Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.mft
File: IZUnwiTwCiiy9MtOExLXSNXKUWk.mft (raw, json)
Hash identifier: m18gMwDFM+/vTS5a8RPZowGk/Rcel1DEmkJtTCl9/Tg=
Subject key identifier: 76:AB:63:E9:BE:82:3B:DE:2D:48:B1:10:27:27:21:28:15:3E:D3:BE
Authority key identifier: 21:95:27:C2:24:F0:0A:28:B2:F4:CB:4E:13:12:D7:48:D5:CA:51:69
Certificate issuer: /CN=219527c224f00a28b2f4cb4e1312d748d5ca5169
Certificate serial: 0197470B75F1C066DE87BAB52D77E32013F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZUnwiTwCiiy9MtOExLXSNXKUWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.mft
Manifest number: 1579
Signing time: Fri 06 Jun 2025 21:00:22 +0000
Manifest this update: Fri 06 Jun 2025 21:00:22 +0000
Manifest next update: Sat 07 Jun 2025 21:00:22 +0000
Files and hashes: 1: IZUnwiTwCiiy9MtOExLXSNXKUWk.crl (hash: k5u71TGyb0jywt3TVItBq0WCyA3U8f4oN56DslYgAgE=)
2: l8INnv3QTRexkISN97lg6HuKeCY.roa (hash: pDEsYARUuEJK1pYQPfyythtLkxkCfRaxj9c1qzwCEIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IZUnwiTwCiiy9MtOExLXSNXKUWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:75:f1:c0:66:de:87:ba:b5:2d:77:e3:20:13:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219527c224f00a28b2f4cb4e1312d748d5ca5169
Validity
Not Before: Jun 6 21:00:22 2025 GMT
Not After : Jun 7 21:00:22 2025 GMT
Subject: CN=76ab63e9be823bde2d48b11027272128153ed3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6f:76:26:6a:35:75:6d:af:52:46:b7:0f:49:
93:4f:75:fd:b2:da:9a:a8:67:59:6a:e6:98:29:f8:
4b:f1:96:b5:93:c3:b4:5c:14:ae:90:db:e3:10:0b:
e3:34:7d:aa:97:59:d2:51:84:29:80:be:c2:57:f2:
4a:6a:26:6e:bb:ce:a8:00:21:08:2d:3e:f2:dc:ee:
38:ad:02:33:49:53:6d:7f:80:52:ff:f2:33:fb:42:
aa:a2:c0:9b:6c:c1:cb:7a:f1:67:dd:f1:61:a8:2d:
4b:6b:ae:2e:bd:42:9a:3e:f7:54:eb:18:b9:d1:fc:
80:28:99:ac:13:d0:74:c4:27:6d:61:b4:d1:50:16:
e0:57:a7:25:f5:b1:78:17:c6:c5:8b:c0:ef:43:06:
63:63:a9:8a:83:e6:2c:89:58:ca:ac:44:3b:72:e8:
7e:a9:16:d4:ab:2b:e0:07:94:e5:52:13:e9:65:ab:
73:1b:5d:11:06:79:06:a3:41:9c:a6:f8:07:b8:8e:
bd:74:ce:82:a7:a1:61:6b:5e:b7:bf:09:70:75:13:
41:ac:d3:76:fc:d6:9b:8a:77:ef:fc:9d:ba:e3:08:
7d:d3:53:25:65:c5:12:6b:1c:9e:a5:e6:f3:99:c8:
f1:89:54:a7:07:d8:1a:00:3d:81:d9:38:88:61:e7:
38:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AB:63:E9:BE:82:3B:DE:2D:48:B1:10:27:27:21:28:15:3E:D3:BE
X509v3 Authority Key Identifier:
keyid:21:95:27:C2:24:F0:0A:28:B2:F4:CB:4E:13:12:D7:48:D5:CA:51:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZUnwiTwCiiy9MtOExLXSNXKUWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:61:16:43:d6:13:56:5b:cd:2e:55:e3:74:75:36:88:2c:2e:
7f:47:91:94:44:84:60:4b:57:98:91:4d:e3:f5:a0:a8:c8:13:
df:e4:46:a0:ba:f6:34:2a:b2:4d:d7:ce:be:d5:c0:5e:9f:96:
b8:e0:08:3d:bf:55:a8:3a:8f:db:20:70:ef:87:fb:2b:e9:92:
fe:6e:aa:25:5d:53:7d:a5:96:4a:2f:fe:44:6e:33:41:d3:24:
c5:b8:83:66:52:e2:79:41:f6:ce:f5:b6:d9:ea:a2:c4:43:d7:
ce:33:e2:d0:85:15:1b:7d:a9:4f:a3:53:90:19:cd:0c:45:74:
06:4a:02:dc:e5:bc:da:b8:e8:04:87:09:a5:8d:46:ba:a5:e6:
11:80:43:a1:85:66:47:ed:19:71:f2:79:9c:d0:ed:41:86:a9:
61:f1:fe:2d:9b:71:94:cc:a0:78:57:4e:e8:35:26:0d:08:51:
b6:16:c4:6b:e8:3d:be:75:bf:cf:8a:7f:c1:3c:ed:38:38:d1:
ee:f8:bf:06:95:53:4f:98:9d:58:36:1a:6e:57:9c:7b:1d:a2:
1f:c1:a9:01:16:02:f4:25:71:76:55:bf:ba:c8:54:df:69:54:
79:01:db:7e:a6:89:cb:c0:5f:d1:84:e2:8a:06:7c:c5:64:72:
1b:8c:c6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:26:20 2025 by rpki-client