Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
File: I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json)
Hash identifier: 6+WtUom/pCYIx9TCO6wbL/N8d+CKScNVNc83ml3Wauk=
Subject key identifier: 03:88:CB:8F:41:1A:5A:32:64:38:7E:AA:30:A5:B2:49:86:B1:F9:89
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial: 019738AB4FD0BBC4F92E34E8825CA46D1DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
Manifest number: 1160
Signing time: Wed 04 Jun 2025 02:00:40 +0000
Manifest this update: Wed 04 Jun 2025 02:00:40 +0000
Manifest next update: Thu 05 Jun 2025 02:00:40 +0000
Files and hashes: 1: Ai_jhfn0i9Wvxs1dcGNuIQFRbQw.roa (hash: Gw+sAwziSiWdDJ9jEjQB+Xypl/VPbgg3IFN9iDAN1Ok=)
2: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: xsnqvP0QBKP22yoN7C+Cnj5SZ4gpFv7NehJHkboTGAA=)
3: U3XsaJj-IFBktG-dXYEuz5kV62s.roa (hash: kenyyNekJ/vibROkcjE9SyGPN68bhSkOSO66LaGuIH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:38:ab:4f:d0:bb:c4:f9:2e:34:e8:82:5c:a4:6d:1d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
Validity
Not Before: Jun 4 02:00:40 2025 GMT
Not After : Jun 5 02:00:40 2025 GMT
Subject: CN=0388cb8f411a5a3264387eaa30a5b24986b1f989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e6:ba:be:83:e6:ba:f3:1a:27:59:3d:05:80:
5e:1c:c4:95:e8:4d:fd:6e:6d:db:14:42:d0:bf:3f:
59:9b:6a:be:d9:87:63:17:4a:24:fc:3d:97:99:41:
e2:5f:50:14:e6:c6:86:af:c6:28:96:dc:f6:59:07:
fa:21:4f:60:70:67:96:1b:95:18:2b:42:55:02:40:
f2:05:a9:f5:d4:e0:09:d8:63:18:59:bc:0c:e2:86:
1b:9b:58:bc:ad:4f:0c:2d:db:e7:9e:fc:55:f2:cb:
3c:a4:83:6c:80:28:34:50:76:7b:90:05:20:cd:16:
f2:1d:d2:87:20:a0:bd:a2:96:b1:de:df:78:8b:45:
af:b0:d7:10:de:69:67:3b:10:ee:59:ef:7b:54:a1:
24:ba:c1:f9:58:ff:6b:f9:4e:79:f9:91:ef:29:e5:
5c:a5:dc:e3:0c:67:90:91:f4:db:09:de:0c:4f:19:
92:c9:00:65:03:13:93:12:97:bc:88:8d:7d:11:3e:
b4:d1:a5:c2:e7:c9:01:ae:bc:65:ea:f3:77:d9:25:
eb:9d:39:5b:4d:09:2d:28:81:9b:05:82:c6:b4:50:
57:bc:0c:bd:9c:be:48:9f:4a:06:13:3c:94:cf:04:
a8:da:e2:60:33:8f:cb:7d:95:7b:03:e2:0b:4f:c5:
a0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:88:CB:8F:41:1A:5A:32:64:38:7E:AA:30:A5:B2:49:86:B1:F9:89
X509v3 Authority Key Identifier:
keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:89:6d:0e:ec:42:f0:cd:3f:43:2f:e1:2c:75:e6:53:35:b1:
25:a4:08:9f:53:08:f6:33:6a:a6:6c:f6:fe:89:6a:aa:09:b8:
14:7f:8f:8e:0b:e0:e8:26:a1:cb:7e:58:c4:16:f9:ca:c7:d3:
7d:af:d7:09:29:2d:98:e1:ca:65:5b:81:8b:7e:02:c9:4b:d5:
50:45:1c:d3:b6:d2:b8:af:0c:93:be:cd:3e:9d:9d:49:aa:ac:
2f:10:d9:7b:75:be:c3:a6:31:5d:77:0e:88:b6:bf:32:62:91:
33:55:15:57:f2:5d:90:5d:4d:71:98:c4:15:22:86:4c:c4:06:
d5:ab:db:72:37:f5:80:a4:da:01:4f:c7:74:a1:f0:fa:97:00:
98:42:c5:98:ac:da:7c:85:25:06:57:49:dd:b0:28:ea:5b:1a:
a5:92:5e:bd:b5:1e:5e:2c:65:68:ef:7b:af:f6:1c:cb:a7:5a:
5c:5c:27:f2:e3:0e:20:38:5d:c7:1b:0d:08:76:36:7e:e8:69:
07:8d:8a:cc:5c:d3:2c:aa:f0:88:25:d9:7c:ff:8c:18:a0:f8:
85:0e:f7:14:9c:aa:23:12:f3:7d:2d:43:fe:8d:bc:79:4d:2f:
47:0e:31:e2:57:68:5b:8b:56:24:c4:61:00:67:fc:4e:a4:51:
0f:f0:de:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:19:17 2025 by rpki-client