Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
File: IT4dUNUiiL7oDupDVXcBhxJAm74.mft (raw, json)
Hash identifier: 621DdbqKGzFH07I3C4k1Eq892aQHO4y7KNUhDDN1VAM=
Subject key identifier: 40:04:BE:3C:45:72:46:0B:1A:54:69:F6:ED:40:51:47:7D:18:8D:B8
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 01974A7B1B803BBB1909C46D3165AB039496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
Manifest number: 10C7
Signing time: Sat 07 Jun 2025 13:01:11 +0000
Manifest this update: Sat 07 Jun 2025 13:01:11 +0000
Manifest next update: Sun 08 Jun 2025 13:01:11 +0000
Files and hashes: 1: 2N_zpLQwrwSyRkgYGfDIDrZmRX8.roa (hash: CWXjSwQLjKOG0et0xzN2NEw5nAJl4/WbqLQdi9+PdTE=)
2: F5qz-Vy2ncltsniwS8n2KgCCfq0.roa (hash: kxMCsu4yD7h4P+QzcS37eIb+y0MEuK5iSa4JgSytJ7M=)
3: IT4dUNUiiL7oDupDVXcBhxJAm74.crl (hash: 9eg4OZ4XKxhYg43JAFn7PA5eJam5GAqAZlCY+yj/JaA=)
4: StSC9N03azFTttR3EoIav2MRsZc.roa (hash: Cu2Gg7GKVcYUuysW1qolVhXM9Kgp01W96yjaPNDKJxk=)
5: yuBu_3gHtbd-ZA0cmziwRxPp40Y.roa (hash: 12MkinUl6y/dxpUnE9iHGFhPa61KkEanTpa0XWLfanw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:1b:80:3b:bb:19:09:c4:6d:31:65:ab:03:94:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Jun 7 13:01:11 2025 GMT
Not After : Jun 8 13:01:11 2025 GMT
Subject: CN=4004be3c4572460b1a5469f6ed4051477d188db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:65:e9:f5:d8:f0:d6:f3:6b:d2:7c:a3:62:16:
7b:d1:60:4b:ce:93:2c:6d:30:ca:ee:b2:3e:06:dd:
e5:67:8f:f6:9b:0d:b7:4a:cc:17:c0:66:d8:49:e9:
b1:fb:98:8b:1e:f8:db:00:5b:40:d0:80:d9:af:58:
75:59:86:2c:cb:60:f2:6b:35:97:2f:80:d9:ef:08:
f8:5c:ea:4b:40:c8:28:43:5e:fc:c8:38:dc:4b:02:
cf:c1:09:c3:49:b7:83:c8:76:5e:62:24:a2:65:fd:
ef:12:32:a0:f9:90:01:5f:f5:6d:71:b5:e5:97:89:
26:ff:ce:7d:0d:b8:77:eb:a9:d8:2e:21:31:14:8d:
00:d0:9f:a6:db:21:55:18:b4:04:e6:3a:52:5b:a8:
25:ac:a4:a1:b1:f7:5b:c3:fa:4d:a9:11:08:31:f2:
fc:82:f8:41:75:b5:3e:b1:8e:77:ea:28:69:cf:c4:
91:85:0d:42:26:9f:5d:ab:e9:68:e1:d2:bc:69:35:
7b:49:62:c9:09:15:91:c3:57:d5:62:d3:e5:a2:a5:
bb:df:a4:8b:b8:64:b8:d1:8a:0e:b5:42:e0:8f:84:
df:55:57:30:36:b3:ef:79:17:58:44:34:9c:8f:86:
b2:30:74:4b:ae:07:04:53:3c:fd:fb:a6:37:b5:6d:
76:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:04:BE:3C:45:72:46:0B:1A:54:69:F6:ED:40:51:47:7D:18:8D:B8
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:55:73:58:e5:17:3c:79:b0:18:ab:c1:ed:0a:fd:de:18:ef:
4f:33:6f:79:9e:f2:5f:a9:d1:44:f4:65:fc:b1:88:72:0d:87:
e1:d6:b9:24:6a:43:64:e7:13:7d:32:02:5a:35:af:80:d2:27:
38:05:d3:c1:63:e8:c0:e2:e7:b2:66:c5:78:1a:2c:65:42:2d:
96:4f:5a:68:7c:17:a5:29:ef:9e:d9:97:5b:f5:09:1c:e7:fb:
60:0c:a8:ec:90:50:b1:78:b9:bf:87:2a:62:c3:ba:ee:03:2c:
7b:f5:ed:50:3f:25:a3:14:2b:ab:41:4a:a3:06:a2:94:68:c8:
a3:bb:ac:85:5b:e4:33:19:fb:f1:f2:db:19:50:58:4d:eb:e2:
46:4e:eb:9f:75:ea:09:70:dc:34:ee:24:59:77:ab:ce:28:06:
1d:d4:28:66:a8:3b:57:90:be:eb:b4:4d:65:b1:0c:19:2b:e0:
c4:6e:6e:db:2d:98:1a:7d:91:e9:9f:17:e5:f5:d4:84:a5:7c:
7e:82:a4:ae:20:8d:ff:49:b0:14:cc:27:e1:78:66:9a:0d:c8:
30:74:3f:d5:d3:58:70:7d:6c:a9:6c:8f:a3:81:31:78:d4:83:
71:1f:13:0c:3f:24:d9:7d:a9:a3:91:ed:c1:c9:05:e8:df:e9:
e9:f0:4f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:22:33 2025 by rpki-client