Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
File: IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft (raw, json)
Hash identifier: Xp4HZEwQ3cZJJNbf/qGR47ptBNKFEou0D1dDVf3xre4=
Subject key identifier: 25:40:02:2F:59:7D:FC:31:F2:73:DD:AA:C4:C0:1D:3A:4B:7D:73:EB
Authority key identifier: 20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E
Certificate issuer: /CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e
Certificate serial: 01974A0CFC671998A9F44BD923EA50EAC25C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
Manifest number: 1504
Signing time: Sat 07 Jun 2025 11:00:54 +0000
Manifest this update: Sat 07 Jun 2025 11:00:54 +0000
Manifest next update: Sun 08 Jun 2025 11:00:54 +0000
Files and hashes: 1: IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl (hash: XGQgzS4GhVfM9jPU2vBHy77JspMN6u/QA4BVMF8ynOI=)
2: QbfQw6PQWXMnUYTcNMeoW813ttw.roa (hash: g9TBhQ7bZYV+JTfg685xMP7NzWGbPIajKmZ/OPgHv/k=)
3: SqW3-Pav388bYoCFb9onFjXDUEM.roa (hash: rQ+0p4O5Q843ntXsLKc+VAqP1ejZ7AJIeWPPGt1vzco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:fc:67:19:98:a9:f4:4b:d9:23:ea:50:ea:c2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e
Validity
Not Before: Jun 7 11:00:54 2025 GMT
Not After : Jun 8 11:00:54 2025 GMT
Subject: CN=2540022f597dfc31f273ddaac4c01d3a4b7d73eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:28:2b:22:90:cb:8e:63:9c:e3:09:83:a4:
4f:97:ca:99:ef:4c:0c:3d:31:62:ea:94:2b:f5:e8:
b2:d4:c2:82:0c:65:f0:e3:4f:b0:75:84:cb:9a:68:
57:53:29:cb:08:56:66:d6:e1:1d:c0:cf:af:00:31:
b2:1c:68:87:6a:3e:ee:12:ca:be:3e:ce:a9:8c:24:
89:c4:79:8e:03:a0:0c:28:a8:7c:c8:8f:91:71:62:
87:28:4f:fe:bd:e2:48:5a:42:9b:56:b8:24:3a:50:
9d:52:0a:85:27:18:c3:1c:f2:f0:8d:a5:cd:17:14:
c0:44:2f:f2:ba:79:57:68:47:14:99:33:d3:b0:77:
42:76:ee:e0:e4:00:1a:6a:e9:4b:ed:a6:ec:48:05:
80:23:d6:cc:eb:a5:8e:8c:69:2a:69:fe:bc:b4:86:
ef:88:90:75:33:66:9f:3c:a3:a9:e9:3c:1a:bf:b0:
12:37:b6:ed:b6:e5:9f:71:e0:eb:2f:91:ce:f1:58:
23:ad:0a:c1:e1:a5:5b:38:ef:5a:c8:5a:07:ed:2d:
7a:95:ef:4a:32:57:d9:ae:34:fd:60:44:30:e3:cb:
6a:eb:df:26:95:77:c4:f7:2f:fc:77:b8:32:60:5d:
be:63:21:6c:7a:6f:de:b9:9f:c3:b7:80:dd:a0:41:
77:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:40:02:2F:59:7D:FC:31:F2:73:DD:AA:C4:C0:1D:3A:4B:7D:73:EB
X509v3 Authority Key Identifier:
keyid:20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e8:22:ba:d8:2d:66:c9:ab:d7:cc:a5:39:d2:c9:23:7c:f0:
ae:cd:9d:49:a3:09:24:c0:06:b8:80:7c:c2:7f:88:3b:24:2c:
7d:80:09:ee:03:b6:11:57:2c:c4:9a:49:1b:f6:70:ee:8f:71:
0b:67:20:8d:1e:9c:39:3f:d1:85:5b:61:0c:20:d1:91:07:20:
c9:39:3b:45:47:4c:5a:34:f1:54:fb:48:9a:1b:7f:f9:69:0b:
e2:cd:7e:7e:a1:55:2d:0b:07:31:1e:ac:bb:a6:b7:96:24:e2:
70:8f:c6:c6:bd:1c:c6:e8:49:d5:54:18:ca:2b:21:c2:5f:2e:
b0:bb:6b:b8:4c:fd:05:16:2c:5f:ce:54:e2:97:3a:67:51:ad:
82:b9:42:7b:e9:d1:9b:e3:d3:21:10:b8:5e:d6:31:03:78:a4:
26:1f:4f:28:0e:14:2b:e4:2b:2d:c5:aa:6e:43:97:1d:df:b3:
cf:d7:44:8c:35:32:4b:6d:e4:15:f8:a0:08:c5:ee:2c:af:6b:
0d:0e:d0:6f:b6:ee:c6:c2:63:96:02:2e:3f:e9:f7:5c:fd:5e:
4c:83:44:c0:23:8a:af:4c:29:39:4e:26:e3:d3:c3:78:00:1e:
75:e5:e0:63:e0:f9:62:01:c4:4d:9c:d5:a5:a4:21:f2:f3:e0:
5c:31:21:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:08:54 2025 by rpki-client