Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
File: IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft (raw, json)
Hash identifier: WuhxXFDLpuJlKLpilZ6aG9oQZwL/hJFEMJkeIkWDjvs=
Subject key identifier: 36:B1:38:87:A8:94:F0:D0:25:3C:A2:31:04:6B:13:18:A8:0A:A3:87
Authority key identifier: 20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
Certificate issuer: /CN=200585361d51a72e7ba6308c0ceb160244831178
Certificate serial: 01975121463BE1CEDC3D76FDE3A72F578011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
Manifest number: 06B3
Signing time: Sun 08 Jun 2025 20:00:24 +0000
Manifest this update: Sun 08 Jun 2025 20:00:24 +0000
Manifest next update: Mon 09 Jun 2025 20:00:24 +0000
Files and hashes: 1: HbRQpBgObvXEU2PlNrEx4IzYigA.roa (hash: Zv7kNMXOsdDw3zZwNDMjdGrZy1Nvjep0YaEbodwv3Qw=)
2: IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl (hash: 81mwXqZm2Vn5NgY4ibnZHyaNmxIO/U5RwQWbWIDB+f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:46:3b:e1:ce:dc:3d:76:fd:e3:a7:2f:57:80:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200585361d51a72e7ba6308c0ceb160244831178
Validity
Not Before: Jun 8 20:00:24 2025 GMT
Not After : Jun 9 20:00:24 2025 GMT
Subject: CN=36b13887a894f0d0253ca231046b1318a80aa387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:93:c8:0a:dc:91:a3:53:c2:8f:e1:4d:81:f7:
e6:56:0b:6c:f1:87:36:46:08:9f:c2:f4:01:53:b1:
70:46:39:56:f4:6e:57:45:66:cd:b7:f3:7b:76:63:
10:36:22:8b:f5:57:cc:1f:a7:03:61:ea:31:41:84:
d5:a2:ac:53:89:0a:0a:3a:da:6d:b6:34:16:09:e0:
40:81:75:e1:c9:b7:90:63:53:34:78:e9:8e:99:68:
98:24:2e:7d:d3:23:8a:07:3e:5f:5f:cc:7d:9a:4f:
7e:00:1a:f9:2c:4c:b3:f3:df:3f:17:b8:eb:81:05:
fa:63:46:f6:e4:88:3c:fb:fa:a8:56:ff:70:41:2b:
33:e9:6b:76:be:82:bb:7c:2c:d6:d8:92:63:6c:70:
f4:79:69:f4:47:18:ac:26:64:be:29:c2:59:6c:f6:
11:22:a7:35:e1:2b:e4:fd:1a:64:c7:87:a7:4a:76:
07:ca:9a:c6:ab:d8:16:80:e0:9e:70:e7:17:60:90:
58:03:16:f5:a9:67:5e:ff:54:db:6b:59:fe:0c:8e:
1c:70:90:c8:e7:5b:51:d1:7d:3a:76:8e:c3:da:3e:
10:a6:6b:00:41:b7:a5:9e:3c:88:b9:ce:33:54:37:
0e:58:92:b0:42:ae:54:c0:ff:b7:a6:97:92:69:d6:
de:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B1:38:87:A8:94:F0:D0:25:3C:A2:31:04:6B:13:18:A8:0A:A3:87
X509v3 Authority Key Identifier:
keyid:20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4b:07:0d:24:95:95:8b:f1:5c:99:59:72:e5:f5:3a:3a:e7:
f8:de:c2:d1:77:81:d4:85:f3:a4:6d:ed:dc:69:48:45:da:b1:
b6:bd:c6:28:a2:f2:c2:a6:df:e4:f7:94:25:f4:22:9f:20:e2:
4d:b5:8e:14:a7:7f:93:96:fd:6c:46:c1:f4:5e:56:ae:2f:4c:
fa:04:fa:41:29:b7:e0:b5:80:84:4b:1f:50:ab:a8:25:57:52:
ee:0c:f5:71:8d:a0:af:fa:95:7b:ec:e7:a3:d4:11:c2:42:1d:
0b:1e:25:1d:d9:45:35:86:8f:48:e2:4b:4e:85:4a:8c:dc:4b:
04:9e:47:80:36:9d:aa:0b:8a:55:67:65:c9:76:01:fe:a9:b8:
f7:5d:71:b7:26:d6:a0:72:f9:02:f2:53:1a:fc:ff:aa:92:63:
4f:0b:36:34:cd:ee:e0:8f:72:d8:36:5b:50:f8:f3:a2:18:f2:
e0:84:9d:fb:98:f1:9b:bd:56:09:72:ec:13:65:e5:68:18:28:
2b:d7:fc:21:3d:5e:c5:bb:f4:85:c4:08:b5:b8:ba:dc:00:4e:
8e:4d:35:61:cd:01:13:48:fe:01:77:c8:26:db:9b:bd:b3:2d:
ba:53:af:71:7a:1b:b9:f2:63:61:cd:8f:3f:c5:9b:ef:e8:4c:
a1:72:c3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:47:31 2025 by rpki-client