Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
File: _iT7KBKuLz1Nm7RYndcx5UaXkQk.mft (raw, json)
Hash identifier: KfAILFJCI24t+PA/3AMj74VVUmFa8JuYW2c7Hgrj6bM=
Subject key identifier: DD:F5:C0:32:54:33:E6:40:56:4A:04:89:84:38:FE:73:C8:C4:B0:18
Authority key identifier: FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
Certificate issuer: /CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Certificate serial: 019751C643CEC4E11BC3C35322AD28627ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
Manifest number: 115E
Signing time: Sun 08 Jun 2025 23:00:37 +0000
Manifest this update: Sun 08 Jun 2025 23:00:37 +0000
Manifest next update: Mon 09 Jun 2025 23:00:37 +0000
Files and hashes: 1: 7ivcRbHUq4tA4Hz9Wb386VjaBS0.roa (hash: CGbH34TXJ114G1ywTRowOQ13NrG2LKX6vQJmgAwZZz4=)
2: _iT7KBKuLz1Nm7RYndcx5UaXkQk.crl (hash: 4b9GSmfeuuLYX7kKIQpoi6m7hTZDdJ8W/m1pRdM6hXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:c6:43:ce:c4:e1:1b:c3:c3:53:22:ad:28:62:7e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Validity
Not Before: Jun 8 23:00:37 2025 GMT
Not After : Jun 9 23:00:37 2025 GMT
Subject: CN=ddf5c0325433e640564a04898438fe73c8c4b018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:c8:64:3b:6b:f4:33:ae:cd:91:b1:1c:b2:
5a:4f:c2:7a:7e:d5:49:e5:b4:0d:a6:53:64:e1:a1:
d8:0a:05:91:61:1d:84:ae:05:60:f0:e2:0f:3b:2d:
4c:ff:d1:7f:c6:41:b7:97:77:50:60:a3:06:da:b1:
c2:5d:0d:72:c1:6d:b4:7a:10:7a:47:88:92:29:6b:
c5:7b:f0:e1:d8:e3:95:56:54:d4:da:01:c1:5f:81:
2c:f4:b7:d0:90:6a:70:c1:0b:12:70:9d:52:d4:bb:
e1:ce:2f:45:c1:4f:c9:07:a3:ee:21:7d:10:d5:bb:
48:68:5b:72:b0:42:5d:4d:49:42:ee:e5:47:be:f2:
44:47:ae:38:ff:97:88:ff:0a:fb:42:6f:16:ab:e1:
2b:38:b3:57:f8:0e:13:2d:a0:c2:99:34:dd:76:fc:
1b:94:eb:2f:2b:36:38:ee:3f:6e:bc:78:80:7a:57:
93:cb:47:a7:0f:20:ce:9d:89:f5:91:e1:15:69:81:
3a:4f:1e:d0:70:5c:a5:69:73:70:3e:b8:08:e4:1f:
9d:94:94:ce:e8:a3:79:91:66:cd:99:e6:74:a8:9b:
de:1f:c3:e0:88:1a:84:7e:08:27:c8:2d:ca:12:97:
bf:83:70:8c:58:61:bd:af:fe:d6:9b:fc:71:9f:b5:
f7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F5:C0:32:54:33:E6:40:56:4A:04:89:84:38:FE:73:C8:C4:B0:18
X509v3 Authority Key Identifier:
keyid:FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:38:58:b8:eb:b4:f3:ab:5c:f3:f9:ab:23:18:60:de:5a:fa:
3d:0f:8e:09:9e:41:57:f3:1a:2c:11:68:82:84:55:ec:94:2f:
0d:2f:64:f4:80:72:12:c6:7a:f7:48:30:19:5d:c1:61:e6:1e:
72:18:1c:51:83:fd:19:2f:5e:c6:87:f9:18:f5:ad:46:ac:d5:
f1:ba:81:5f:95:5e:5e:aa:38:f8:41:e7:7d:8d:47:1b:48:f2:
52:43:b5:fe:3f:47:cd:59:5d:14:58:5d:03:5a:e5:c4:0a:e1:
10:0a:4b:5e:47:9a:5e:c6:ee:3b:4d:a5:64:37:84:c2:71:f4:
ef:ae:4a:85:29:e4:2a:c2:53:3a:ef:71:1d:57:74:e8:a5:d6:
9e:b4:9f:76:6b:2f:cf:c7:94:ee:7f:6f:89:6a:d4:97:89:3c:
b3:73:b1:e5:88:84:bf:37:51:f2:ca:62:7a:f6:c2:81:43:8c:
12:7a:69:38:8d:34:1c:3c:a9:c7:d4:4f:52:f3:e3:4e:fb:e9:
53:32:22:6a:3f:f3:e9:f8:a9:90:ae:f1:cc:cc:ac:02:6f:3b:
9d:a5:0e:31:98:03:3b:45:f6:e8:21:7c:00:3c:21:ca:01:87:
4c:64:42:32:ee:53:5e:d3:cc:93:8f:db:0a:db:b0:38:b4:85:
ed:21:30:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:05:28 2025 by rpki-client