Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft
File: IkI4OfIQchYnZBrmtszqzujZBns.mft (raw, json)
Hash identifier: RNcHW7BWQOn1guRVDgHQuaT4J85K8d9L/LdtULP0YYg=
Subject key identifier: 2A:7E:66:30:F1:B6:DD:97:88:A6:95:F4:BB:F7:D2:B1:67:89:13:2B
Authority key identifier: 22:42:38:39:F2:10:72:16:27:64:1A:E6:B6:CC:EA:CE:E8:D9:06:7B
Certificate issuer: /CN=22423839f210721627641ae6b6cceacee8d9067b
Certificate serial: 019749314A8D78ABD5BC259DDE3DC9F3E91B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft
Manifest number: 0ABF
Signing time: Sat 07 Jun 2025 07:00:56 +0000
Manifest this update: Sat 07 Jun 2025 07:00:56 +0000
Manifest next update: Sun 08 Jun 2025 07:00:56 +0000
Files and hashes: 1: IkI4OfIQchYnZBrmtszqzujZBns.crl (hash: prQK++YCho/8AcJ/+zm/S2KvTaOyH5MgKewxvMkp2cw=)
2: Uyg4_Ozw9Ipj9uu784y9KAfEr7A.roa (hash: PWFMCOTkx94rFl6c7QVt2h1VgycYcWOsnSvIAK4MJo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft
rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:4a:8d:78:ab:d5:bc:25:9d:de:3d:c9:f3:e9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22423839f210721627641ae6b6cceacee8d9067b
Validity
Not Before: Jun 7 07:00:56 2025 GMT
Not After : Jun 8 07:00:56 2025 GMT
Subject: CN=2a7e6630f1b6dd9788a695f4bbf7d2b16789132b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9d:63:80:f3:52:25:0c:cd:31:0f:19:5f:53:
3d:4f:a3:4e:60:88:da:1d:8a:fc:d4:c6:99:d2:c8:
e3:d8:da:db:45:f1:72:a2:34:8b:b6:46:e3:b4:88:
66:c0:a1:d6:fb:2f:03:cd:d3:fe:c3:3a:e8:23:4b:
41:c0:a2:0e:cb:b5:0d:58:ec:f1:bf:47:ba:70:6a:
5c:38:2f:62:32:bf:0b:15:22:09:b2:29:3d:3e:69:
b6:34:6e:b2:55:10:6b:3f:d9:f2:95:cb:2f:d1:d2:
51:86:52:9b:cb:7f:3a:10:e4:13:2b:ba:96:d3:1e:
64:18:35:b0:33:cf:e9:9f:22:db:86:c1:ed:a1:41:
96:56:72:1c:11:ac:7a:a2:0f:4b:8f:b9:36:32:c5:
00:28:9f:52:4d:1f:85:6c:8b:5d:fc:37:c7:8d:ec:
14:15:46:9f:41:d0:5b:49:97:43:ec:cc:3f:a3:6b:
93:5f:98:70:3b:e3:78:2b:69:23:ef:b6:29:0f:8b:
23:7b:65:8e:c1:14:f3:24:36:b3:48:8b:4b:d0:53:
ba:28:7c:27:34:a8:d2:d7:a7:1b:fb:bc:38:0d:aa:
9b:e2:41:ea:5b:25:73:11:09:fd:ca:26:55:c4:4c:
04:68:8d:77:07:84:8b:95:5a:b5:d1:89:f5:01:16:
f0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7E:66:30:F1:B6:DD:97:88:A6:95:F4:BB:F7:D2:B1:67:89:13:2B
X509v3 Authority Key Identifier:
keyid:22:42:38:39:F2:10:72:16:27:64:1A:E6:B6:CC:EA:CE:E8:D9:06:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IkI4OfIQchYnZBrmtszqzujZBns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8ab48-05d0-4f9c-8b0f-98c875ae35c9/1/IkI4OfIQchYnZBrmtszqzujZBns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:0c:f4:63:df:50:b8:d6:6c:79:bd:25:cc:0c:c8:24:ed:ea:
0f:26:3b:45:6f:eb:e7:70:52:e1:95:69:b8:bf:92:5e:7b:37:
e9:5c:41:35:ef:46:56:8a:97:85:e3:75:1d:d6:8a:16:4f:7d:
a3:a8:fd:cd:9d:95:64:d0:32:2d:a7:23:41:a1:cd:91:2c:bc:
0b:a8:58:af:9f:50:d6:1b:3a:64:05:26:5e:11:81:da:0f:ca:
2b:8a:07:11:1e:d7:4d:15:bc:43:12:b0:0f:20:3d:39:e2:a5:
0b:36:6d:28:01:fb:b5:18:b1:52:c1:2f:35:d5:7e:75:0b:46:
1f:9f:2d:bb:ca:c7:a1:73:10:82:60:54:74:16:e2:29:82:40:
8b:ed:b0:58:7c:cc:14:b7:9a:64:72:a9:27:94:e6:b2:eb:bb:
60:30:95:5e:4e:a6:b4:3a:e6:9f:73:02:4b:64:47:8b:f8:a4:
85:02:cc:ec:6e:6b:09:17:94:76:2f:6c:bb:c0:9f:b8:d3:cd:
81:5f:a2:b7:cf:33:38:f1:59:44:07:b4:4d:fc:3a:83:78:be:
c1:05:1c:cb:ce:a4:a3:d3:b2:69:9e:bb:84:32:91:4b:3b:b0:
45:d2:f8:8a:4c:8f:65:98:40:00:23:2c:55:00:54:c0:8e:03:
fb:b4:86:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:48:39 2025 by rpki-client