Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
File: Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft (raw, json)
Hash identifier: D/6zpdYQ306vslZ411dssJLEajGQK5+xVVAuZUk+XEE=
Subject key identifier: AB:39:49:FC:F7:26:8A:F8:A5:72:B7:95:EF:80:C5:2C:21:5A:6C:59
Authority key identifier: 23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
Certificate issuer: /CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Certificate serial: 01976772255A2235488844C932645A1227EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 04:00:23 +0000
Manifest this update: Fri 13 Jun 2025 04:00:23 +0000
Manifest next update: Sat 14 Jun 2025 04:00:23 +0000
Files and hashes: 1: 1--lfY911D4o-n0x13kTzxgPAa1c.roa (hash: 7jYLrsmco67v6YLtE1rUNiJwEOZGyK+AZuLqYtKHcu0=)
2: 1-PLlhObhI2KvU31PH_oGB4eDG5U.roa (hash: h2JQLRGR8RDG0rSKaLT0jUCHodG0PW/TX0LlgI0i4Qc=)
3: Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl (hash: ijyz5lMPdi/4VAQ4ZaHz6e8J7E5QdKpvXKbc6vTHS7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:72:25:5a:22:35:48:88:44:c9:32:64:5a:12:27:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Validity
Not Before: Jun 13 04:00:23 2025 GMT
Not After : Jun 14 04:00:23 2025 GMT
Subject: CN=ab3949fcf7268af8a572b795ef80c52c215a6c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1a:d4:87:11:58:6c:83:98:30:e9:50:7f:8c:
d5:70:98:a2:c7:36:3f:b1:0e:17:82:02:f0:fb:9a:
9b:d0:90:93:24:3e:63:0d:41:eb:a6:3b:b6:24:95:
56:0f:1c:3a:ff:65:e2:76:45:21:8a:cd:e8:4d:f0:
da:af:a9:52:a0:68:f6:b4:41:a8:07:18:a2:c6:d5:
a2:0f:0a:9d:1a:05:d0:65:c7:7e:c5:09:9d:e5:86:
9a:3b:3e:e1:4b:5e:b8:e6:17:7b:73:13:05:07:93:
f7:36:97:3f:d6:4a:a3:9f:ef:28:11:98:4c:7d:7c:
8a:c1:aa:43:db:a1:93:fe:3f:77:c8:be:93:e6:2b:
fe:31:d4:95:d0:d4:0a:cf:a0:a7:d5:45:38:49:3d:
cc:f7:97:b7:8b:b1:11:19:9a:83:cc:15:e5:96:c0:
b3:45:cf:3f:db:49:5d:00:8e:34:ef:31:84:83:04:
51:54:8e:88:26:c9:f9:3e:f1:01:20:ad:47:15:8a:
86:7d:2c:29:36:9d:29:d2:8b:a4:7d:1a:0b:2e:05:
30:65:16:cc:55:ae:7f:0f:5d:ed:35:69:67:3e:5a:
53:4b:f9:79:25:5d:c0:29:17:8d:44:c2:98:0f:82:
4e:32:23:3d:b5:00:be:5e:c2:fd:a9:63:6f:ba:bf:
fc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:39:49:FC:F7:26:8A:F8:A5:72:B7:95:EF:80:C5:2C:21:5A:6C:59
X509v3 Authority Key Identifier:
keyid:23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:2f:80:e8:29:6c:34:63:23:54:d1:67:57:eb:4e:7d:7a:56:
dd:95:11:bd:e0:9d:79:2f:be:8a:71:3d:6b:74:b0:2e:19:af:
3c:fb:46:b3:25:7d:b0:87:39:51:7f:97:62:9c:05:90:22:a4:
78:39:f5:3d:c0:62:31:df:41:d3:3e:98:7c:95:8f:72:e3:b8:
49:32:22:37:47:b3:37:18:c5:96:0e:d2:9f:7d:1e:7f:7d:f4:
c3:cb:f0:a2:63:85:a6:88:f9:54:34:ec:05:c7:05:f1:6e:4c:
c4:91:97:08:98:ec:93:1c:d0:d4:1f:d7:05:41:f6:9f:ce:46:
ce:bd:40:9b:50:d1:52:12:db:14:92:29:d4:07:16:34:58:49:
64:07:d8:7d:35:cb:12:26:3a:a1:1c:fc:7a:7f:57:25:82:85:
87:bb:14:80:24:49:6f:ef:3b:e7:22:f5:22:12:01:5e:5e:96:
55:cc:92:81:0a:68:ee:5e:5f:84:05:71:91:a7:d8:ed:f4:62:
20:f4:73:75:42:4f:f1:11:33:fa:81:8a:c7:ea:45:c3:94:59:
af:90:33:e4:e2:f6:07:94:a6:18:1a:fe:0b:89:f1:d4:99:fa:
b9:01:dd:23:ee:68:5c:db:e4:f4:74:a4:d8:87:e5:2c:0f:f5:
56:4f:53:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 12:15:52 2025 by rpki-client