Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
File: ibX60Y3ZEQQToxtNjhh2WifUw_E.mft (raw, json)
Hash identifier: ETwbAwJVWC03YVutyhqNkMiJ3FmnItY7uqCn7aaPxDs=
Subject key identifier: 99:18:49:B9:A6:43:69:5A:1B:2A:1E:23:6E:76:5B:05:5C:66:81:DF
Authority key identifier: 89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
Certificate issuer: /CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Certificate serial: 01974C68B5494776FB27887FBB4CAB4EE5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
Manifest number: 1591
Signing time: Sat 07 Jun 2025 22:00:19 +0000
Manifest this update: Sat 07 Jun 2025 22:00:19 +0000
Manifest next update: Sun 08 Jun 2025 22:00:19 +0000
Files and hashes: 1: XXE5WlIT_ozyEAytSpXB35caxkQ.roa (hash: Z5Mr1yj+6v3QmltRiVNuWb2ENlO3YvaI3bd4LC6yd08=)
2: hYxEeDcN-ZCvWfxbhWHRTnBKx5w.roa (hash: abkpNh2rbEaJURGIshnWIsN6jClRtBNny3ctzSY8Z2Q=)
3: ibX60Y3ZEQQToxtNjhh2WifUw_E.crl (hash: bNPGXiNB5NxWg5FjUP2pIYo2NXhUhkhLK4m4WpANy28=)
4: vCe1hhmPjnbb0XE8yiRxgRed8A0.roa (hash: KTfoAuRaTuS/CmQPiG+Z8o3GDtlCRJukvO93N6O+Ywg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:68:b5:49:47:76:fb:27:88:7f:bb:4c:ab:4e:e5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b5fad18dd9110413a31b4d8e18765a27d4c3f1
Validity
Not Before: Jun 7 22:00:19 2025 GMT
Not After : Jun 8 22:00:19 2025 GMT
Subject: CN=991849b9a643695a1b2a1e236e765b055c6681df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b0:ee:93:c1:4e:e8:ff:17:93:74:40:ae:30:
f2:54:f2:98:d5:a0:01:3a:b5:30:de:fb:23:9f:61:
c6:1b:ac:9f:d0:3e:a2:b2:a7:52:af:cf:21:71:cf:
e9:c9:42:46:20:18:7d:3a:84:26:e5:b0:12:f7:b1:
df:7a:48:13:96:cf:ed:82:88:29:d1:ea:8e:6a:46:
af:d7:33:98:c6:42:7c:86:0f:20:c9:ee:61:02:f9:
33:70:97:31:bc:f7:e7:12:67:98:c6:d7:44:b7:c4:
ab:72:35:b8:a1:f9:d1:2d:59:8c:bf:9a:11:23:d0:
af:66:d8:34:9a:b1:c5:90:ea:93:ff:8c:9e:d8:a1:
ad:e0:3e:6c:df:77:f5:74:50:54:ba:3f:c5:91:5c:
07:36:6d:de:e0:8c:76:d5:41:06:5f:ca:0e:03:b0:
1b:dd:53:1b:48:7b:de:63:71:06:d3:4a:50:d3:e0:
75:39:40:cc:2e:46:ca:f6:70:d9:26:b1:b2:39:d1:
b8:f4:4a:23:90:bf:da:0c:15:07:cc:3a:0a:4d:8c:
04:70:53:64:01:9a:17:da:30:b2:92:af:cc:a7:e5:
29:49:4e:eb:e1:4b:17:18:8f:23:09:48:ba:67:3c:
c4:5b:ae:63:0e:7f:ed:46:fb:3d:90:d7:7c:ee:9a:
14:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:18:49:B9:A6:43:69:5A:1B:2A:1E:23:6E:76:5B:05:5C:66:81:DF
X509v3 Authority Key Identifier:
keyid:89:B5:FA:D1:8D:D9:11:04:13:A3:1B:4D:8E:18:76:5A:27:D4:C3:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibX60Y3ZEQQToxtNjhh2WifUw_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/901ad2-6c6c-43c6-a280-4250ce5517d9/1/ibX60Y3ZEQQToxtNjhh2WifUw_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0a:de:69:30:4f:53:34:19:1d:e7:31:23:10:33:f4:31:94:
08:ca:a1:c0:3c:fc:6c:20:50:15:0f:36:e3:6b:50:1a:95:7e:
b3:00:40:39:2c:63:a9:bb:64:ff:39:12:ef:77:54:0b:cc:2c:
5b:2c:67:ef:21:cb:ed:6b:3c:94:b1:f0:bf:27:3b:ef:14:2a:
e8:68:69:ab:3e:08:9a:49:f1:0b:e2:fb:df:24:8d:bc:69:b4:
b7:41:56:c5:24:3b:e4:69:9c:ad:10:ea:40:5b:60:31:af:d8:
22:dd:c9:53:ae:03:1d:8c:30:bd:e1:70:57:1a:ae:07:db:95:
38:46:c6:c9:04:4f:33:ba:51:76:5d:47:a9:69:1e:e6:a6:b3:
3b:ff:3c:65:47:ab:e8:54:67:05:4c:ea:67:26:68:c3:08:e5:
aa:33:e9:d7:02:4f:5b:fb:80:de:97:c9:e2:eb:b9:e7:20:4e:
ed:d0:c5:74:94:0e:78:e7:2d:12:f5:6d:d1:da:9b:bd:fc:b4:
7f:6c:96:93:2b:dc:d7:ef:71:43:5b:d0:35:bf:a0:da:c0:f8:
c4:d2:2c:83:95:eb:6f:31:0c:5f:47:cc:ab:5b:33:d7:48:65:
e0:a7:ce:87:51:ea:a8:6a:f4:a5:4c:bb:54:aa:19:66:34:cc:
a6:25:64:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:05:45 2025 by rpki-client