Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
File: I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft (raw, json)
Hash identifier: S6Gn1QLtFt4ft2/2iJQiG9uYB7VQJbjbYuiXTbUjZQE=
Subject key identifier: 89:7D:3A:0C:64:D7:D3:05:7E:41:1F:10:BF:55:CC:8A:E0:79:C4:4F
Authority key identifier: 23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
Certificate issuer: /CN=234cd34911cfce946a22ea84663738cdcc076d45
Certificate serial: 01974AE8DE47DCE5D16F394FDE3FD9A716FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 15:01:04 +0000
Manifest this update: Sat 07 Jun 2025 15:01:04 +0000
Manifest next update: Sun 08 Jun 2025 15:01:04 +0000
Files and hashes: 1: I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl (hash: /zg84u9qQXs2JVgRzv2BgDk/GXVYO1BSzF+RDImAx2Y=)
2: h4MNBNIqF_ThX6XaH2WdhshuJOA.roa (hash: rTGzgorMfX1eun7k8wcYtv0yi00PmZQby+9ZEZuIh7g=)
3: nJekGUdzLnW-TjQjig7_IehTMxo.roa (hash: 7EP+L4VTl9fIN/VTMWiTcp215tfBsK8IFYr8aaBuzJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:de:47:dc:e5:d1:6f:39:4f:de:3f:d9:a7:16:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234cd34911cfce946a22ea84663738cdcc076d45
Validity
Not Before: Jun 7 15:01:04 2025 GMT
Not After : Jun 8 15:01:04 2025 GMT
Subject: CN=897d3a0c64d7d3057e411f10bf55cc8ae079c44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:10:b5:5b:86:a4:1a:95:01:21:0c:5a:98:a6:
ca:fa:c7:30:2b:ad:14:44:a6:63:9e:c3:df:0b:bc:
4c:4e:98:43:75:e5:f1:e8:3c:1c:4a:c4:d7:4f:eb:
8b:5e:dc:8b:5e:a1:84:47:59:15:63:86:c9:ac:ab:
c4:2e:c3:82:99:78:f6:fc:ca:a9:f8:c4:72:ae:eb:
50:33:1b:02:0e:fc:82:10:7c:8e:cf:d3:c3:26:b4:
e8:18:0c:8f:d1:8e:d3:5f:91:e4:e8:7d:e2:71:5a:
64:a2:52:b8:f7:fe:13:a5:71:03:ef:8f:69:4d:70:
22:47:6b:85:ae:65:a2:ca:89:24:af:5a:39:0a:cf:
33:83:2d:b7:e8:69:b9:44:92:01:67:2d:2b:08:34:
c9:af:76:6b:95:8f:45:d7:9e:2a:8a:c8:cc:a2:b4:
e3:ae:d1:a1:d3:1c:a2:3f:2e:e1:8a:4e:54:7a:33:
e1:a8:99:06:5d:94:96:69:2a:b9:b2:64:46:33:5c:
b4:2f:4b:92:a8:dd:a2:25:ba:7c:ca:aa:da:55:d0:
2e:19:67:0d:18:40:06:9a:38:a7:0a:c7:33:53:bf:
c4:d9:27:45:56:4d:4f:aa:04:0c:2d:b7:11:45:6f:
19:1a:05:71:11:27:8e:f7:d8:e1:a9:ce:4d:12:49:
c7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7D:3A:0C:64:D7:D3:05:7E:41:1F:10:BF:55:CC:8A:E0:79:C4:4F
X509v3 Authority Key Identifier:
keyid:23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8f:52:20:c5:e3:67:4b:fd:0b:f6:e2:a6:b7:ad:d5:27:42:
94:46:a0:aa:3e:3b:7e:a6:dc:15:2e:e7:06:3c:c1:59:88:ab:
0c:a8:f6:ca:d1:51:bd:0d:b8:6d:df:3e:84:69:be:46:c4:7c:
9c:93:72:d1:68:e9:64:23:9c:94:7c:1c:8f:44:03:3e:10:4d:
67:a5:16:c9:ee:d1:ae:c2:a0:8f:b6:c3:07:a1:6f:56:d4:db:
7a:2a:52:1e:26:a2:56:3f:02:4b:c7:b0:50:48:de:08:1e:68:
a3:c3:59:82:39:48:ac:f0:b1:50:95:7c:f5:c6:ec:5f:75:45:
8b:87:cf:b9:6a:81:27:4b:ff:83:09:42:ec:1b:82:76:32:34:
bf:0d:16:57:7d:65:d1:21:4c:59:73:f4:85:1d:9e:bb:f2:1b:
fc:8b:42:8e:aa:3b:a1:ed:d4:ae:29:22:77:5b:af:87:9a:14:
ee:a0:f0:b0:29:88:32:67:7e:12:8f:63:80:dd:18:f0:d3:cf:
f4:99:dc:8d:16:d8:bf:fb:15:d4:3a:f7:ac:2e:8c:b7:3a:12:
47:c2:7e:21:9f:68:30:8d:fd:4e:0a:13:82:f5:c5:af:77:6e:
37:06:c5:6d:1f:d2:94:88:f0:93:89:ad:ea:35:55:12:cb:0a:
75:43:f2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:44:08 2025 by rpki-client