Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
File: IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json)
Hash identifier: tSZxDYVJ8hwxeH8oI51cwCh1ek+QfuzWHEFVd5qFgKg=
Subject key identifier: 2C:F2:94:E6:3D:27:49:D0:30:B3:7B:7F:54:C9:AF:1D:78:3B:B7:4D
Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
Certificate issuer: /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Certificate serial: 019775D2D50A0004A547FBFB3AE64E8A4EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
Manifest number: 0563
Signing time: Sun 15 Jun 2025 23:00:40 +0000
Manifest this update: Sun 15 Jun 2025 23:00:40 +0000
Manifest next update: Mon 16 Jun 2025 23:00:40 +0000
Files and hashes: 1: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: RdvK+YV3eYF1KIv3mEDt0YFwEgHQNjT9CG8u+4H0dmY=)
2: M9VdnF4uhv3S8ynJo1kTEBW1AUE.roa (hash: wgWraMBXBDnGqGgz/A6JsNtS6LmlDAkjX4m8FBkaGn8=)
3: P4joPrMbyyf9eJU97dD_0zc8DJY.roa (hash: gl6GZ/HrB5BKfA9rjfcCYlZhjRwEwX8+Blcs80phGI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:d2:d5:0a:00:04:a5:47:fb:fb:3a:e6:4e:8a:4e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Validity
Not Before: Jun 15 23:00:40 2025 GMT
Not After : Jun 16 23:00:40 2025 GMT
Subject: CN=2cf294e63d2749d030b37b7f54c9af1d783bb74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:42:32:d5:ef:d0:d8:c3:df:7c:b5:7f:cc:
b8:d2:54:f3:ca:61:20:33:3b:f3:56:24:35:86:6a:
9b:f5:1b:0c:22:7e:cf:22:1b:89:83:d2:d5:4f:d6:
94:9d:60:80:55:04:79:09:c4:80:2f:5b:60:b4:89:
5a:46:ed:2a:99:2d:53:20:82:0c:2f:cb:2f:6c:be:
ee:a7:e9:ca:19:7b:0f:d7:b0:2a:27:fd:eb:89:0e:
cb:79:84:57:97:ca:ca:6c:57:98:88:53:d6:3e:c6:
9c:f8:1c:09:02:a7:9e:ce:f8:37:c5:86:27:2f:79:
79:b5:2d:0d:fb:ba:e2:48:f7:7b:ed:13:5d:31:69:
07:21:bf:c5:60:c9:b0:c5:10:61:32:21:36:50:24:
37:8f:5a:29:d7:6c:dd:0a:5f:cd:75:d9:9c:05:c1:
0f:2c:d0:4e:6a:4c:81:e7:b0:64:d6:94:f6:bc:61:
36:a5:b1:99:07:7a:5d:59:62:1f:77:e0:6d:87:ed:
0c:e3:14:02:a5:d2:81:ac:bd:02:5a:ac:5e:ea:e7:
0f:30:1e:88:40:5b:6d:06:9f:62:74:47:49:dc:80:
ac:26:85:b0:db:dc:6f:93:4d:42:c7:b2:40:ef:cf:
a3:46:dd:fd:4a:92:bb:f5:7d:7f:6c:cf:9f:87:5f:
4c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F2:94:E6:3D:27:49:D0:30:B3:7B:7F:54:C9:AF:1D:78:3B:B7:4D
X509v3 Authority Key Identifier:
keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:fe:01:f6:be:d7:f5:91:bc:25:80:e3:2e:97:29:21:3c:80:
aa:5e:97:0a:2f:e6:b4:97:2a:fe:ed:e4:52:a0:08:6a:c9:b1:
35:da:ab:29:2f:8d:70:69:e6:e9:c8:60:5f:c3:a6:f8:a4:51:
94:7b:77:b6:06:fc:36:56:70:dc:f9:c6:f8:91:9a:8d:ed:03:
ea:72:6e:17:95:80:14:bf:0c:27:42:20:03:5e:bb:47:48:d5:
ca:c9:cc:a9:2c:3e:13:e4:8f:fd:c1:8c:42:41:76:b0:b8:75:
aa:31:3e:65:5f:5f:5e:6d:ba:35:fc:d1:86:96:31:fc:aa:b4:
6a:b3:68:6e:f5:51:b6:9a:e8:5a:7f:47:88:11:58:24:90:6b:
15:3e:9f:69:86:c4:5f:79:00:48:8d:70:06:6d:68:82:c1:88:
5e:f8:e1:f3:c9:82:37:09:0e:83:31:c2:56:cc:14:55:e8:f7:
96:3b:78:c8:71:f5:3a:57:a3:45:2e:06:af:02:a2:5f:84:2d:
2f:ef:2b:18:8d:61:7f:50:5e:dd:e2:35:0a:6c:be:bd:78:3d:
c9:9d:97:c0:84:2e:dd:b2:6c:a9:37:e7:4d:f6:5f:2e:25:99:
1b:d4:59:6e:fb:74:2f:a0:b9:f8:dc:80:94:48:61:2f:3b:56:
39:9c:11:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:39:04 2025 by rpki-client