Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
File: I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft (raw, json)
Hash identifier: ORtqVMkGEZ0CT+kj4fnmK29a4Dnbx5eDNOyRTPwsuqQ=
Subject key identifier: 71:AB:6D:17:A1:5A:BD:E6:31:CA:56:51:BF:C5:23:2F:AE:C5:90:AC
Authority key identifier: 23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
Certificate issuer: /CN=238857660dc7fa60846f765b94cb69576255adb6
Certificate serial: 01974CD7759B55AA2E04048968801115B7DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
Manifest number: 1582
Signing time: Sun 08 Jun 2025 00:01:18 +0000
Manifest this update: Sun 08 Jun 2025 00:01:18 +0000
Manifest next update: Mon 09 Jun 2025 00:01:18 +0000
Files and hashes: 1: I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl (hash: U8w5QjgPirqevRIp2II1YcqeT7CSA4Frm2nWVK2wfoI=)
2: XHfhEGwfsHA5Cy6rVzKyCX0VS7I.roa (hash: r0CY6B9tn8PTb3kJeN+vQ/cBCfQUrTHL37aoDlJepRA=)
3: tcPEvHuX8bqS2YKyM4C5K4tHwxk.roa (hash: rKNoYxngd5L4bRt06ua2/XaA1SqXHMSPI/cKc0JvWoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:75:9b:55:aa:2e:04:04:89:68:80:11:15:b7:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238857660dc7fa60846f765b94cb69576255adb6
Validity
Not Before: Jun 8 00:01:18 2025 GMT
Not After : Jun 9 00:01:18 2025 GMT
Subject: CN=71ab6d17a15abde631ca5651bfc5232faec590ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5c:78:d7:37:dd:79:45:3e:15:d9:38:ba:3f:
6c:3b:4c:6c:cb:92:41:f5:81:eb:64:a1:86:87:37:
4b:5f:82:d2:37:58:38:a0:57:64:29:30:25:04:dc:
40:3c:c7:b1:1d:64:56:4a:49:a5:d8:36:a0:2b:a7:
1d:86:76:4b:96:86:3c:e2:0b:30:0c:0b:8e:75:f8:
2b:2c:1f:6b:01:19:f4:cc:f6:ca:72:2f:4b:c8:b0:
ad:d2:af:bb:fd:6e:6d:5b:d7:b5:a7:72:54:a4:46:
c5:06:66:e5:25:b5:e8:bc:c0:13:5e:f6:7e:03:e6:
2a:fa:67:f3:19:1c:3c:6e:a9:33:9e:14:d1:02:f2:
bc:1a:1c:a9:c6:8f:2c:da:6d:96:95:33:4c:04:91:
ee:f6:aa:25:c9:3b:87:eb:4c:37:86:50:7b:77:95:
15:4c:1c:19:68:63:bc:e5:45:7c:e0:a0:3b:6b:1d:
55:4d:11:19:f1:7f:c9:7e:03:31:22:7f:cf:b9:42:
b7:45:19:0c:c8:ef:c2:c4:3f:b3:de:12:7b:7a:27:
13:3e:d8:0f:19:0c:5e:f9:49:a5:31:ea:b0:00:0c:
17:0e:6e:a1:c1:40:d3:48:b4:70:6b:ee:7d:89:7c:
33:e6:b7:4b:b3:80:65:14:30:3a:29:0a:d4:b7:30:
68:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AB:6D:17:A1:5A:BD:E6:31:CA:56:51:BF:C5:23:2F:AE:C5:90:AC
X509v3 Authority Key Identifier:
keyid:23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a7:af:a3:43:2b:fe:1c:24:e1:b4:6d:62:7f:05:ae:80:d8:
de:11:da:d4:f0:f8:b1:f6:d7:f2:84:be:d3:9d:0e:7c:22:6f:
cf:6d:b3:e0:0a:c9:f8:63:91:7f:5f:8d:9c:ca:e5:d9:0f:1e:
eb:5a:5a:40:55:ac:ef:ee:c7:9a:e7:69:ff:91:9b:0f:2f:10:
1a:8c:a0:f4:43:9f:8a:1a:49:0c:f5:9d:55:15:a4:a3:df:d7:
3e:e1:c9:3f:33:54:70:9f:e6:8c:b5:2a:e8:cc:7e:fc:60:03:
37:05:87:69:b4:f6:28:c8:e4:aa:a7:c9:c0:69:2c:c5:ac:6a:
b3:0f:97:85:22:85:00:cd:76:28:a2:78:bd:db:a8:28:b6:e7:
ed:9d:6e:46:a0:9c:49:4b:5c:2b:b6:97:03:31:42:71:26:3d:
df:45:de:46:28:d6:9f:36:4c:c5:8a:51:35:62:5f:bb:ef:2d:
2c:e5:80:30:c5:4b:f8:6b:8b:67:d6:5f:39:dc:ce:3f:7e:df:
d3:58:32:18:02:91:8a:ff:8c:9a:28:6a:8e:49:df:8a:83:a0:
7e:e1:a5:31:f2:85:e4:0d:14:8d:79:87:30:c0:c3:99:6d:13:
30:03:70:b7:49:73:64:39:e0:66:82:ca:3c:62:b8:67:8c:f3:
7a:86:f1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:54:48 2025 by rpki-client