
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
File: I9hEjFy5A5jkwoXOycD0dmrJMd8.mft (raw, json)
Hash identifier: YgknnuAsL1Bwuxt2mI8HJVIl/4pfaYNTESAiv5dFIQ0=
Subject key identifier: BA:C3:9A:4C:DE:65:F0:1C:CA:C3:B0:CB:35:FC:A0:94:1B:65:5F:27
Authority key identifier: 23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF
Certificate issuer: /CN=23d8448c5cb90398e4c285cec9c0f4766ac931df
Certificate serial: 01974EFC6221053B8732043200CDF0E76118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 10:00:52 +0000
Manifest this update: Sun 08 Jun 2025 10:00:52 +0000
Manifest next update: Mon 09 Jun 2025 10:00:52 +0000
Files and hashes: 1: 0R9hBHck9goXLckWs83vfzxcFiw.roa (hash: obv3yvxGMmGg4JBfXp95o/8uj2ocziHcF4Wd0qYKBC0=)
2: 2ZLinOVEwJGKFicgX--T-MLOzJk.roa (hash: c5tPFVJAjAdrD/biJVfWeRiWObKwMs1MmzB2QE9giIE=)
3: 9unXgezNMxzwNg4bzifOYAuCs0o.roa (hash: g4XwuMrRwxeGeiZBFLLb9s8Q1VZBOHGp5ebHoGbs+mc=)
4: I9hEjFy5A5jkwoXOycD0dmrJMd8.crl (hash: QGYgPg/2egP/o1cX8IHGrvobaHiA4tEcmsVwvk8BIiI=)
5: dK0aI2R_s129Y-75FIrpBYL1yE8.roa (hash: R66OS8lUtMZTTbo9eo/xMi56yXXva1T37X0KuifJS+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:62:21:05:3b:87:32:04:32:00:cd:f0:e7:61:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8448c5cb90398e4c285cec9c0f4766ac931df
Validity
Not Before: Jun 8 10:00:52 2025 GMT
Not After : Jun 9 10:00:52 2025 GMT
Subject: CN=bac39a4cde65f01ccac3b0cb35fca0941b655f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ba:f8:27:50:6f:d2:9e:50:fc:41:f3:7d:c5:
17:a8:74:5b:1c:2c:6b:e6:08:dc:73:ae:9b:9e:26:
ea:38:1b:26:02:d7:78:18:6d:cf:be:cb:6d:ec:2d:
e9:aa:02:be:d4:8c:b2:65:a2:45:dc:51:f3:64:57:
7a:47:ba:9b:b5:31:8e:ca:5c:b5:8e:0d:5b:26:8c:
3b:f2:f5:da:3b:26:a4:6c:18:6f:58:96:39:2a:83:
ce:c6:19:9a:06:eb:5e:a8:09:41:1f:04:e7:43:10:
6c:77:c3:5e:7f:49:ef:04:5f:f0:48:0e:57:76:8e:
93:fb:e9:5a:f8:92:e1:b1:89:9b:16:e3:eb:eb:ce:
dd:3f:f0:6f:4a:b1:0a:d4:d3:e2:30:1f:29:65:0b:
9d:e5:a3:f7:29:aa:97:7d:bf:65:ec:e9:87:b8:79:
f7:84:51:a9:d4:bb:70:08:c7:e8:93:95:7c:70:f3:
52:1a:c4:3e:90:0e:25:1b:10:42:20:dd:00:fd:44:
46:03:eb:f6:90:13:ae:50:e3:f4:19:0e:3b:cc:60:
0e:e1:19:7a:06:5e:aa:4e:04:03:a1:76:ec:24:e0:
09:f3:81:8e:cf:1a:c6:af:c8:d0:18:77:79:94:ef:
c1:5c:be:ed:be:7e:46:87:c0:67:6a:4d:51:f6:50:
3a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C3:9A:4C:DE:65:F0:1C:CA:C3:B0:CB:35:FC:A0:94:1B:65:5F:27
X509v3 Authority Key Identifier:
keyid:23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e1:52:c9:c1:e2:eb:11:2e:a9:99:e7:8a:96:6b:5d:58:e9:
9b:d2:37:9b:96:9d:5c:e3:25:54:9a:61:3f:3e:51:f3:4d:a6:
d9:75:99:4d:08:5c:94:30:44:17:f6:92:12:98:8b:4a:27:c4:
ef:fa:27:6a:f3:b9:fe:2c:a4:86:47:54:e3:0f:c6:f3:3b:c9:
d4:2d:5d:a6:dd:55:7c:29:8e:92:03:aa:92:77:0c:13:5e:49:
c2:14:ab:54:d0:88:c3:eb:0b:e2:2a:43:2d:8c:18:d3:b5:5f:
3a:ce:a6:e9:80:9a:b6:45:56:56:ea:68:f5:9f:89:2e:ee:2d:
f7:1c:4d:9f:90:22:d4:ea:f3:b0:7b:ed:ae:3e:a7:f8:52:9c:
5d:8a:5b:e5:fd:15:ca:47:b3:9c:d0:27:79:91:1c:4f:a8:80:
c5:7e:29:06:a3:a7:3c:08:b7:07:f3:bb:9a:0c:e1:10:4f:99:
44:e5:cd:d6:16:6b:c5:74:20:86:12:4b:a2:1f:37:cc:f6:b5:
ac:b7:e7:a5:e8:53:9e:da:88:99:c0:7f:8e:db:be:97:56:e4:
79:3e:82:6b:79:d6:1a:36:a7:e8:19:1e:b1:78:c3:6e:17:e1:
92:b9:60:f1:51:fb:a8:a5:2e:77:4f:5a:c7:b0:f1:75:67:c8:
e4:47:d2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:57:15 2025 by rpki-client