Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
File: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft (raw, json)
Hash identifier: hIq8tNm6Av/v/GX4oaDJhpL2+wJILOod9DghKmwYCEo=
Subject key identifier: 9B:50:9B:4C:9D:92:48:5C:E8:23:F3:01:8C:FE:8C:CC:34:2F:61:6B
Authority key identifier: 98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
Certificate issuer: /CN=988296c50d94bbed225f2867231fa5093debea91
Certificate serial: 019777C0DF5051D02EB343F1AC0C48445079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
Manifest number: 11D9
Signing time: Mon 16 Jun 2025 08:00:17 +0000
Manifest this update: Mon 16 Jun 2025 08:00:17 +0000
Manifest next update: Tue 17 Jun 2025 08:00:17 +0000
Files and hashes: 1: UjP5WMZKRBsvIlHnzhDHFBUyi78.roa (hash: pQ6/nnpLIpK2rwKH9JMJUyXoOlk8zghaFAetdmitLfY=)
2: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl (hash: S/IbEKTJjIqBfPbVfgHZvFlzg8A1BDTZD8fl+GdvtdA=)
3: oFqjjYPuOysZm8IvX2HFnZ2yMN8.roa (hash: xodF+0GY/o0dnV+Pf3SoupYGcpVAvzY6q/h09Jx9Nzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:c0:df:50:51:d0:2e:b3:43:f1:ac:0c:48:44:50:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988296c50d94bbed225f2867231fa5093debea91
Validity
Not Before: Jun 16 08:00:17 2025 GMT
Not After : Jun 17 08:00:17 2025 GMT
Subject: CN=9b509b4c9d92485ce823f3018cfe8ccc342f616b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cb:31:f6:fa:de:22:0a:ba:4f:08:ab:97:42:
00:88:69:f2:52:b8:0b:8a:33:41:57:47:f8:4e:65:
3a:55:ec:d4:e0:d8:2b:4a:9f:b2:2b:ba:a0:2a:a5:
2a:8d:3f:ae:a0:7e:ed:28:1e:0a:ad:18:84:89:8e:
28:bc:cd:c3:41:e1:e8:26:e9:6a:6f:99:50:21:d5:
e9:70:e8:75:2a:2e:00:57:df:ea:0e:e1:3d:f9:23:
ca:32:40:bb:3f:23:1d:9b:97:a8:d3:77:4a:5a:01:
8b:85:17:30:00:d1:08:08:b3:73:75:ed:16:f6:f5:
1f:33:46:64:ac:26:27:01:11:d5:a2:08:f3:a3:fe:
04:6a:e3:7a:56:22:d4:c7:50:e3:df:02:b1:6a:5b:
0c:08:1e:b7:5b:4a:b4:78:f4:dd:6e:77:0a:3d:0a:
a2:12:88:18:d8:18:3e:78:6b:cf:dc:5f:18:11:a2:
8c:1a:48:7b:ad:ee:9d:ac:2f:32:4b:93:e2:98:1b:
de:41:0a:d6:f1:b9:a1:ca:c6:11:db:92:e2:a0:0a:
e3:9b:a7:88:f2:fd:aa:fb:30:19:07:cf:ff:e9:3e:
3c:39:14:d4:3e:7c:9c:8e:9c:4f:78:71:67:db:13:
57:29:d0:ad:47:29:42:45:9c:ef:4e:b5:ce:e4:35:
2f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:50:9B:4C:9D:92:48:5C:E8:23:F3:01:8C:FE:8C:CC:34:2F:61:6B
X509v3 Authority Key Identifier:
keyid:98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:51:ee:a8:f8:32:b6:b8:c4:7f:ed:83:17:28:37:bb:01:aa:
d8:48:3d:e1:e2:36:69:d6:5e:19:ae:3c:42:68:13:85:dc:e5:
8e:44:69:df:90:28:7d:f5:2d:3d:7b:b4:fb:ca:ac:c5:b7:59:
eb:83:8c:76:d6:ca:b3:ce:fa:35:04:e0:b6:04:42:c6:3f:91:
5e:cd:90:66:73:de:14:e6:8e:f3:c5:44:ca:f7:71:bb:24:6e:
8e:89:4b:6e:8d:c9:50:fa:78:97:11:99:d4:de:e3:71:e3:58:
37:aa:00:17:99:3d:cc:84:67:a4:65:c5:b7:4a:09:05:e9:6a:
64:ca:ca:a6:62:72:05:11:d8:9d:e1:52:57:8a:51:85:d8:3b:
49:3f:fc:1c:90:4c:7d:10:ff:67:dc:ce:7e:39:16:df:7f:8a:
47:e6:09:ef:6e:4a:5d:51:29:09:1f:c9:a6:2d:e2:ca:be:d9:
7e:57:d2:f2:11:c1:8c:c2:54:95:e8:c6:d6:c3:a2:63:e7:80:
70:7c:54:4b:87:73:d4:9e:fe:20:0f:bf:e0:1a:50:a8:11:c4:
73:d6:e4:73:b9:eb:71:19:36:97:e9:a0:27:19:73:4c:3a:b9:
bd:84:9a:e8:fc:3c:d3:64:de:35:ae:83:be:96:5a:44:99:68:
b3:fe:e1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:59:50 2025 by rpki-client