Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft
File: IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft (raw, json)
Hash identifier: /uJ/JHWBw0V8viAMXEjNNChfLn5flH3+oRLa2pbZpt8=
Subject key identifier: 2C:2D:DA:73:1B:8E:19:A7:69:04:A0:49:C0:3D:B8:5E:3D:1E:49:66
Authority key identifier: 21:53:0E:9D:09:E2:FF:8C:38:41:36:15:58:9A:5F:20:6E:7F:3E:A9
Certificate issuer: /CN=21530e9d09e2ff8c38413615589a5f206e7f3ea9
Certificate serial: 01974BC45D2589D9784D79C85943D9997255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVMOnQni_4w4QTYVWJpfIG5_Pqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft
Manifest number: 0878
Signing time: Sat 07 Jun 2025 19:00:49 +0000
Manifest this update: Sat 07 Jun 2025 19:00:49 +0000
Manifest next update: Sun 08 Jun 2025 19:00:49 +0000
Files and hashes: 1: IVMOnQni_4w4QTYVWJpfIG5_Pqk.crl (hash: LwZ8/k65ydgrzIBWxKI2FvsEowUfvudni8xwB3No+/g=)
2: NfqHOhcJXcqSfQpuNgytLU6Q0gw.roa (hash: fdvl8Vjh1i6SnoxQG77IPFWNq1tbBXhWcHGwbwfOV50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVMOnQni_4w4QTYVWJpfIG5_Pqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:5d:25:89:d9:78:4d:79:c8:59:43:d9:99:72:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21530e9d09e2ff8c38413615589a5f206e7f3ea9
Validity
Not Before: Jun 7 19:00:49 2025 GMT
Not After : Jun 8 19:00:49 2025 GMT
Subject: CN=2c2dda731b8e19a76904a049c03db85e3d1e4966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:2f:7b:88:0c:92:d4:a6:6d:9b:72:65:e5:
b2:56:2b:53:42:66:af:11:0a:32:2b:51:e8:a2:a2:
00:9d:22:09:08:1d:b3:35:78:a8:1e:f7:f6:b4:ed:
e5:00:b0:cf:ed:ba:47:7f:7d:e8:47:f2:20:78:7f:
64:2d:0a:cb:96:a2:37:25:1f:f1:2d:4f:e8:f1:a3:
06:ef:52:0d:f7:64:63:52:91:9d:1e:6b:89:1e:53:
d8:da:7d:e0:27:03:d7:69:30:12:22:7b:2f:b4:10:
f3:a7:f3:5f:28:06:fd:77:18:57:da:74:58:86:d0:
24:21:6e:4c:a3:29:4f:18:47:65:05:31:a7:ff:49:
5c:aa:6f:36:6c:b1:28:85:a4:21:33:54:0e:ce:21:
be:2e:f0:af:48:c4:41:a0:7a:95:78:3b:fb:e4:ac:
53:6a:11:b5:36:21:52:32:e8:60:70:7e:00:f8:b4:
ca:82:98:5a:5a:fb:8e:57:61:35:6d:9a:e3:85:8c:
fa:52:cc:d8:c0:58:85:ec:5e:73:b7:9b:6b:26:75:
80:38:8c:39:a7:6c:90:82:1d:3d:94:6c:c7:a4:ab:
40:9e:bf:4a:dc:d6:57:78:ee:ea:e8:5c:63:69:dd:
83:26:66:a6:c3:fd:e5:44:41:29:38:11:4a:51:b4:
f2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2D:DA:73:1B:8E:19:A7:69:04:A0:49:C0:3D:B8:5E:3D:1E:49:66
X509v3 Authority Key Identifier:
keyid:21:53:0E:9D:09:E2:FF:8C:38:41:36:15:58:9A:5F:20:6E:7F:3E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVMOnQni_4w4QTYVWJpfIG5_Pqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f2dad3-a6e6-4b77-8342-624f4c141f2c/1/IVMOnQni_4w4QTYVWJpfIG5_Pqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:06:98:fb:c5:0c:44:a5:a9:63:80:1d:c1:ae:75:df:bf:cf:
17:7b:30:9e:90:3d:6c:f4:c5:84:98:9a:4e:9a:16:29:4d:82:
72:cb:af:af:c7:65:10:ca:f9:9a:9b:b4:ef:1e:93:1d:d7:e4:
0f:05:f8:6b:be:2a:5d:8c:9b:2e:f5:67:79:0c:1d:f1:f6:b9:
b4:40:d0:0a:be:4c:21:4b:a2:40:73:17:f4:87:a9:8d:0b:e0:
cb:50:9f:d9:78:4c:c6:68:b4:18:a6:98:04:62:46:21:4a:c9:
54:37:da:9b:12:4f:3d:e9:f0:ff:e8:8f:d2:a9:7e:88:17:8d:
af:45:8c:fa:b8:b7:d4:04:fc:21:67:20:31:8e:91:3b:16:6d:
57:14:f5:39:bf:ef:e5:cf:20:e5:a5:91:13:1f:be:9a:b5:64:
68:a7:17:23:06:17:f2:4a:dd:5b:e2:73:e4:3d:26:74:67:89:
47:3e:c8:d4:5b:95:ab:06:15:c9:3e:ec:18:dd:f2:fe:6b:cc:
cf:7d:20:65:73:f4:72:05:76:b8:f1:8e:96:e8:e2:1d:75:5b:
0e:5a:f4:3b:66:4f:39:5c:45:b1:1e:15:ca:6e:b3:8b:1d:a0:
00:33:b8:51:42:17:fc:b6:78:b5:a1:97:2a:c5:0d:61:26:69:
e7:81:9a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:05:18 2025 by rpki-client