjdLVcym6IexgI=)
2: JEagz34AmrWJSl5tWfv6gEtsLGA.roa (hash: 6ThacyL41jFB75SwEJNS97B98Umjv7cIvZNxvFFSXfI=)
3: spimqMKhC9PB1IAAapTxgzK4qRM.roa (hash: Uoz42yC9AHKp3g+1i18MCMkNcCBemOpgqQDvUXFhvIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:d3:23:be:ed:ca:a3:ab:cd:1f:cd:4a:31:ed:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Validity
Not Before: Jun 6 20:00:42 2025 GMT
Not After : Jun 7 20:00:42 2025 GMT
Subject: CN=f11a89cc0d526e817cbfa63388429de70fd68c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:19:fb:4d:cb:8f:72:9c:8a:13:9e:4f:49:42:
20:98:0c:3f:8a:3b:c2:a3:c8:8a:ce:29:57:d8:4c:
0c:02:d6:9d:f2:2f:62:e9:02:7a:b3:a5:f7:4b:4a:
67:c4:49:5a:cc:22:43:6f:1b:f3:4c:32:cc:aa:fc:
ef:b9:05:a1:d2:26:f7:6c:1b:92:09:0a:bd:ea:22:
0f:21:c2:71:81:1c:33:8a:d5:ee:71:15:f7:9e:73:
bf:3f:89:c2:16:59:b9:80:36:77:ab:b0:0c:5b:de:
d0:d6:a9:e4:3d:07:90:e8:3c:57:ef:57:0a:5a:a6:
3f:45:83:c0:e4:79:81:49:93:14:fc:01:cd:bb:96:
bd:27:56:82:ef:74:82:18:41:e7:fd:0a:0e:67:c5:
d7:a1:23:99:d9:3c:a3:44:fe:ae:a2:24:2c:4e:e6:
5d:07:47:39:b8:b4:33:1f:93:97:2c:7c:52:16:f3:
13:31:ab:43:81:ce:fe:46:94:0d:03:c5:ee:52:bd:
40:58:37:d9:55:9a:34:f8:ec:6c:13:7e:9a:92:9b:
a6:b4:4a:51:1e:81:08:69:20:1f:fb:81:2f:83:72:
57:a2:85:ad:2c:0a:a3:4b:f7:56:07:f5:27:45:d9:
e5:94:3d:a9:d2:91:d4:f4:71:29:b2:d7:37:fe:8a:
05:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1A:89:CC:0D:52:6E:81:7C:BF:A6:33:88:42:9D:E7:0F:D6:8C:95
X509v3 Authority Key Identifier:
keyid:22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e1:5a:1c:67:c4:38:ce:95:06:c2:77:17:04:80:b0:df:9e:
2a:81:b9:46:41:cf:26:66:01:43:e5:87:3d:49:88:f7:c3:ea:
ad:b6:05:a0:e6:b2:6b:aa:dd:44:12:72:75:eb:fe:ba:6e:d7:
89:54:8c:09:2e:d0:88:c5:b6:f3:dc:72:6e:ba:50:c6:39:3b:
f3:0a:20:78:05:fd:2e:9c:b6:40:c6:a5:f6:b3:c7:1a:c3:f4:
b4:6c:de:c1:13:14:e9:3e:a3:90:c5:fb:61:cb:20:69:27:99:
f7:89:f1:79:41:6f:fc:40:33:97:42:3a:5c:83:f8:9c:1f:e5:
4a:b9:1d:bc:20:84:c1:77:67:03:a0:fc:fa:2e:bc:93:df:a6:
0c:6e:f1:49:cb:f3:da:64:42:1c:ee:f8:f3:0d:e8:7c:82:95:
c4:37:e5:30:9f:ad:2f:93:26:fa:65:b2:c7:ef:70:4f:c5:9c:
99:82:00:0a:de:36:49:44:b4:a6:16:58:d7:e6:ab:45:4d:61:
cb:d5:ab:6b:63:c7:2c:2c:14:29:9e:40:a8:f5:6b:51:00:07:
05:57:6f:29:04:a8:8b:ae:8b:6c:89:d5:75:70:55:b1:89:0b:
42:e0:97:fe:30:5f:cf:fd:c2:7c:b6:aa:ca:45:2a:c2:3e:1f:
79:ce:81:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:11:59 2025 by rpki-client