Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
File: ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft (raw, json)
Hash identifier: 7haak12EV/cJx5G8Q1/0MaGNjcsO2CBRRO4IVo0UnAw=
Subject key identifier: E0:2E:3B:1E:9F:34:69:EA:BD:4F:DC:C0:5F:2B:7E:37:20:E3:77:04
Authority key identifier: 8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
Certificate issuer: /CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Certificate serial: 01977B2FE4A9CD76F4D40B1EDB65A149730F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
Manifest number: 1597
Signing time: Tue 17 Jun 2025 00:00:25 +0000
Manifest this update: Tue 17 Jun 2025 00:00:25 +0000
Manifest next update: Wed 18 Jun 2025 00:00:25 +0000
Files and hashes: 1: Bduq-yHvQD-QD1Xm7ItxU8Y4-T0.roa (hash: P7+nwfqVY/aah4pDKJSFyLVnh+hvfYn9MKyiz8j6bgs=)
2: C7UrWrjqRYaoTXtQBjcVzEUShlI.roa (hash: EMrvXIhrVKvMjJEsXia/sfD0RLNrluqVE1l+FDGQzF8=)
3: ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl (hash: mN92tZZ5ju21fpn4TsAmx9t3ZU6TpchXa1W6AtiDkQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:2f:e4:a9:cd:76:f4:d4:0b:1e:db:65:a1:49:73:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afc31f36c97777f906b93e83ae657f00aeb3099
Validity
Not Before: Jun 17 00:00:25 2025 GMT
Not After : Jun 18 00:00:25 2025 GMT
Subject: CN=e02e3b1e9f3469eabd4fdcc05f2b7e3720e37704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8c:cc:13:0b:84:f5:74:72:a2:82:cc:77:4c:
0b:cf:cb:f2:09:23:2f:55:af:1e:63:08:13:3b:2a:
ce:73:9c:15:3e:2f:f8:82:1d:20:e8:1f:3c:17:e0:
73:10:f7:38:54:ef:91:66:96:45:3f:44:f4:7a:51:
35:4f:42:f7:77:76:4d:cd:5b:a1:3e:42:d5:35:1d:
0d:01:9f:44:c2:0c:4d:0c:37:14:e2:e2:b4:b8:72:
a1:fd:53:c2:5c:55:03:56:dd:6d:38:fd:e6:31:b2:
db:c6:8a:fc:22:9c:18:ae:89:5c:a2:b4:c1:b6:59:
88:aa:0f:2f:52:64:c0:91:67:3b:72:cc:d6:a3:2f:
09:05:fc:f3:21:90:07:0f:04:8c:30:a6:9a:48:73:
1e:53:20:46:ef:a9:72:18:87:7d:88:b1:8b:da:51:
08:6d:f8:b2:62:b7:ae:37:f2:25:da:3a:ca:f1:85:
b9:f6:8a:6d:fe:ce:c8:9a:b8:c3:4a:5d:8f:b7:18:
de:bc:1f:72:14:d8:03:3b:15:55:cc:0f:03:1f:e4:
1b:ec:f7:f6:55:af:2e:02:8f:65:2f:d5:c6:e9:ba:
04:57:69:0e:d5:d8:9c:6f:af:c4:7e:d2:cb:79:de:
0b:f0:21:c6:e9:5a:af:29:98:1a:9e:3e:cf:f6:24:
30:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2E:3B:1E:9F:34:69:EA:BD:4F:DC:C0:5F:2B:7E:37:20:E3:77:04
X509v3 Authority Key Identifier:
keyid:8A:FC:31:F3:6C:97:77:7F:90:6B:93:E8:3A:E6:57:F0:0A:EB:30:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivwx82yXd3-Qa5PoOuZX8ArrMJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d9a004-b953-4c73-81e4-0711694000a0/1/ivwx82yXd3-Qa5PoOuZX8ArrMJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:69:17:11:4f:63:6b:f7:c4:58:46:d7:76:e8:57:7d:59:41:
b9:0c:fe:14:65:eb:86:be:17:41:09:af:2e:52:29:90:75:97:
76:4f:7c:be:70:ed:a8:b8:21:c6:cb:be:4f:7f:ba:a0:d1:ed:
23:12:24:96:5e:5a:4e:d6:ad:12:51:fd:95:2d:95:d1:8c:b3:
f2:5b:1f:a5:68:9e:57:35:5e:d4:62:6e:57:d6:71:44:5c:8e:
a2:ac:1b:59:a5:3e:de:04:6d:ab:8d:05:09:38:db:e5:58:b4:
02:f1:a2:49:80:b5:03:0a:96:d7:3e:08:8e:43:53:2c:a8:b4:
d9:ec:f0:52:12:25:54:3c:0c:1d:0a:a3:ed:30:8b:59:94:b8:
2d:03:0f:b3:bd:a0:ed:a9:50:32:3f:94:c4:3e:06:b7:aa:89:
be:b2:dd:b7:c7:39:55:81:37:a4:eb:3b:48:1f:38:b2:0a:54:
db:0c:0a:72:63:18:86:f8:31:eb:4c:79:22:f6:6c:a7:b4:32:
f2:fe:b5:2c:ca:2b:47:ce:cf:07:95:eb:3c:6f:d7:03:0c:2e:
99:54:6f:bf:f3:58:7f:95:31:b9:8b:b7:91:e0:c8:08:87:e8:
0b:04:c0:a9:94:2d:b4:89:b0:7e:b9:3a:53:30:f9:3f:41:bf:
79:f4:6a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 08:59:51 2025 by rpki-client