Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
File: I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft (raw, json)
Hash identifier: PsuT+Sx/NYfWcsbfZ8AeIpzrYCRz3caZo0dTMTJfFPo=
Subject key identifier: A2:58:19:D0:09:FB:EE:BF:F1:84:84:3D:B7:29:D0:E0:8C:90:97:3A
Authority key identifier: 23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
Certificate issuer: /CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Certificate serial: 019751219DDC71D8AA42FAEC3F1A6950722B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
Manifest number: 12C8
Signing time: Sun 08 Jun 2025 20:00:46 +0000
Manifest this update: Sun 08 Jun 2025 20:00:46 +0000
Manifest next update: Mon 09 Jun 2025 20:00:46 +0000
Files and hashes: 1: I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl (hash: ljEpRJe6XcPv2eCwnp3GAuuA4G0dfAmeNhBMWWgUQU4=)
2: i8Q4g4VsliGNNp87vd6oYtqJ_zk.roa (hash: O+cLxQgdSxj9HwSnDkkvV/wDo/+EE05gj69lFrqob6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:9d:dc:71:d8:aa:42:fa:ec:3f:1a:69:50:72:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Validity
Not Before: Jun 8 20:00:46 2025 GMT
Not After : Jun 9 20:00:46 2025 GMT
Subject: CN=a25819d009fbeebff184843db729d0e08c90973a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:01:85:eb:95:1a:b8:be:c6:f8:90:24:2f:39:
4b:fc:3b:8e:35:99:cb:90:0b:51:6e:bc:24:83:b4:
d5:92:52:04:a4:ee:9a:2e:2a:45:01:b9:06:05:3c:
81:ce:ea:1b:6f:42:45:87:7e:fe:ba:63:ad:69:3b:
fa:64:cd:ad:27:e3:34:53:dc:a3:1e:14:cc:e8:de:
cc:8b:71:73:07:d0:b6:bf:d7:bd:ac:6e:0c:0e:fc:
1e:f2:f0:3e:63:cd:f6:69:d0:1a:35:e9:02:06:56:
2b:74:8d:79:94:23:92:8b:e3:1f:10:d6:14:15:d9:
f1:31:c9:9d:ae:97:70:d6:ed:01:76:bf:fb:ec:d3:
77:5a:f7:9b:3f:c1:6a:ce:08:f2:da:19:3e:5c:08:
2e:da:3e:0e:bb:1e:cc:72:2d:82:02:c2:01:5e:78:
f5:7f:de:d2:89:f0:29:a7:43:58:03:08:69:cb:54:
46:16:80:0a:ae:6e:23:96:e3:4a:6e:34:30:fb:9d:
c8:8d:98:26:25:ea:55:12:12:07:7b:25:09:e2:ba:
0b:4d:c6:48:a1:e6:7a:00:6e:72:7d:d3:7d:1e:0e:
37:54:4b:aa:ca:10:c0:ac:39:32:b2:2f:8f:df:33:
4b:74:27:89:f4:94:63:81:15:27:83:ad:dc:87:5a:
29:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:58:19:D0:09:FB:EE:BF:F1:84:84:3D:B7:29:D0:E0:8C:90:97:3A
X509v3 Authority Key Identifier:
keyid:23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:67:5d:79:f9:82:4d:aa:03:94:0f:20:8e:66:fb:9a:3c:d1:
36:da:ea:7c:07:7f:01:5e:fa:37:aa:22:20:17:14:f9:50:6d:
c0:d1:ce:d8:cb:e1:dc:e6:02:df:d9:9c:f6:b8:ee:d1:6a:5b:
47:3f:0a:42:c6:0b:9e:e7:82:3b:e2:95:4c:ae:21:6b:31:fa:
d9:e9:55:21:2c:1a:56:6b:8a:5b:43:45:32:4c:ec:f4:39:dc:
b8:43:4c:b9:5d:12:a3:04:42:5d:de:99:d3:5d:fe:17:c6:62:
df:79:fb:90:b2:50:05:01:67:9d:3c:72:ad:f9:dc:b6:65:b4:
6c:c0:3b:55:13:a7:9d:fb:c6:b5:07:f6:2a:99:9a:02:f6:c1:
e1:01:d2:f1:25:66:94:d2:a5:59:94:af:df:7a:d8:3b:5a:ad:
a5:85:df:6a:fb:cf:85:44:d6:19:47:5c:45:8e:92:4f:42:c1:
c9:f2:ef:4f:73:d4:7b:c7:69:e8:28:45:0b:0f:87:da:3c:19:
76:84:48:87:d6:dc:f3:3a:81:1c:33:6b:cd:e3:0a:0a:97:9a:
15:14:cc:89:21:a2:78:a2:5a:9e:1d:eb:48:f5:59:37:b9:bf:
11:14:6d:89:8d:60:2f:12:9d:cb:b7:4f:97:cf:fb:95:36:9c:
20:90:e5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:21:41 2025 by rpki-client