Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
File: I6NILh1m2H9bml7rnIr9a17CMiQ.mft (raw, json)
Hash identifier: f0x1dQ6BKb+q7f6R0RKPQWh343buGNEISBeIFuNwq+8=
Subject key identifier: E3:45:85:27:96:D0:E4:27:FF:6A:10:2C:07:8A:47:77:59:D9:C5:E8
Authority key identifier: 23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
Certificate issuer: /CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
Certificate serial: 01975E0179D409418FA569B23B2EA261F008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
Manifest number: 1587
Signing time: Wed 11 Jun 2025 08:00:44 +0000
Manifest this update: Wed 11 Jun 2025 08:00:44 +0000
Manifest next update: Thu 12 Jun 2025 08:00:44 +0000
Files and hashes: 1: I6NILh1m2H9bml7rnIr9a17CMiQ.crl (hash: rgtR4UB5+tFaj3pwohZUwaekdFRcFyfetCriCz2hBTs=)
2: IQwej1LnyY7ETYPMzr0MBaKMJYU.roa (hash: m2Od1UXry84TfojxLTlOoi+R13MMd4A7opflyOM6uR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:01:79:d4:09:41:8f:a5:69:b2:3b:2e:a2:61:f0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
Validity
Not Before: Jun 11 08:00:44 2025 GMT
Not After : Jun 12 08:00:44 2025 GMT
Subject: CN=e345852796d0e427ff6a102c078a477759d9c5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:df:77:ea:58:84:49:2b:5d:d2:ab:2e:de:07:
b9:b7:e0:79:23:d9:85:3c:d4:b9:22:c6:e8:41:17:
df:dd:c9:a5:ca:1b:27:f8:ed:f0:28:7e:d4:2b:1b:
67:88:44:8d:11:83:51:e1:5e:c2:b9:4b:d8:45:ed:
9b:bd:43:5e:b1:14:ab:e3:01:6b:42:ae:47:5d:a0:
18:0e:d1:18:13:ba:42:fe:88:21:ef:a6:54:51:9b:
f9:63:da:37:d6:a8:a6:e0:17:03:51:89:05:b8:d5:
d5:8e:89:fd:1e:e7:58:98:dd:b8:2f:35:15:4c:ec:
4f:4d:97:6e:4f:2b:26:9e:8a:00:0b:4a:1b:d0:0d:
41:1a:5f:e7:58:ee:6b:f4:3b:b1:c2:fa:8f:29:32:
ad:7a:14:e4:3b:12:7c:94:58:35:09:be:c5:ad:76:
4b:cf:57:74:17:63:84:e8:57:3f:f8:12:13:4d:8b:
4e:1e:51:81:7a:a9:bb:03:0b:ee:39:d7:87:f0:7d:
30:8c:25:c0:f4:28:89:0d:64:16:72:89:e5:ef:26:
9a:6a:3c:21:69:f2:81:8e:99:29:fb:aa:16:2a:f8:
b3:4f:86:50:85:df:ec:25:e4:95:d4:97:69:39:6d:
a9:6c:e1:bb:fc:73:06:ca:bf:2d:59:63:e5:4e:a5:
58:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:45:85:27:96:D0:E4:27:FF:6A:10:2C:07:8A:47:77:59:D9:C5:E8
X509v3 Authority Key Identifier:
keyid:23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e2:20:67:21:d5:98:71:e6:af:98:87:57:f5:d4:cd:e6:7d:
53:18:ae:3a:51:a3:2c:7f:3e:98:79:6f:5c:ac:4c:20:47:13:
3c:d7:e0:fc:8e:c4:bd:75:89:1e:bf:63:a7:80:8a:ae:2e:e9:
d4:de:41:8f:22:a1:80:b3:81:3c:75:2f:1c:cb:92:29:23:a5:
e0:99:5e:0a:a6:6f:e3:9d:44:92:db:38:9b:07:1e:15:18:00:
6b:29:ce:54:be:20:46:c7:77:cd:33:eb:82:1d:2d:79:d6:54:
53:09:4b:1a:97:53:ce:4e:3a:62:56:0a:7f:0f:05:3c:5c:2c:
54:1f:a0:74:da:e7:fc:42:79:79:0d:b8:ce:1d:44:c5:47:32:
b7:e9:f2:2e:00:94:62:0e:94:84:15:56:81:e5:84:16:95:43:
4d:9c:b4:92:ce:76:e4:09:5e:89:8b:5e:71:0f:f6:d0:f9:d5:
9a:c8:5c:53:c4:49:ce:fc:8e:b0:94:c4:a8:f9:a4:44:a4:77:
76:e6:b1:20:62:52:99:f5:b8:3f:e4:a1:ba:05:fe:d6:0f:a4:
7e:46:23:5e:a4:8d:44:24:c0:37:1e:ca:ad:0b:fe:8b:00:60:
2c:f0:7a:a5:4e:cd:12:ce:f7:99:30:26:6f:74:3b:12:7c:d3:
73:a5:54:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:23:36 2025 by rpki-client