Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
File: IOuvVUyRRowQUkuvdC6ksaXQtJw.mft (raw, json)
Hash identifier: dzQvVFO0z5M9JLouxLsFqIypGA8wbz7tZtOrL+ikm/Q=
Subject key identifier: 5F:34:32:DF:56:77:DF:AE:C6:87:0D:8E:19:9E:71:6F:98:6C:54:B7
Authority key identifier: 20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
Certificate issuer: /CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Certificate serial: 01974FA15DE219CC431EE43A390E69442CB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
Manifest number: 139E
Signing time: Sun 08 Jun 2025 13:01:04 +0000
Manifest this update: Sun 08 Jun 2025 13:01:04 +0000
Manifest next update: Mon 09 Jun 2025 13:01:04 +0000
Files and hashes: 1: 6sYUJgHMNdzO6paPv5kT75LFzMc.roa (hash: euN2jhENl/mjvfTsWMycKvV7868btLSqNHa81KtP/1U=)
2: IOuvVUyRRowQUkuvdC6ksaXQtJw.crl (hash: b3glwMCS1lpkNy4B2J9ateaJiRpy1auL2nVEizTp8kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a1:5d:e2:19:cc:43:1e:e4:3a:39:0e:69:44:2c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ebaf554c91468c10524baf742ea4b1a5d0b49c
Validity
Not Before: Jun 8 13:01:04 2025 GMT
Not After : Jun 9 13:01:04 2025 GMT
Subject: CN=5f3432df5677dfaec6870d8e199e716f986c54b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:16:d2:af:15:11:d1:3f:42:8b:8d:68:b7:
9d:28:8d:32:a4:cf:87:68:5d:66:a7:f9:d6:c9:22:
b3:e6:59:07:ff:c7:1c:da:6c:e1:c0:7d:34:d7:82:
0f:e6:31:26:64:66:c8:9e:88:a2:be:b5:77:c5:fd:
70:c3:75:84:1c:c4:60:29:b7:3e:35:20:d7:b9:87:
cd:5f:df:88:d0:85:0c:44:70:ad:3c:64:7a:19:07:
3c:db:c4:54:63:27:52:38:62:70:85:f8:ad:ee:24:
13:20:18:a8:4c:d6:9e:63:5e:33:4c:56:11:b7:c2:
ad:1e:48:b8:98:e0:ec:17:ec:ed:5e:3e:bb:b6:31:
1f:0e:5d:6c:3a:d0:ea:f4:ea:03:9a:dd:d7:d6:c7:
4a:2f:29:99:83:4a:23:a4:e2:0d:35:7e:f5:0a:76:
7f:7e:7f:7d:d3:ce:1e:76:fc:45:dc:9a:68:bf:ca:
78:34:37:6d:ae:51:8e:13:0d:c1:25:25:c1:6a:31:
dd:2d:be:c1:02:2c:7c:b6:fc:6d:25:72:67:cf:45:
6e:4a:aa:de:4a:3e:4a:40:e5:aa:cb:4c:93:fd:b7:
07:c6:3d:25:08:2f:d8:12:bc:67:ed:77:10:58:5f:
41:23:ae:3a:3a:13:51:59:3d:a3:e8:de:ca:77:ec:
b1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:34:32:DF:56:77:DF:AE:C6:87:0D:8E:19:9E:71:6F:98:6C:54:B7
X509v3 Authority Key Identifier:
keyid:20:EB:AF:55:4C:91:46:8C:10:52:4B:AF:74:2E:A4:B1:A5:D0:B4:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOuvVUyRRowQUkuvdC6ksaXQtJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f1c35-5a68-4786-9181-59f19fa10a1c/1/IOuvVUyRRowQUkuvdC6ksaXQtJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:5b:e8:e0:6e:16:26:40:40:60:74:0c:64:b8:c6:6a:87:03:
de:89:86:6f:06:f0:a3:4a:c7:46:e3:01:87:8d:29:08:4a:d6:
b6:86:e4:b8:36:45:a6:2c:df:5b:e4:1e:32:50:e2:4d:48:47:
5b:3a:80:39:bf:87:87:b1:53:39:af:a0:16:5b:40:d3:a6:36:
95:fc:e3:43:13:ad:16:2a:81:e8:be:b7:8a:79:5b:41:d6:a4:
2e:aa:19:ce:15:ff:b1:9d:03:0c:0a:02:34:a9:8f:51:df:1f:
4d:4d:b3:c4:d8:21:a0:ad:9a:d5:f8:c0:a7:c8:68:00:be:b5:
08:bd:22:19:a4:1a:7a:81:d1:f1:13:7e:84:cf:ff:2b:bf:6d:
1f:84:f7:b6:0e:58:cb:c9:2e:92:a4:d8:21:bf:4b:95:2b:af:
a0:a9:01:d7:27:a9:92:1b:87:63:55:62:d6:8e:6f:20:c0:8f:
c7:26:ab:d9:05:7a:09:49:ec:ef:65:77:6d:a0:2d:46:08:68:
97:53:e8:ba:53:79:b9:32:4e:b3:7c:80:4a:59:8f:90:fd:d3:
62:ef:39:d8:f7:d1:49:44:4d:df:53:f9:c1:36:85:6e:9a:95:
5a:08:aa:17:7e:4d:c1:cf:4c:3a:3b:e4:62:a3:b1:d5:77:0f:
70:a1:c2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:43:29 2025 by rpki-client