Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
File: ifnCFo0tgt39inBjfUQBivMLH5c.mft (raw, json)
Hash identifier: DzvAFXjRLwAiCNgxrmc16Q0gN/uidWqRLZOoqqQ+9Q8=
Subject key identifier: 05:0D:FF:63:77:A4:98:8A:2E:44:C9:AD:FC:77:24:E6:A6:FD:FD:C5
Authority key identifier: 89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
Certificate issuer: /CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Certificate serial: 019748F9F635A2FE91CCC4B433EBFAD632F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
Manifest number: B4
Signing time: Sat 07 Jun 2025 06:00:30 +0000
Manifest this update: Sat 07 Jun 2025 06:00:30 +0000
Manifest next update: Sun 08 Jun 2025 06:00:30 +0000
Files and hashes: 1: ifnCFo0tgt39inBjfUQBivMLH5c.crl (hash: nYKAbAgbIPf8a+6u2n605/MMAClv62qUMgS+xOaquQI=)
2: spqKrZZlSshpL2qYZip0d0WaBBs.roa (hash: nNDCN5SzdqIQPR24IlLa7l1TyfR2hVXqn06sMz/jemo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:f6:35:a2:fe:91:cc:c4:b4:33:eb:fa:d6:32:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Validity
Not Before: Jun 7 06:00:30 2025 GMT
Not After : Jun 8 06:00:30 2025 GMT
Subject: CN=050dff6377a4988a2e44c9adfc7724e6a6fdfdc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4d:f9:08:dd:5d:53:db:23:d4:b9:59:1c:9e:
57:51:54:cf:8a:8f:57:e2:3d:2f:4b:01:4e:b4:3c:
85:8f:81:63:4c:4d:5c:93:6a:1f:67:db:07:97:de:
23:81:76:7f:a6:e7:28:bb:bc:df:e3:d2:38:d9:27:
e6:f3:81:21:36:fe:2b:28:65:57:75:5d:9c:b7:56:
54:1c:1b:bc:e7:9f:7a:7c:66:55:ef:88:a3:dd:7b:
34:bc:f5:85:dc:95:50:f4:cf:8f:41:9e:5d:e7:48:
26:95:69:79:5e:96:0f:a2:4e:47:1c:92:e9:e2:c6:
52:2d:d4:17:aa:7e:f8:dc:e8:54:08:a3:7f:a4:de:
70:32:0f:41:0d:1a:0e:b1:02:1b:6d:ca:47:af:f7:
df:34:97:1f:79:0f:a8:2e:25:92:8e:53:fa:55:31:
90:4e:62:b0:5f:aa:7f:65:88:82:8a:28:5c:6f:bb:
21:04:91:d0:b1:2c:18:3e:7e:da:fc:ed:2e:45:c5:
68:f5:0b:51:1f:cd:a4:6a:b7:4e:e4:dd:30:f2:14:
85:40:69:9a:07:e1:7f:ea:c8:31:1f:75:48:aa:24:
89:85:10:28:9d:7b:46:6d:29:8b:0d:9a:21:1b:d8:
84:ee:1b:99:d1:9f:38:0e:64:2c:a5:0d:16:6e:24:
a4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0D:FF:63:77:A4:98:8A:2E:44:C9:AD:FC:77:24:E6:A6:FD:FD:C5
X509v3 Authority Key Identifier:
keyid:89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c0:98:95:e5:87:47:1c:20:75:f0:ff:ff:e3:46:73:6e:b2:
13:1b:cc:2d:55:6b:3c:bf:0c:b3:df:be:bb:ba:c9:29:7a:27:
65:c3:fb:e1:ae:98:e1:e5:9c:6e:53:a2:0c:f3:c8:1b:75:1e:
e0:b1:26:b9:32:f9:c3:bf:30:05:f9:87:a8:78:c7:18:86:28:
a3:61:6b:df:a1:2e:4b:9d:f7:16:94:81:d0:ec:a7:77:5c:e2:
43:2c:f1:86:aa:ac:53:01:ce:dd:8f:fa:53:f3:11:f6:76:35:
e1:33:85:2f:83:bd:5d:03:10:c7:78:8c:51:a3:8d:58:1d:29:
7a:68:6a:bc:4d:c8:1e:4e:9e:ae:ad:23:d0:95:d4:c1:c3:1a:
50:e1:88:1d:06:8d:49:80:ee:4f:18:90:ee:f7:99:1e:17:84:
a1:12:53:58:bd:7e:0c:69:4b:3d:9b:93:dc:53:9e:b7:54:c6:
a5:77:62:7f:a3:b2:17:7d:12:e0:40:79:4a:e8:f2:1f:38:a1:
1c:2b:27:a1:26:4f:74:06:de:e3:45:12:ca:b1:d0:ae:bc:42:
8d:51:4b:d5:5c:bf:23:df:ed:d8:7f:11:22:d1:9d:51:11:2f:
06:2c:47:b2:62:83:61:64:c2:24:1a:e3:36:8d:b9:ca:b2:b1:
f8:7a:34:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:20:49 2025 by rpki-client