Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
File: itN6mTOwUsLxLvG48U108F_dthE.mft (raw, json)
Hash identifier: 3Idr4isF13FRM95jh2hAHpJL/qb1q3Q3r45e80io4vU=
Subject key identifier: 64:EC:3F:4F:93:73:79:8E:45:10:A8:34:06:7F:6B:EE:4E:6C:BF:4B
Authority key identifier: 8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
Certificate issuer: /CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Certificate serial: 01976960803EE92E6D3D39D90F944C54BDDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
Manifest number: 1590
Signing time: Fri 13 Jun 2025 13:00:21 +0000
Manifest this update: Fri 13 Jun 2025 13:00:21 +0000
Manifest next update: Sat 14 Jun 2025 13:00:21 +0000
Files and hashes: 1: JwgRDJiJNlMDAQ-P-K-E7oLdVEE.roa (hash: eWvYggxPbmUrtkETleY+0mXFUMuKDGQl8Ca4V2dhuzo=)
2: RE9aFykceNUyqQ5Yh55JiiN859A.roa (hash: h9rNiKJSEqsRDhT3jZgfTnHK3ITCLzU3oznaGDO3rok=)
3: itN6mTOwUsLxLvG48U108F_dthE.crl (hash: UVdHFy+nL40fXpQs0Gc8md3N78m04YoM9EXoh29YAaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:80:3e:e9:2e:6d:3d:39:d9:0f:94:4c:54:bd:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Validity
Not Before: Jun 13 13:00:21 2025 GMT
Not After : Jun 14 13:00:21 2025 GMT
Subject: CN=64ec3f4f9373798e4510a834067f6bee4e6cbf4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:04:26:51:79:f3:44:e2:f5:be:44:d9:f2:
d1:8b:99:b2:fe:cd:94:b5:5a:11:b9:1c:a9:59:87:
23:6a:16:bf:0d:d9:b2:5d:63:60:a8:a8:cf:f5:68:
5e:b9:34:13:ed:07:e5:ad:28:73:5d:21:39:64:65:
69:b4:45:c5:14:1c:e3:ad:0b:de:21:ca:aa:d5:af:
a1:f6:bc:eb:0a:27:ce:1b:8b:a8:a4:8f:61:ea:92:
1f:90:ed:39:b3:f9:8b:83:bb:5e:5b:d4:0a:c5:e0:
89:2c:5c:66:4a:de:5c:67:73:28:e5:91:1d:24:27:
a1:1e:7c:08:3d:51:40:ad:63:66:fe:eb:2c:e0:20:
81:9c:41:8a:26:f8:ab:cd:f1:60:8f:da:5b:eb:5c:
2e:4b:57:4e:03:31:fe:b1:3d:93:0a:ba:cd:c5:62:
df:7e:19:4f:b3:04:86:bc:05:e5:7a:32:2f:6c:38:
52:6f:1b:a8:4d:ad:51:62:98:49:79:1e:7a:15:7b:
4b:3f:ac:93:f1:f6:6d:73:ff:f6:01:b9:38:b3:4d:
37:b2:bd:c3:18:31:da:34:fa:45:9d:1e:ae:4b:9f:
c1:6a:3c:28:c7:89:83:a0:65:cb:9a:a7:77:63:fb:
c7:ad:c5:53:5b:29:04:4d:c6:15:b8:66:5f:38:de:
b6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EC:3F:4F:93:73:79:8E:45:10:A8:34:06:7F:6B:EE:4E:6C:BF:4B
X509v3 Authority Key Identifier:
keyid:8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:79:7d:6d:12:79:be:4b:0c:36:b4:46:54:66:ce:79:f0:28:
38:5c:40:81:ca:fb:1c:d2:b3:e0:62:8d:80:8f:ee:8b:62:9e:
e2:e6:e2:08:cb:cc:b0:0f:51:1d:ad:5a:f5:34:b5:61:bb:53:
91:33:1d:16:dd:d3:f3:22:0a:7d:18:71:79:24:b0:a0:f3:1b:
5b:7c:65:fd:6d:7a:0a:c1:5b:e4:67:ae:6f:2a:c2:b3:05:a9:
1e:3c:f5:f5:2c:39:1c:28:71:f5:ad:aa:bd:92:f7:a4:11:4c:
d3:5d:df:92:3d:04:73:9e:73:42:6e:1e:83:be:fa:bd:19:de:
eb:50:7b:94:35:64:a2:9c:f1:0d:ef:68:6f:b5:1a:df:00:16:
b5:98:0c:55:b2:ab:08:07:9f:5f:49:5f:db:8d:48:09:da:53:
55:30:a3:a6:0d:9c:55:ba:53:19:ae:52:af:00:66:40:f8:4e:
8f:37:10:bd:e5:9f:85:f9:d0:8e:6a:55:0b:72:2d:0e:ff:65:
4f:5b:98:01:a8:fc:0a:fd:5d:55:09:39:42:d6:4b:c3:8d:dd:
74:a8:fc:a0:6d:37:e8:68:c3:c9:d5:c0:7d:59:72:96:33:44:
6b:fd:a5:28:a2:f2:07:81:a6:88:6d:f6:1b:07:ce:06:03:ce:
a0:77:4a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:59:40 2025 by rpki-client