Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
File: IjCHszf3R2yNYwSusIzuBX9L9pE.mft (raw, json)
Hash identifier: tAAzKR8XdOB4tqFfX+qo5Bvq2kU44CMBifn9QNmMd2M=
Subject key identifier: 2B:A1:CB:F6:42:D7:6C:A9:A6:54:90:AA:50:4B:9D:BE:26:0B:2E:2D
Authority key identifier: 22:30:87:B3:37:F7:47:6C:8D:63:04:AE:B0:8C:EE:05:7F:4B:F6:91
Certificate issuer: /CN=223087b337f7476c8d6304aeb08cee057f4bf691
Certificate serial: 01976D3DA948B28B28510C95F48272AD3DD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
Manifest number: 44
Signing time: Sat 14 Jun 2025 07:00:46 +0000
Manifest this update: Sat 14 Jun 2025 07:00:46 +0000
Manifest next update: Sun 15 Jun 2025 07:00:46 +0000
Files and hashes: 1: Bn1M99Q5tBtvDTvfZYaWs9lGXls.roa (hash: UYAuM2HQAJGmsbB/aQecotRTuL+/vxYhXSj3RQuXtrM=)
2: IjCHszf3R2yNYwSusIzuBX9L9pE.crl (hash: fYMZopZhsOyn3d4yeDcZji3sW/e+LaErqFSMdAauOwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:a9:48:b2:8b:28:51:0c:95:f4:82:72:ad:3d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=223087b337f7476c8d6304aeb08cee057f4bf691
Validity
Not Before: Jun 14 07:00:46 2025 GMT
Not After : Jun 15 07:00:46 2025 GMT
Subject: CN=2ba1cbf642d76ca9a65490aa504b9dbe260b2e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:9e:a2:cb:2a:6a:52:d1:93:17:24:ce:1c:
a6:56:95:b2:d4:a8:41:23:5d:69:09:ef:00:d8:fc:
d9:dd:f9:9f:d6:8f:b7:ce:85:b4:ea:cc:e0:63:80:
15:51:4d:02:8e:6c:44:10:12:b7:58:b4:be:35:21:
75:e4:e7:5e:0e:4e:19:ed:fc:06:94:6d:7f:0c:5c:
6a:62:06:f9:a5:0b:ef:6c:95:a1:95:cd:11:9e:92:
6d:83:24:c4:6a:ae:2c:fe:fe:6c:86:cd:f2:40:6d:
93:6e:41:ac:c5:a1:2f:e7:b3:c9:44:f9:99:e2:9e:
05:63:ec:2f:8f:ad:2e:5c:19:35:78:a3:58:20:c9:
89:47:9a:7e:8d:b2:7c:99:4b:41:ff:50:b3:a4:22:
05:6a:06:f8:dc:f5:2c:a6:fa:b8:0d:17:b0:93:be:
61:a6:35:54:36:f0:41:27:69:75:ff:f6:a8:e3:2a:
cd:11:ba:d7:54:cc:bd:9e:02:09:45:45:cf:36:4a:
36:59:0e:10:05:56:d4:28:70:ca:04:74:3f:93:50:
10:02:db:48:28:f8:32:5a:0a:d0:36:53:a1:42:47:
1b:19:dc:59:11:66:7f:76:e3:f8:7d:10:d3:5f:55:
81:fe:bf:d6:77:a2:4e:80:89:3e:fd:96:cb:7b:c2:
ad:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A1:CB:F6:42:D7:6C:A9:A6:54:90:AA:50:4B:9D:BE:26:0B:2E:2D
X509v3 Authority Key Identifier:
keyid:22:30:87:B3:37:F7:47:6C:8D:63:04:AE:B0:8C:EE:05:7F:4B:F6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:06:84:30:f5:11:f0:57:24:2e:f7:24:1d:04:db:4e:32:e4:
a5:22:64:1a:61:2a:25:0f:b5:5a:4c:53:6a:7b:59:42:2e:1b:
95:15:b8:d3:c0:f0:4e:fe:90:d5:78:f6:6a:ad:27:05:eb:1d:
7f:79:78:29:5b:7d:2e:dd:fd:bf:92:44:17:2d:d9:2c:f1:d3:
5c:93:8f:ca:c9:b2:f6:72:18:67:12:83:21:55:3c:4c:e8:c8:
f4:26:6e:77:91:11:41:0c:08:2a:14:07:53:67:92:aa:d3:94:
2a:13:ac:23:c0:ea:ea:14:c9:39:db:5f:fe:c7:d8:b7:85:23:
24:58:3b:8e:24:61:6d:02:6d:97:83:c5:63:0a:93:a5:c9:a5:
07:71:84:36:25:84:e2:f1:cb:30:c8:cd:8d:83:9f:32:54:07:
5b:3a:56:5a:b9:e0:c5:b3:f8:c4:68:f2:8d:33:00:56:52:81:
cd:2f:65:60:b5:36:d3:42:d8:79:3c:9d:62:77:61:d4:ae:02:
d7:da:91:0c:77:69:0f:fb:84:b9:dd:56:35:32:ca:6b:12:a2:
0c:5a:1d:ff:e4:ef:9e:6b:14:48:26:a8:1b:57:f5:f8:27:eb:
58:0c:92:00:0b:47:08:8a:af:fb:65:5e:90:3e:f0:77:6f:96:
fa:c4:56:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:42:06 2025 by rpki-client