Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
File: IJ2ng837PLbZvILBktbXKrtKM20.mft (raw, json)
Hash identifier: Xq6nIOBNgDlqJJ4GhtQ+CYXCaGDpiVXsVc8mnxQ/ALA=
Subject key identifier: C7:AA:88:CF:F6:F6:9F:AC:53:F9:8F:0A:FF:35:8F:B1:A7:C6:3F:BB
Authority key identifier: 20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
Certificate issuer: /CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Certificate serial: 01974E208A1B8217BEF59479E5CA16399BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
Manifest number: 01C0
Signing time: Sun 08 Jun 2025 06:00:44 +0000
Manifest this update: Sun 08 Jun 2025 06:00:44 +0000
Manifest next update: Mon 09 Jun 2025 06:00:44 +0000
Files and hashes: 1: 2n3afJDZ2VaAW1ICi9wuuluJH-s.roa (hash: n7gdmzqfRPjhPckkIN46JD6+pmnsuH8Fvwcad0thHWk=)
2: IJ2ng837PLbZvILBktbXKrtKM20.crl (hash: kxXWjdxE/PZerUvQkKq5lForo80GJKe9uCJRsGs7uwQ=)
3: fc650b5-Hy28l_7CM0InWSbhHHA.roa (hash: I0jfOZTYpGZasFE0U01uqVVs9byyAIXg5OzAj9nSBPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:8a:1b:82:17:be:f5:94:79:e5:ca:16:39:9b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Validity
Not Before: Jun 8 06:00:44 2025 GMT
Not After : Jun 9 06:00:44 2025 GMT
Subject: CN=c7aa88cff6f69fac53f98f0aff358fb1a7c63fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:da:a2:3a:94:73:ad:ed:b7:6f:7e:e8:30:56:
84:d6:27:ff:01:f4:d8:9d:b0:51:67:4a:24:82:f8:
44:0a:9a:06:19:3c:c0:6a:c9:9a:ec:c6:b3:e2:fa:
b3:d8:a0:8d:e3:cd:0d:35:4d:d0:80:f8:5b:f9:33:
b3:37:af:44:4b:af:77:6f:25:d7:15:e7:4f:65:d8:
db:7b:5c:52:43:b7:f0:4e:87:89:80:b3:2f:f3:18:
83:08:ca:39:88:ea:af:cf:f7:7e:df:7e:a9:77:4d:
61:c9:4d:d3:23:47:ae:4f:7e:e7:55:71:5c:fb:c2:
83:d0:85:53:1d:66:b3:7e:4f:72:7d:68:92:a2:51:
a6:1a:38:ff:7f:0a:3f:03:18:82:26:5c:19:9c:2f:
ea:25:55:2b:1d:c4:33:9c:21:73:50:67:f6:5b:de:
76:1c:b9:4f:2f:4f:23:2b:b0:05:83:d4:5c:01:b7:
bf:74:aa:2e:02:81:f1:9b:04:b8:69:c4:99:07:97:
3c:99:6a:3c:e0:c9:bb:1d:14:2f:dc:0c:98:6e:0c:
d3:04:1d:8f:23:08:f7:78:cc:f5:14:b7:91:11:f3:
88:fb:6c:09:98:df:b3:45:29:07:cc:83:20:89:4a:
b9:1e:eb:6f:cd:58:55:64:c9:df:f6:09:2e:13:31:
2d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AA:88:CF:F6:F6:9F:AC:53:F9:8F:0A:FF:35:8F:B1:A7:C6:3F:BB
X509v3 Authority Key Identifier:
keyid:20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:9d:b2:fe:69:91:a1:4b:df:e5:8d:16:4a:98:2c:81:ff:b1:
b6:44:2a:84:2c:a6:e8:74:9f:a3:f4:50:fb:c4:7c:21:4f:20:
bd:31:49:c8:83:df:b2:cb:3c:65:ea:4f:d3:5b:bc:af:38:f2:
8b:65:43:de:7f:bf:fb:7a:7e:9c:f9:8d:18:57:b8:b4:1d:c2:
4b:c1:9f:cc:1b:6d:a9:0f:2f:c4:d4:7a:24:a8:e0:37:44:99:
9a:4c:49:0f:d4:71:cf:e0:02:eb:1a:8b:af:9a:f7:09:ce:32:
47:eb:9b:b9:5e:5e:68:44:61:1b:89:ff:fe:e2:77:ac:3b:44:
73:22:aa:22:48:51:1f:18:c0:35:e6:57:1b:56:c5:1c:c0:45:
5d:3d:3c:c8:46:21:78:5a:eb:e9:5d:04:f7:89:a6:4c:8f:17:
14:6c:6d:a4:3c:1e:17:93:b8:b1:ba:e5:12:89:f2:9f:55:ef:
b8:26:c9:24:5a:e3:00:d3:fb:72:55:86:cf:3e:c7:23:ac:61:
0d:e7:af:e4:2f:69:3f:99:1f:4a:65:07:54:f6:30:8d:01:9a:
d8:b0:03:90:fa:cf:d7:3e:9b:0e:5a:ba:53:82:8d:38:6d:dd:
61:83:6d:7c:05:b8:7a:d9:68:72:0b:25:12:a4:48:9e:15:17:
aa:57:0d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:37:59 2025 by rpki-client