Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
File: irYGzqebWr6BaDpjN5s5KJssq5M.mft (raw, json)
Hash identifier: tQxqo8TX3Kqxn2INcuBt7LCvTPsqhNNlJ5M+M8NZIO4=
Subject key identifier: 61:6C:F4:03:C1:4E:11:7B:EE:AC:D6:1C:BA:AC:99:FB:76:A9:31:D9
Authority key identifier: 8A:B6:06:CE:A7:9B:5A:BE:81:68:3A:63:37:9B:39:28:9B:2C:AB:93
Certificate issuer: /CN=8ab606cea79b5abe81683a63379b39289b2cab93
Certificate serial: 019751588AE851E0EE4AEC6438D08741A95B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
Manifest number: 0704
Signing time: Sun 08 Jun 2025 21:00:46 +0000
Manifest this update: Sun 08 Jun 2025 21:00:46 +0000
Manifest next update: Mon 09 Jun 2025 21:00:46 +0000
Files and hashes: 1: Ol66WOHM5O0qZSOG9y7yOIgJsCo.roa (hash: tBXkTjKhKw+qp8WtoR3ZkzeeWQpNfDqudYVdDHWc62c=)
2: irYGzqebWr6BaDpjN5s5KJssq5M.crl (hash: Zt6bbCUVJwa01vIbwyQDAWwg/BHS43fHeE0xraGfq90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:58:8a:e8:51:e0:ee:4a:ec:64:38:d0:87:41:a9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab606cea79b5abe81683a63379b39289b2cab93
Validity
Not Before: Jun 8 21:00:46 2025 GMT
Not After : Jun 9 21:00:46 2025 GMT
Subject: CN=616cf403c14e117beeacd61cbaac99fb76a931d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4e:d9:92:46:b4:ae:eb:cb:05:14:cd:15:e6:
68:d3:b6:70:bd:ba:02:4b:2d:ec:4b:84:b7:92:c5:
77:38:1f:1d:05:dc:1c:ca:9f:ae:35:50:13:fa:4d:
2a:f9:f0:27:c5:ca:81:cb:41:c9:bf:c9:1c:d6:db:
9a:e7:8b:7b:ef:d7:f8:26:0b:69:79:df:3b:c3:f4:
a0:9f:ab:7c:a4:18:47:5e:45:3c:4f:e0:a0:40:96:
c9:1e:fa:36:2b:2a:32:fa:30:18:74:d9:47:42:e1:
3e:7d:e3:ea:36:75:d7:55:79:02:ee:1f:0f:44:ca:
31:ad:ee:72:d3:11:2e:17:ab:57:b8:e7:4e:d0:28:
cc:3b:9e:ba:aa:0b:13:49:05:b6:e2:d6:e2:0c:a2:
0d:c8:c6:48:6f:52:69:09:99:22:4e:8d:be:7a:96:
4f:16:7a:56:36:e5:d9:78:77:44:dc:f7:a0:14:3c:
16:84:50:db:50:47:e7:01:94:79:97:ab:47:29:8d:
d5:24:db:1b:15:37:9f:b3:12:c7:86:a7:73:f1:f3:
87:7d:99:17:1f:57:a6:ed:22:f3:8c:22:ac:7a:d8:
d2:77:03:ad:08:83:e3:c3:32:e4:f9:0d:ae:6c:67:
9c:7a:08:8c:e4:41:fe:f8:7b:42:8b:1f:c6:99:f7:
20:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6C:F4:03:C1:4E:11:7B:EE:AC:D6:1C:BA:AC:99:FB:76:A9:31:D9
X509v3 Authority Key Identifier:
keyid:8A:B6:06:CE:A7:9B:5A:BE:81:68:3A:63:37:9B:39:28:9B:2C:AB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:fe:2b:0e:c0:cc:93:92:d8:e4:f0:79:cc:8d:cf:85:78:5b:
2b:6a:6f:54:93:e6:32:d1:b8:14:0e:b5:75:2b:8d:dc:e6:20:
6d:bc:8d:8d:16:90:ca:44:68:78:f8:c6:91:2d:9a:54:42:28:
a8:b0:7d:99:d0:40:68:cc:e7:29:27:53:69:c7:7c:d8:1b:c6:
d7:8a:a5:0e:3d:27:21:a2:74:94:af:0c:45:80:0b:85:b0:f8:
d7:6d:ff:b2:f6:ce:46:31:1c:16:bf:51:52:f2:af:ea:ac:7d:
a5:f5:19:f1:91:a5:69:a4:bc:e5:da:59:51:45:47:d7:65:ea:
1b:58:b7:05:a6:8a:ad:e3:ba:cc:68:60:54:35:a8:41:ba:ec:
36:3b:9a:eb:85:af:26:94:49:76:46:3a:be:bf:39:28:7b:e8:
15:4e:fa:1c:41:71:85:cc:c9:8e:42:a8:47:9b:3f:bf:f1:dc:
f2:f4:74:28:7c:c0:74:9e:22:97:5d:a0:7d:19:ba:62:b6:65:
c6:55:d8:fa:c5:50:40:d0:73:56:41:10:fd:ac:cc:39:00:6f:
2e:02:5c:04:1b:73:58:fb:fa:64:d6:46:e5:ea:2f:98:ff:70:
d0:5a:99:a8:b4:47:5a:90:b8:ad:2b:38:c2:f0:08:10:26:a9:
f1:01:94:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:52:15 2025 by rpki-client