Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
File: I02TlaK6I5y50njrWJty7VyWctE.mft (raw, json)
Hash identifier: V0Hck6wY6uQKnQNZwbAlibWEAwgS3S9JsGAEL5876is=
Subject key identifier: F3:93:2D:A1:2B:6F:F5:8B:6F:1F:C8:ED:48:8D:D4:A0:B5:EC:BC:40
Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
Certificate issuer: /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Certificate serial: 01974779C2640996B72FD22DBFD02BAEADF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
Manifest number: 0FC4
Signing time: Fri 06 Jun 2025 23:00:51 +0000
Manifest this update: Fri 06 Jun 2025 23:00:51 +0000
Manifest next update: Sat 07 Jun 2025 23:00:51 +0000
Files and hashes: 1: 1rz_9CUxf9DVS-YE4VuUc49q_EU.roa (hash: UNeHGEwryJnNi0oicKcUP2+AX+MdC5294S5To8LCDxA=)
2: I02TlaK6I5y50njrWJty7VyWctE.crl (hash: fgthVRYhJlIG1I5aJaKNX3N5QX7qwVl/ZqLjT2Aiwmc=)
3: JuGf7pzc4HCrM3We2--OeQqSX4U.roa (hash: H4A47OUP6tLe0HcSGtfbX99Pdjm0iQtczsTWsqdmMN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:c2:64:09:96:b7:2f:d2:2d:bf:d0:2b:ae:ad:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Validity
Not Before: Jun 6 23:00:51 2025 GMT
Not After : Jun 7 23:00:51 2025 GMT
Subject: CN=f3932da12b6ff58b6f1fc8ed488dd4a0b5ecbc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:57:3c:5c:fa:cd:83:92:34:e2:43:82:42:a0:
ca:f5:8a:97:50:e5:38:8e:15:29:49:0c:0a:f6:45:
f9:a7:89:14:f7:ca:9e:f3:f6:bf:c9:6e:1e:30:bf:
79:05:69:0f:49:ab:67:9e:98:cd:bf:c0:17:ae:de:
a0:07:1d:65:67:10:2c:b6:0d:58:ed:51:10:aa:d6:
0e:13:9a:47:eb:e9:46:b3:3d:fe:85:0f:35:fd:6d:
fa:90:60:45:cb:a6:3f:fd:98:6d:42:5d:a5:52:ca:
0b:6c:63:cc:f1:27:a0:ce:ba:ca:64:16:4f:05:11:
03:af:74:20:55:cf:c6:54:4f:3b:3e:55:ab:a3:90:
17:a9:18:41:b6:95:40:ac:cb:41:00:a8:49:85:6a:
8d:44:50:bb:e6:86:d3:66:c6:d9:69:71:94:61:b6:
78:e5:e3:6e:c0:3a:b9:78:26:ac:5a:d7:aa:07:6b:
ac:3f:46:a6:29:14:30:69:b6:55:33:25:54:be:24:
4d:97:64:02:42:6b:7d:d3:df:3b:15:3d:b4:6e:61:
79:6a:ee:4b:c0:2a:23:6f:45:86:fb:3c:33:2d:f6:
65:1d:aa:06:60:99:11:de:22:ea:08:62:6a:50:3e:
fb:4a:38:74:0c:03:ce:10:4b:48:17:81:45:21:8b:
b0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:93:2D:A1:2B:6F:F5:8B:6F:1F:C8:ED:48:8D:D4:A0:B5:EC:BC:40
X509v3 Authority Key Identifier:
keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:9c:c6:af:97:7e:d6:f1:f1:1c:24:1d:66:9b:72:8c:50:0c:
3a:17:89:60:fe:67:0c:0b:a8:61:74:bf:15:3f:36:84:96:8f:
f9:b3:59:5f:c8:45:c4:8f:29:6e:2e:10:84:11:de:24:3a:c6:
1d:9b:ed:f2:14:5f:83:45:b0:27:14:b4:99:a5:ad:7e:f2:ca:
33:df:d4:9c:ce:01:c1:33:7d:7a:4a:dc:3b:64:d4:2b:6b:75:
62:cc:9d:47:62:7f:b9:ff:63:4e:1a:76:7d:62:90:cd:f0:ef:
5d:ec:7b:70:11:0a:63:b9:be:7a:f4:ff:8c:fe:43:aa:e3:cc:
23:e6:7d:5a:e9:e2:ac:9b:f8:6d:81:8b:d9:5a:3c:bf:e0:d1:
0e:b6:ea:17:f2:4e:3f:d7:fb:5d:6c:73:cd:ae:31:f1:02:28:
50:c6:50:70:de:1a:b2:9c:d6:e9:be:64:ca:a9:b8:da:a9:1b:
cd:11:d3:80:2d:3a:69:6b:d4:6d:e1:40:22:e3:34:d2:32:c5:
3b:db:ff:21:18:3e:d4:d5:a5:a9:26:71:1c:30:a4:f1:9f:3d:
6d:40:89:96:4d:d1:b7:a9:6d:4a:33:a0:54:20:84:7f:4b:c9:
34:50:b8:5b:6c:d3:38:74:62:67:6c:9e:cf:7e:52:2a:1c:03:
4d:38:a2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:31:44 2025 by rpki-client