Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
File: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft (raw, json)
Hash identifier: alJwMCY5fTEYsZN3U9M1KxzRlXyRHGpJSFgH4GHrHGY=
Subject key identifier: 7E:19:C4:D2:BC:15:C0:0F:95:E7:99:B0:04:7B:FF:60:AA:CB:26:BF
Authority key identifier: 23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
Certificate issuer: /CN=230e9ac64510fa391846bb139ab52b8001d58038
Certificate serial: 019750EABE012143F9F1E9AD4568037E19D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
Manifest number: 1215
Signing time: Sun 08 Jun 2025 19:00:50 +0000
Manifest this update: Sun 08 Jun 2025 19:00:50 +0000
Manifest next update: Mon 09 Jun 2025 19:00:50 +0000
Files and hashes: 1: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl (hash: B3b6cslcuZeX6P1mn7PkwtfqW6kIE6pt8l9hnS6eZVQ=)
2: UoyH2jgw3TjRmBGXcoIbjkHpXYk.roa (hash: 7Hn5Nml4HR5xVhJraj44LXb5goEfvTP/sHQKgiuE26I=)
3: pSCPepTx67SC5l3Ed1hdUBnE5IA.roa (hash: MWvK8q7nznQKhnSv15ZjQ+g2Xqx0IxpC4fGczjIPPSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:ea:be:01:21:43:f9:f1:e9:ad:45:68:03:7e:19:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230e9ac64510fa391846bb139ab52b8001d58038
Validity
Not Before: Jun 8 19:00:50 2025 GMT
Not After : Jun 9 19:00:50 2025 GMT
Subject: CN=7e19c4d2bc15c00f95e799b0047bff60aacb26bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:23:fe:bb:e7:37:af:a4:8b:79:b8:3f:1f:
fe:fa:36:3d:a1:57:dd:2c:41:07:8c:85:6b:81:8d:
56:06:33:eb:65:ae:1b:e6:43:78:aa:f3:33:9b:72:
38:2e:94:0d:e5:42:0a:88:2b:8f:6d:0c:db:f7:f6:
ba:70:91:7d:4a:9f:b4:7a:29:01:dd:48:6d:93:19:
5e:9a:f0:4d:f9:33:30:48:ba:5f:ce:7d:40:12:f4:
44:ec:4f:75:d7:44:15:d3:eb:bc:4c:c5:e9:f6:3b:
08:63:38:1e:42:84:0c:41:00:c1:0a:1e:91:e5:38:
cd:46:95:df:36:87:0d:2d:b0:2b:36:56:88:8c:af:
fb:dd:77:63:c9:dc:5c:14:93:83:71:90:67:9b:48:
7b:5d:a2:2c:5a:31:f4:75:37:78:be:ce:41:97:82:
e3:8a:2e:d9:83:76:1c:93:7f:ca:25:cd:0c:e6:dd:
34:33:1c:57:24:08:a7:22:91:75:64:39:30:05:23:
3e:02:ee:dd:3e:59:5b:fa:ec:0b:7a:33:8f:21:13:
c2:5f:4f:09:e5:fa:01:9c:9c:83:fb:5b:cb:43:29:
9e:c7:1c:72:84:c6:3c:76:92:64:f5:6f:6e:91:bb:
1e:c9:5c:c2:81:74:34:38:f1:06:ae:88:ee:5b:ed:
a5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:19:C4:D2:BC:15:C0:0F:95:E7:99:B0:04:7B:FF:60:AA:CB:26:BF
X509v3 Authority Key Identifier:
keyid:23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b9:81:79:4d:3f:57:9f:93:61:fb:2d:85:a0:15:b8:bf:39:
71:25:cb:4f:47:cb:82:71:5c:62:96:27:1a:ca:6d:13:08:12:
85:b1:41:5e:f9:b0:60:28:3f:16:86:dd:aa:bf:f0:d3:39:16:
d4:f3:30:77:4b:37:97:b5:0f:76:21:57:40:b2:1e:f3:a3:3f:
28:4d:0b:4c:00:70:dd:23:e0:36:2f:df:62:2f:bd:0e:14:4f:
12:18:55:4c:52:f1:07:ed:06:4c:7d:9c:81:b8:90:1e:85:ce:
cb:0a:c9:d0:bf:8a:cd:16:c6:48:5a:5d:df:6d:d8:9e:ae:ef:
b2:6f:e1:ea:8a:b4:79:de:2b:e2:9a:86:f6:97:8b:cf:e7:71:
69:5b:e1:b8:a5:4e:ea:7d:e1:59:24:f6:75:5b:74:49:68:29:
bc:32:a4:10:5f:79:38:76:07:e2:62:fa:e3:14:7b:9a:cc:e5:
52:08:85:71:64:de:8d:17:66:57:87:e4:eb:93:99:04:cd:1a:
22:28:38:18:22:30:20:49:ed:c7:ca:46:74:67:8d:55:ef:25:
7a:50:a1:a2:4f:bc:5c:f6:b9:25:5c:b1:ea:63:c6:fc:2a:32:
c0:3f:fc:0f:2c:00:1f:68:fb:f4:86:79:26:65:b7:f6:53:35:
d5:5b:33:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:38:32 2025 by rpki-client