Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
File: IQ2p568B3nVEj0kGqsQb0pZOiEc.mft (raw, json)
Hash identifier: 2i0EtEUUjGOlMW9k074Xp0f0+tCW9R/6E8zQfsOosyc=
Subject key identifier: A0:4D:8F:72:BA:FE:6E:7F:14:EA:EA:E4:64:E6:91:39:25:FB:0A:2E
Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847
Certificate serial: 0197364F17CCDC3FB5CD3A8255FA403402DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
Manifest number: 1577
Signing time: Tue 03 Jun 2025 15:00:42 +0000
Manifest this update: Tue 03 Jun 2025 15:00:42 +0000
Manifest next update: Wed 04 Jun 2025 15:00:42 +0000
Files and hashes: 1: 84db03xfYelGerORYCPaE18sIuY.roa (hash: mGsmynBl7jLseJdNkmqKYTcle2kapG2/B7E0rIACZPM=)
2: DWb6WF8DjwRTU0qXDx46BO4zwgA.roa (hash: CzOBQqTqajUkprVoUPDiYGmEDab6x3jR9YCHnFVJudw=)
3: IQ2p568B3nVEj0kGqsQb0pZOiEc.crl (hash: TfOy7r+vT4kZYlaDAE74Bb/FY0K/9ulowRtCP8lvdqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:36:4f:17:cc:dc:3f:b5:cd:3a:82:55:fa:40:34:02:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847
Validity
Not Before: Jun 3 15:00:42 2025 GMT
Not After : Jun 4 15:00:42 2025 GMT
Subject: CN=a04d8f72bafe6e7f14eaeae464e6913925fb0a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6f:e4:dd:cf:cd:27:2f:97:10:0b:d2:7b:4f:
f2:d7:a5:2b:48:44:44:2a:e0:4d:84:ce:66:42:0f:
64:c7:d3:b4:ed:8b:86:9c:d7:8d:98:13:af:c9:d3:
0a:73:e5:5c:79:b5:97:07:e7:5c:7a:38:1d:be:7a:
87:2e:9e:8d:95:da:1f:50:1f:34:fd:e9:40:20:93:
8c:6a:11:89:98:0b:3c:49:19:14:fa:6c:1a:1d:e4:
1c:81:0c:f4:42:17:cd:48:9e:26:09:03:39:b9:b1:
95:2f:25:ee:58:d3:c4:cf:ce:e4:fb:c7:e5:db:d9:
c6:6b:22:56:09:fc:a2:7e:d6:01:00:e9:8a:fe:4c:
29:a1:a6:ce:18:98:46:66:c4:fe:40:f7:62:af:23:
d1:04:ef:25:54:6d:f6:4b:92:ab:26:22:6e:11:76:
db:41:51:a6:5b:f6:46:40:3b:da:a2:d3:a2:1d:24:
3f:bf:ef:cb:ae:2b:a4:67:02:8a:72:b0:e3:7d:79:
c8:a8:0f:5f:31:01:7c:b8:d6:29:d2:c5:dc:20:aa:
28:13:8c:8e:03:78:c4:3b:0e:07:59:fe:1b:79:a7:
39:ed:13:bb:a0:5e:c3:a7:79:3f:f4:ba:ab:ce:a1:
c8:7a:e7:b9:0e:74:f3:d0:26:36:aa:82:85:d1:ce:
44:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4D:8F:72:BA:FE:6E:7F:14:EA:EA:E4:64:E6:91:39:25:FB:0A:2E
X509v3 Authority Key Identifier:
keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:82:e8:9b:25:6b:86:e6:1f:9a:b3:f4:8e:7f:62:44:69:6c:
76:e7:2f:5a:7c:2d:99:da:4c:19:5c:0b:ad:02:35:7d:aa:dc:
fb:f2:54:aa:f4:67:72:97:b9:b4:ca:96:f7:24:f5:70:8e:e7:
64:49:18:4b:9b:a8:cf:68:76:e8:c7:e1:92:a9:76:5d:f5:61:
dd:35:ff:0f:df:b0:48:9e:c9:0d:12:9b:dc:be:33:61:9e:83:
1c:51:8e:50:f7:1d:30:38:3f:d6:63:22:9c:a0:1d:07:cb:d6:
e1:e0:76:e5:12:dc:af:98:43:e3:3f:78:4a:dd:cf:6a:9d:4d:
85:53:e9:3e:56:3d:d7:ee:49:bf:06:eb:57:14:a6:e8:85:29:
e8:6f:59:f2:39:e4:92:54:89:e0:a7:6a:90:1d:f7:b1:78:05:
33:0b:7d:c0:5c:80:67:e5:0b:2f:db:77:9c:11:97:8e:f9:70:
0f:bf:a8:c1:87:80:7e:5f:e2:22:20:51:07:8c:a2:f8:9b:03:
cd:8b:64:2b:36:09:95:b8:1b:18:b5:df:5a:ab:1a:8c:3c:a0:
d5:f9:a0:d8:6e:be:2d:19:d7:44:b2:ad:b6:51:c6:75:da:fa:
22:94:88:d6:fa:8b:ec:2a:02:f5:4e:55:c4:e6:97:f7:14:76:
de:3d:a7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:12:50 2025 by rpki-client