Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
File: IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft (raw, json)
Hash identifier: +SOh5xgMiZXtMDKUri3XeKOeUIBtlk34peeCwmjkRQ0=
Subject key identifier: 65:EB:06:93:21:60:69:14:48:02:43:04:92:01:3F:D2:21:70:63:3A
Authority key identifier: 20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54
Certificate issuer: /CN=2046367390224a07684d7977f9165a0950f03d54
Certificate serial: 01974BC3F218398BDF3F27F498123A42EA19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
Manifest number: 128A
Signing time: Sat 07 Jun 2025 19:00:21 +0000
Manifest this update: Sat 07 Jun 2025 19:00:21 +0000
Manifest next update: Sun 08 Jun 2025 19:00:21 +0000
Files and hashes: 1: ICVbUtHfbHYJwV7ucXI2K_14ylU.roa (hash: d0or5/9y3dY5/PzUShTK41fVXw4MjWFCN4HTk7PqBCg=)
2: IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl (hash: EnL/Asboi57FJk9l+UHdGjlJ/oBcAg3weZAfGSAmuOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c3:f2:18:39:8b:df:3f:27:f4:98:12:3a:42:ea:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2046367390224a07684d7977f9165a0950f03d54
Validity
Not Before: Jun 7 19:00:21 2025 GMT
Not After : Jun 8 19:00:21 2025 GMT
Subject: CN=65eb0693216069144802430492013fd22170633a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:98:ea:1c:75:aa:dd:df:09:95:55:c5:7d:aa:
59:93:c9:7e:b1:3f:04:2d:11:94:3a:f6:83:6f:86:
e9:41:bb:47:d9:66:ec:46:89:7f:76:65:73:bd:77:
9b:a3:e4:b3:f7:e7:77:14:2e:1b:f5:90:72:48:fe:
a8:41:88:ce:5f:de:98:21:48:e3:d7:36:a0:96:dd:
e6:d9:db:e7:d9:93:ba:cc:da:cf:01:93:09:4f:d6:
91:47:37:ae:63:f6:b4:60:72:53:c5:74:1c:97:0b:
52:83:6d:be:09:4a:ec:df:e2:1d:4d:6c:95:bc:63:
a0:70:22:7c:c4:16:7b:c1:f8:87:67:f3:0c:80:c8:
6f:c0:c8:81:fb:da:5a:1f:d0:be:00:82:b9:86:d4:
ed:b5:08:57:93:2b:06:7c:66:40:02:a4:99:39:3d:
e8:fa:0a:e4:02:70:a8:97:e7:f7:3b:c6:7c:ec:20:
c3:bb:1c:19:93:03:b2:9c:c0:97:7e:20:2b:ab:63:
66:13:3c:a9:87:b7:07:44:e9:72:67:04:a2:33:18:
17:26:de:dc:04:c3:20:f0:49:a7:11:45:07:5c:dd:
01:da:09:d3:51:f4:5d:62:85:29:24:d1:18:ff:45:
95:4f:fc:25:9f:b5:cb:d4:39:0f:a2:c7:7a:91:9d:
0c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EB:06:93:21:60:69:14:48:02:43:04:92:01:3F:D2:21:70:63:3A
X509v3 Authority Key Identifier:
keyid:20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e9:79:91:e4:7f:21:ee:68:a0:de:0c:5e:ed:cd:4b:b7:3c:
3e:85:8f:4b:c2:41:f8:bc:19:c6:40:00:39:cc:b9:33:85:e5:
de:c7:fb:92:bb:9c:cf:61:ee:71:41:d0:37:4b:b3:46:9d:b7:
80:5f:9c:ff:43:82:8c:64:f5:a1:e1:f6:9d:59:4f:26:01:7d:
02:69:69:fa:08:c5:a3:db:5d:3f:73:ea:5d:1a:2a:75:9f:3b:
69:f0:e0:5d:ff:85:d9:7f:ab:62:66:43:b7:f1:2f:11:ad:9c:
97:29:42:be:e9:3c:ca:50:f6:b1:12:37:bb:85:2a:8b:0d:73:
c0:d9:65:b0:29:f9:94:5e:03:0f:b6:8f:d7:a7:4c:34:72:a9:
43:8b:f8:49:ad:65:ed:73:ea:83:e8:b6:2f:c2:0c:fa:40:3c:
a9:bd:16:cc:61:4a:46:90:f6:93:36:15:13:4e:ac:d8:4e:42:
59:73:c5:35:50:94:06:d2:a2:32:a4:3a:78:f3:b6:32:3c:dc:
70:fc:fe:f8:95:cf:58:f9:62:3c:e7:ac:a5:7f:5e:cf:b3:cd:
08:55:89:a4:8c:2b:10:4e:58:32:c6:ed:a8:05:5e:6f:cd:ca:
0e:1f:82:71:fb:de:84:fa:d9:51:25:78:dd:ca:96:23:d6:88:
b5:dc:f3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:14:19 2025 by rpki-client