Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
File: itN6mTOwUsLxLvG48U108F_dthE.mft (raw, json)
Hash identifier: 4dz4Iu0jcDIm7+VpSaV/mJ1UUvT15KmhXfWPYFvYBjk=
Subject key identifier: 1B:BD:E6:33:7C:38:31:DF:B4:B8:30:DE:0D:BF:87:A4:92:A8:F8:E7
Authority key identifier: 8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
Certificate issuer: /CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Certificate serial: 01974A7AEC41AD028978CB10973A62917644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 13:00:59 +0000
Manifest this update: Sat 07 Jun 2025 13:00:59 +0000
Manifest next update: Sun 08 Jun 2025 13:00:59 +0000
Files and hashes: 1: JwgRDJiJNlMDAQ-P-K-E7oLdVEE.roa (hash: eWvYggxPbmUrtkETleY+0mXFUMuKDGQl8Ca4V2dhuzo=)
2: RE9aFykceNUyqQ5Yh55JiiN859A.roa (hash: h9rNiKJSEqsRDhT3jZgfTnHK3ITCLzU3oznaGDO3rok=)
3: itN6mTOwUsLxLvG48U108F_dthE.crl (hash: LZKpcWvHlBY4cCjOiBd7uCWeiDHy5Mg8lJ3o+AwqeaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:ec:41:ad:02:89:78:cb:10:97:3a:62:91:76:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Validity
Not Before: Jun 7 13:00:59 2025 GMT
Not After : Jun 8 13:00:59 2025 GMT
Subject: CN=1bbde6337c3831dfb4b830de0dbf87a492a8f8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:66:17:7a:8b:02:7c:02:6f:9f:f5:94:e4:94:
98:97:2a:e2:b9:85:24:e9:e8:63:98:79:55:3b:d2:
50:0c:a9:3f:62:42:a2:12:4c:b1:2a:bb:5b:63:18:
16:c4:b5:ea:7a:53:27:9b:ef:69:6b:be:be:73:47:
d8:0e:cd:3a:3f:28:29:97:ba:4b:21:f3:1f:16:a3:
81:f3:4a:6b:89:fa:44:96:45:d3:49:29:b7:e5:99:
f4:01:bd:56:79:93:5a:d4:60:45:7e:ee:27:78:ba:
e9:76:c7:27:da:1f:4e:6d:63:6c:cc:c1:42:e3:00:
1c:a5:65:1d:3e:52:ad:f3:69:23:6c:c7:d7:32:70:
ef:ff:2a:20:0e:90:ac:d6:8f:8e:14:78:18:ec:60:
a2:4e:a3:66:ac:8e:48:e9:1b:ac:42:9c:aa:1b:7b:
07:04:ef:b0:53:33:f6:86:db:38:69:95:c0:aa:15:
5d:52:16:35:69:61:63:f0:8c:02:aa:02:99:71:ec:
0c:28:82:16:07:41:e3:18:23:a5:75:2c:e8:80:fc:
91:78:7e:3f:2a:f9:ec:ea:cf:cc:06:17:1b:5d:cd:
63:6b:ef:e4:89:eb:86:0b:4f:ef:89:bd:7e:9c:b3:
fa:1d:d3:10:83:89:61:4d:5e:19:fb:b3:04:1c:9e:
87:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BD:E6:33:7C:38:31:DF:B4:B8:30:DE:0D:BF:87:A4:92:A8:F8:E7
X509v3 Authority Key Identifier:
keyid:8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:90:81:80:b5:f8:c6:ab:d8:68:d7:b6:fc:26:0b:d9:97:39:
85:a7:40:ed:88:59:db:ad:05:88:c8:dc:a6:30:aa:bc:69:73:
44:ac:3e:f4:c5:f9:ca:ce:09:2a:5f:9b:54:7a:7e:35:f6:11:
13:ba:fb:38:0c:84:a0:5d:43:e5:a8:04:0e:24:7a:e4:3f:df:
c2:f9:20:47:a9:25:ad:35:ca:ec:6c:d9:18:30:cb:cc:94:79:
01:5b:a3:38:0a:65:f9:33:33:21:86:43:be:01:67:9b:3a:e0:
69:87:3b:c2:36:68:68:0f:8e:d1:82:09:2f:37:06:a0:68:ff:
ce:2e:4a:09:a3:d7:cf:25:4d:e6:eb:30:f3:79:1f:22:92:73:
1d:43:2c:52:d7:72:b2:29:cf:c6:67:81:7c:b3:75:ca:02:2b:
bc:41:63:d1:22:fc:10:73:fb:c3:77:bb:c6:53:d9:03:44:18:
56:17:88:03:28:05:21:d1:33:e7:ec:bf:b3:a9:87:23:5b:ae:
65:34:0a:fd:06:09:1b:f3:da:11:29:58:de:15:27:88:e1:71:
48:2a:45:4b:e8:1d:fb:f4:9d:81:3f:b2:9c:f1:b5:60:2a:8c:
ac:8b:44:55:4c:7f:25:2e:a5:27:7a:4c:fc:93:ec:a7:3b:12:
87:7f:d7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:32:44 2025 by rpki-client