Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
File: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft (raw, json)
Hash identifier: wovdowqUVcA2qercPHpQ5bzw/R/lQJqFBOzyeH19bMU=
Subject key identifier: CA:44:A7:A9:86:C2:A4:33:7E:D3:8A:97:4E:B1:BF:4A:74:C3:36:89
Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
Certificate issuer: /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Certificate serial: 019747E7811A1675589B677D926C03D1BF1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 01:00:43 +0000
Manifest this update: Sat 07 Jun 2025 01:00:43 +0000
Manifest next update: Sun 08 Jun 2025 01:00:43 +0000
Files and hashes: 1: DE9IUhyQDVKAZFd3LetU9Q2xs6k.roa (hash: 4yKIJoSmqEpGXf1pIollJ7FnnZ1pkmaGTlVLtjz3pSc=)
2: H8-4BKw4Tio0v7fBDDkOvu0xYf0.roa (hash: KAd/cINuj3Zmkb8yZBl9rfV147mzpewaBmWKPtSwHrI=)
3: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl (hash: zEPvGgDPrQ6eUhpauMumk7fjpq7tjLYFvoHt+Z3HegM=)
4: j_UhRom1_CjoZ8ktPpSsCzemlX0.roa (hash: p3RE9tXJ28D2EkcXNDeylKcBqqXVLJJQRP9qM16ttXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:81:1a:16:75:58:9b:67:7d:92:6c:03:d1:bf:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Validity
Not Before: Jun 7 01:00:43 2025 GMT
Not After : Jun 8 01:00:43 2025 GMT
Subject: CN=ca44a7a986c2a4337ed38a974eb1bf4a74c33689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:84:86:eb:8e:ab:b4:65:1d:d0:07:93:54:12:
fb:24:00:cd:ce:1c:a1:05:8b:93:2d:8f:96:5e:9d:
ab:6a:74:d3:7b:5f:85:0d:be:9d:d4:6d:ec:1c:73:
8b:ee:df:8b:3c:b8:e4:8b:d8:a3:f0:c5:b4:d3:0a:
ba:46:c7:c4:b1:4c:2f:e0:9d:5b:bf:f0:1e:3b:07:
b5:cd:91:e9:cf:91:54:16:98:95:09:45:30:6b:66:
4e:06:64:1f:a9:3c:3e:cb:11:aa:a1:86:74:e3:af:
4c:5a:aa:a8:a3:6f:ad:3b:98:7b:0b:33:a7:1e:9d:
01:88:64:6c:7b:06:3d:e5:97:08:36:bb:c8:ee:a5:
c3:8f:cc:0c:60:15:89:21:d1:96:b3:e2:a9:49:0f:
61:73:bc:6f:5b:e8:8c:8b:02:66:19:55:fc:d0:e8:
95:b3:03:e5:59:59:af:70:42:d2:3e:50:60:69:c3:
19:1a:90:27:4a:f1:1a:20:75:29:69:b8:f7:1d:31:
04:ca:22:ae:78:aa:69:ad:2d:6e:00:03:0e:6a:61:
2a:1e:a7:27:4b:2d:cf:f6:c5:b7:d4:df:64:d3:33:
47:a3:95:5f:d1:50:2d:45:c5:9a:d5:ef:c7:a0:5a:
4b:7a:2f:4a:8a:82:83:2d:cb:4b:33:30:ea:fa:a6:
d5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:44:A7:A9:86:C2:A4:33:7E:D3:8A:97:4E:B1:BF:4A:74:C3:36:89
X509v3 Authority Key Identifier:
keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:7d:2d:26:62:9c:07:99:99:c8:a5:87:16:4f:cd:79:a7:29:
25:29:57:50:80:c2:72:86:bb:fe:70:9a:b6:37:b8:a2:93:8b:
62:71:80:6e:61:14:1b:8a:0c:80:d6:63:4a:2d:34:15:79:9e:
9e:88:56:56:08:6e:8b:4d:dd:ca:56:b7:c9:4f:c5:32:44:ec:
93:79:fb:00:f3:f3:fd:88:ac:b3:ec:0d:41:99:93:48:b7:46:
76:14:3f:66:23:c7:fd:f3:89:fb:9d:b3:ae:81:3c:2c:33:c3:
1e:80:cb:0f:9d:e8:4e:95:8d:5f:81:61:98:1b:05:32:a6:36:
5c:79:13:7e:a4:d9:55:43:53:20:4a:a6:c5:ab:80:86:1f:14:
39:e3:f5:44:2c:8a:a9:c4:2f:bf:2a:82:74:cb:cc:94:b0:c1:
64:19:c0:3e:65:14:f6:3e:5a:d8:7c:49:c0:e2:4f:f0:de:85:
20:2c:7b:ba:49:ec:88:f4:6e:02:bd:5f:32:6d:a9:b7:76:ff:
62:51:fc:a2:2f:42:42:de:af:21:99:d5:0c:1a:49:86:35:7b:
c1:a6:13:96:80:25:0e:73:18:ce:d5:80:9e:aa:d0:c6:80:02:
69:7d:31:8a:3d:ac:21:57:c9:bb:fe:a4:a6:1a:0f:ca:a5:6e:
a7:ce:e4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:42:49 2025 by rpki-client