Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
File: IzlKEl-jrODEem_jT0CGtNO6VYg.mft (raw, json)
Hash identifier: wW4pDDhJd/2VYfGs96I49WI02asZUJeUDXDMoiZANgY=
Subject key identifier: CB:8D:80:4C:5C:66:FD:FC:E1:C8:D4:12:C7:C1:74:CC:69:E3:1E:A7
Authority key identifier: 23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
Certificate issuer: /CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Certificate serial: 019749318129792943C3B5F4F6025FEA291C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
Manifest number: 158A
Signing time: Sat 07 Jun 2025 07:01:10 +0000
Manifest this update: Sat 07 Jun 2025 07:01:10 +0000
Manifest next update: Sun 08 Jun 2025 07:01:10 +0000
Files and hashes: 1: 43AxQadttxpukdA8vcrVdRW-t5w.roa (hash: kF6ocnoDs/XQiaEmG2F7DKuzq9j+uOFKWVL4Npen2L8=)
2: IzlKEl-jrODEem_jT0CGtNO6VYg.crl (hash: wUlUc+RoEoI9TGLObnA2jczGjPVTsxrDfIfv3zpzgFY=)
3: hSxMBu_igMJgBtfSOfQQ4Pj49pw.roa (hash: bffcp9BhaMHMTNVqsuxgb/xO/YYHeGPregGtKUrYEWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:81:29:79:29:43:c3:b5:f4:f6:02:5f:ea:29:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Validity
Not Before: Jun 7 07:01:10 2025 GMT
Not After : Jun 8 07:01:10 2025 GMT
Subject: CN=cb8d804c5c66fdfce1c8d412c7c174cc69e31ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:35:47:0e:fc:f0:02:65:49:12:17:6a:71:3e:
d8:a7:3f:a2:ea:1b:8f:9a:7a:21:68:01:67:ad:61:
a1:40:d6:23:20:1e:13:e9:80:e6:5e:58:21:e6:9f:
aa:5f:2d:83:be:59:77:df:04:19:c9:28:3f:07:ad:
80:de:3a:b8:25:1d:ab:1e:d8:bb:77:99:28:d6:ff:
a6:cb:1f:a8:c9:49:93:08:7a:b4:66:4e:53:36:6d:
52:0c:32:9c:d5:f4:89:0e:3b:d3:d0:b0:ba:09:9d:
5f:30:9a:eb:b3:0e:ae:f7:51:7f:93:8b:83:0a:22:
90:48:60:82:e6:a7:37:ce:e1:a1:74:39:8c:fc:c1:
c3:38:a0:3e:86:7c:ea:ab:9b:86:20:56:6f:ab:5f:
f0:bd:97:08:3f:52:47:25:31:e8:25:bc:d7:dd:34:
90:29:08:46:bc:4d:a2:d4:0e:97:c3:20:48:5f:66:
47:a9:29:ca:ed:e3:7b:f0:75:c8:d7:ab:6a:a6:4f:
f9:1e:ad:e5:75:2d:0a:46:f4:c1:42:85:92:84:f8:
06:5d:af:2e:98:0b:3b:9f:7b:7c:a3:d1:53:19:7b:
da:6f:06:fb:15:d3:5e:b4:71:91:19:ca:85:06:fd:
01:2f:67:57:87:10:20:eb:19:d4:5e:84:be:21:a4:
a7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8D:80:4C:5C:66:FD:FC:E1:C8:D4:12:C7:C1:74:CC:69:E3:1E:A7
X509v3 Authority Key Identifier:
keyid:23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d7:d9:7e:18:cf:f7:5c:d5:f3:4a:20:21:aa:d9:6a:95:8a:
63:25:d7:8a:c0:18:b6:9c:4f:cb:2b:58:49:85:4a:4e:fe:e3:
fa:4b:4c:f1:5d:57:b6:47:81:08:ae:e2:24:45:bd:83:f6:74:
8c:1d:88:db:3d:d5:ab:13:4d:28:5d:dc:37:ba:10:7c:62:be:
ef:bf:42:55:ba:e3:ef:f6:d3:fc:ed:3f:cb:6a:1f:1f:27:55:
7f:f1:a8:17:34:13:aa:9b:d3:f6:8e:ee:bf:5a:36:31:b3:65:
4a:33:eb:8a:45:0e:e7:89:0d:8d:3e:67:b1:b3:cb:f8:32:dc:
f1:2b:28:8d:d7:2f:a1:7d:89:6f:4e:f1:49:a8:87:3a:fa:67:
6c:8e:a8:65:ec:dd:d2:8d:f9:c7:8f:9a:ce:b8:60:41:b0:06:
94:b5:ee:f5:92:9d:39:9c:b8:fc:f1:aa:82:66:6e:e5:6a:00:
32:4b:9c:f9:79:f3:8f:ca:82:f2:db:01:c8:a2:22:1b:da:92:
61:43:ef:d8:d4:08:b7:29:71:94:1c:eb:db:96:6a:e0:84:ac:
9b:ce:54:ca:e2:fd:80:4b:c4:d9:ed:4f:14:59:e5:0f:f0:a0:
38:8b:3c:93:ce:d7:22:75:52:04:e1:15:47:b6:35:42:9d:d0:
ea:59:9a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:28:05 2025 by rpki-client