Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
File: Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft (raw, json)
Hash identifier: XaU0xYiOAuXclqazMwJ37/Iib1wtO5uurdtQ+4mMLNU=
Subject key identifier: 8C:E5:94:5E:E5:66:1E:77:A4:EA:2B:1C:59:66:6C:DE:B7:1B:29:7B
Authority key identifier: 23:2B:BC:6F:51:CC:E0:1A:EA:AC:BA:80:F2:D0:D2:64:12:E4:7F:93
Certificate issuer: /CN=232bbc6f51cce01aeaacba80f2d0d26412e47f93
Certificate serial: 0197515899EC3958546BE7C8C5252CD03225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
Manifest number: 098E
Signing time: Sun 08 Jun 2025 21:00:50 +0000
Manifest this update: Sun 08 Jun 2025 21:00:50 +0000
Manifest next update: Mon 09 Jun 2025 21:00:50 +0000
Files and hashes: 1: Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl (hash: BnYJcZhBvw2A2SICXVVBz9ilBvrHAoc8Fg9X6lTqzUM=)
2: W7lSiLgEWw1PU3RjMuVHViCtMd4.roa (hash: Z1eudaBmI9GAn6czSjHaqw3jDN0IX6tghnkKM1CKFjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:58:99:ec:39:58:54:6b:e7:c8:c5:25:2c:d0:32:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232bbc6f51cce01aeaacba80f2d0d26412e47f93
Validity
Not Before: Jun 8 21:00:50 2025 GMT
Not After : Jun 9 21:00:50 2025 GMT
Subject: CN=8ce5945ee5661e77a4ea2b1c59666cdeb71b297b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e0:da:e1:bc:44:a5:d9:fd:bd:16:ad:28:c5:
f2:59:97:2c:2e:3a:59:e0:7a:4e:9a:8f:c3:f7:18:
6d:a3:56:88:c9:16:50:26:45:38:36:ba:c8:47:ff:
09:ed:60:87:bf:25:58:b4:c5:42:91:c9:ab:a3:ab:
7c:58:d8:ea:f8:3f:3c:35:a0:af:fc:3d:7b:ce:f1:
f8:67:80:c8:0f:74:00:68:51:a9:56:22:cd:8f:72:
3f:77:d0:69:23:43:c9:ad:33:ae:1a:b8:3d:16:42:
f0:5a:db:a3:56:cb:9a:f4:79:09:be:da:2e:65:c2:
b5:d2:e2:df:ea:21:5f:8d:9b:7d:e1:38:9a:ed:b1:
65:4b:2d:0d:00:a4:54:9f:fe:aa:dd:7a:65:f6:55:
3d:75:1a:68:ef:e8:87:87:0f:fa:cf:18:c5:03:bf:
8f:77:c8:c8:59:61:11:e9:c2:2c:f2:2f:dd:76:0c:
84:3d:ce:25:ae:9f:0f:7c:d1:3a:2a:a2:b6:d3:79:
67:f9:f3:85:41:16:53:f3:f7:19:5b:57:e3:fa:2c:
9c:6f:c4:5d:19:19:c9:8e:68:52:f8:96:7b:64:ba:
13:b6:6c:f7:e4:8d:b1:93:fc:c5:e3:4d:77:d2:9a:
72:d0:06:94:3d:e1:1a:a7:b1:04:11:20:4e:db:29:
55:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E5:94:5E:E5:66:1E:77:A4:EA:2B:1C:59:66:6C:DE:B7:1B:29:7B
X509v3 Authority Key Identifier:
keyid:23:2B:BC:6F:51:CC:E0:1A:EA:AC:BA:80:F2:D0:D2:64:12:E4:7F:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c1:f3:eb:d5:5e:4c:93:6f:1c:3d:2d:05:92:c7:36:3b:80:
50:b7:9c:5e:1b:21:b8:16:bd:d5:98:71:bd:07:77:5b:05:ec:
be:6a:8e:e4:0a:2a:69:b9:84:b7:a6:3c:df:37:9f:b4:6c:a9:
ef:eb:af:14:df:14:b3:91:83:0c:82:44:c6:b2:3b:04:65:f4:
1e:66:64:13:c6:0a:63:aa:9a:a1:58:a1:26:e4:6f:b3:30:67:
f0:67:e1:cb:fe:a3:7e:2b:45:fb:e4:f4:9f:ea:57:ed:4a:dc:
2a:6b:72:fd:7e:e5:da:5e:b3:18:36:9b:c1:c9:2c:3f:4b:87:
50:79:99:9c:85:a0:e7:78:41:f9:da:c2:b8:c9:e6:02:4b:bf:
d4:16:bc:6b:7b:bc:e7:46:ad:0a:02:12:a0:2a:4a:c6:26:42:
9e:ec:23:ba:3b:1b:fc:1a:99:96:13:fb:40:76:51:69:9a:5a:
64:9c:48:d0:5f:5a:82:e5:73:fa:93:a7:e5:64:a1:a0:11:b8:
53:aa:b0:f7:5c:ba:e2:a9:2c:39:57:cc:02:df:45:c6:89:77:
b1:1a:11:26:c2:71:c8:3f:57:a6:24:9a:dc:99:cf:c5:32:1b:
27:e6:f6:7f:3b:0b:e0:0e:cd:3d:e3:d0:a2:d9:58:f3:e3:2a:
34:d6:8a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:13:32 2025 by rpki-client