Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
File: I3CEcS_euxv8WowCYtkZqKpEBgM.mft (raw, json)
Hash identifier: 9qzkugw2qpMyFWOYUDgBb6vpixwvsUtyk4dRLzvKmj0=
Subject key identifier: BC:DD:A1:39:2C:BF:3A:4B:A5:2F:79:E1:54:0E:3E:14:F5:61:F9:A7
Authority key identifier: 23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
Certificate issuer: /CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Certificate serial: 01974E57F3B1BEA15FCB1ED38EDC499E4930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
Manifest number: 1585
Signing time: Sun 08 Jun 2025 07:01:16 +0000
Manifest this update: Sun 08 Jun 2025 07:01:16 +0000
Manifest next update: Mon 09 Jun 2025 07:01:16 +0000
Files and hashes: 1: 7OwvAno2l244O2H5lKoBs2hR5TM.roa (hash: e9tNLBCWuvvFCB2/sKRegknsmXrZcwUi3KAU/8XQUJc=)
2: I3CEcS_euxv8WowCYtkZqKpEBgM.crl (hash: SNmsIRss0qat2tT9kX7rrimPV64rZq4K3QlH4W7df7Y=)
3: xGUXIbAREMv-V1pysPMGqJPyYrQ.roa (hash: 8GaytT9yxWXHKMLSPliggwp+AhOIaRE5tpGj4v/Bs/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:f3:b1:be:a1:5f:cb:1e:d3:8e:dc:49:9e:49:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Validity
Not Before: Jun 8 07:01:16 2025 GMT
Not After : Jun 9 07:01:16 2025 GMT
Subject: CN=bcdda1392cbf3a4ba52f79e1540e3e14f561f9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f8:b1:bc:62:29:21:a0:95:3e:f1:33:cd:da:
f6:53:b2:12:d6:2d:ae:0d:cd:44:1f:8c:00:5e:83:
3d:b6:c0:14:4f:87:f3:e9:49:21:24:32:b7:ae:95:
3b:81:c5:37:f6:e6:41:96:c2:71:3e:40:cf:15:08:
a2:cf:db:5e:6c:0d:1b:83:ea:57:a1:1b:aa:d7:09:
e6:91:be:ea:94:47:0e:5a:81:66:3b:e8:d2:f7:be:
c4:f2:30:2b:8b:a8:c0:19:cf:80:ff:b9:d6:08:3e:
66:9a:2e:59:0c:78:c2:fb:6a:0a:d6:12:99:90:c6:
8d:12:15:8c:77:f4:f9:f3:cf:7a:fd:e2:27:d3:90:
18:93:94:dd:f0:53:37:49:18:aa:98:5f:e3:e4:32:
6c:d2:22:2b:81:1d:6b:a9:79:11:98:9d:09:c6:c3:
da:ee:46:cb:2e:da:46:9a:9b:4a:7d:1a:61:3a:1e:
5d:f2:97:78:84:10:46:a6:df:25:9d:96:d4:59:0c:
68:92:8c:80:6f:52:e6:18:24:f6:dc:6a:0e:bf:19:
44:03:89:8b:7b:33:4e:f1:2c:2f:7f:7b:f0:01:e3:
28:c1:7a:9d:9b:e3:49:38:34:e6:e3:8a:2f:52:e1:
13:62:91:ab:2f:00:df:04:a4:de:a8:fe:6d:60:81:
74:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DD:A1:39:2C:BF:3A:4B:A5:2F:79:E1:54:0E:3E:14:F5:61:F9:A7
X509v3 Authority Key Identifier:
keyid:23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7f:86:ca:2a:83:b7:2f:7e:94:81:23:e6:ac:5e:51:de:4d:
9c:48:7d:67:03:89:bc:e3:b1:73:cd:c7:29:d7:6b:dd:7b:5b:
d8:61:91:0b:8b:12:87:1d:16:0a:7e:ef:38:a4:38:c9:2d:43:
41:99:e0:b0:c1:d5:1b:1d:c6:73:93:f6:82:db:29:6f:0f:6a:
79:c0:b3:b3:26:f1:c6:13:85:7f:ee:53:51:f7:7d:49:cb:3b:
74:66:d2:73:66:8b:49:f2:d5:30:d5:73:af:31:ea:27:df:d2:
b2:4b:de:93:c5:0d:57:70:b7:30:69:e1:45:a1:fd:4f:86:e0:
48:cf:64:1f:8e:a2:9f:87:4d:4b:61:80:80:01:b3:e2:c6:b3:
0c:38:d4:d9:bb:32:5b:1e:65:3a:12:7a:29:13:fd:9c:0a:0c:
f4:52:d1:53:4b:88:79:5c:62:f9:77:7f:29:ab:33:a6:71:9d:
21:a8:45:c3:f9:fe:a9:40:56:ea:6f:b0:88:ca:27:76:6e:5a:
ae:0b:8b:af:f3:22:92:56:e2:44:93:bf:02:2d:65:19:95:b1:
80:bb:bc:60:8e:ef:c7:1c:4a:36:c3:ff:53:66:ed:df:cc:d1:
80:7f:28:49:08:3c:e0:92:e3:6d:69:5c:f0:e0:dc:d6:10:7a:
c3:64:f8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:12:29 2025 by rpki-client