Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
File: IT4dUNUiiL7oDupDVXcBhxJAm74.mft (raw, json)
Hash identifier: iXWTWZEDB/4txmwMyJbV4PUMBsd4a8/S7nnE7rdTndQ=
Subject key identifier: E0:FA:8F:41:63:CD:C5:3B:B8:17:4E:05:BF:A7:CF:B4:1E:E9:A6:73
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 019778D39D292B8FCB386E449528D34F91B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
Manifest number: 10DF
Signing time: Mon 16 Jun 2025 13:00:23 +0000
Manifest this update: Mon 16 Jun 2025 13:00:23 +0000
Manifest next update: Tue 17 Jun 2025 13:00:23 +0000
Files and hashes: 1: 2N_zpLQwrwSyRkgYGfDIDrZmRX8.roa (hash: CWXjSwQLjKOG0et0xzN2NEw5nAJl4/WbqLQdi9+PdTE=)
2: F5qz-Vy2ncltsniwS8n2KgCCfq0.roa (hash: kxMCsu4yD7h4P+QzcS37eIb+y0MEuK5iSa4JgSytJ7M=)
3: IT4dUNUiiL7oDupDVXcBhxJAm74.crl (hash: CfcSoQZMXyD0WkLmt3A8VT1qXlaCgRLaZvcmPUqxuKk=)
4: StSC9N03azFTttR3EoIav2MRsZc.roa (hash: Cu2Gg7GKVcYUuysW1qolVhXM9Kgp01W96yjaPNDKJxk=)
5: yuBu_3gHtbd-ZA0cmziwRxPp40Y.roa (hash: 12MkinUl6y/dxpUnE9iHGFhPa61KkEanTpa0XWLfanw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d3:9d:29:2b:8f:cb:38:6e:44:95:28:d3:4f:91:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Jun 16 13:00:23 2025 GMT
Not After : Jun 17 13:00:23 2025 GMT
Subject: CN=e0fa8f4163cdc53bb8174e05bfa7cfb41ee9a673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d4:82:74:7b:cb:b1:51:2d:5c:b9:e7:83:28:
55:c1:d2:57:fc:23:34:25:3e:7f:b1:09:7f:53:b9:
49:ca:f8:07:d9:43:08:f6:8a:2d:6d:1e:f0:a1:0e:
92:f5:85:2c:a9:8e:9f:74:24:9d:45:32:b0:75:23:
cd:62:9c:7c:e8:25:31:38:8b:bb:73:7a:e4:ce:dd:
2d:0d:9b:c3:2f:07:79:82:8f:4f:f4:71:8d:19:ed:
ca:ea:6a:9e:04:1b:c0:5c:fe:51:bd:f0:48:95:ac:
01:77:66:cc:d5:0a:c8:46:6d:c4:04:f0:f3:57:d8:
f8:01:61:53:0b:2b:30:19:ff:ec:71:23:c1:2d:95:
4b:3a:64:54:5b:ff:16:c1:dd:f3:97:a3:77:cb:33:
a9:44:a5:c7:a7:3c:97:fc:a0:87:e6:a7:0f:5b:ef:
95:75:6a:90:7d:3b:95:44:e5:43:72:14:3c:07:51:
e8:44:9b:67:29:df:e7:5d:53:5a:dd:04:0b:6b:ff:
d4:24:0e:20:e7:b3:f2:ef:2c:29:38:4d:d7:70:6c:
b3:1c:07:56:5a:2b:f1:b8:fa:65:4a:59:cb:6a:43:
80:14:de:b2:5c:30:37:13:d8:9e:b4:91:90:98:52:
e8:2e:80:f8:cc:d5:1e:99:1d:e9:ef:6d:8f:96:5f:
29:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FA:8F:41:63:CD:C5:3B:B8:17:4E:05:BF:A7:CF:B4:1E:E9:A6:73
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:4d:1f:21:8f:ff:d9:81:8d:8c:6f:48:5b:6d:93:2a:c3:a1:
c0:46:52:bb:28:6c:97:ce:d4:8a:e4:42:ce:9f:00:71:cb:d2:
45:da:6f:83:7b:4f:09:a3:e6:96:e3:58:b4:fc:0e:fe:70:52:
27:64:24:5a:68:6a:67:c4:74:36:64:ce:18:d2:f5:e8:39:d3:
67:30:a3:37:35:50:7e:96:1e:4a:13:77:37:f8:2f:77:ae:34:
b3:55:9a:7e:e0:f7:31:b3:16:4a:7b:e3:98:87:e0:40:fb:91:
8d:84:e8:5d:a6:a0:49:de:1f:fe:f2:af:e6:31:b8:61:19:22:
07:2c:b1:98:33:3a:38:82:b3:57:8b:40:52:f4:51:33:a6:e0:
b6:14:7c:42:4a:30:28:73:0a:fe:54:30:14:80:f6:1a:f9:99:
22:6f:d0:6f:3d:28:c3:8d:89:ac:cc:33:5b:cf:bc:bf:27:c6:
ce:19:ac:ad:a6:07:96:e9:8e:77:38:7f:bb:6a:c2:3b:fa:83:
8a:0d:8a:59:ff:2e:ed:cc:0e:ba:9f:78:aa:9a:ad:92:1f:08:
b5:58:0a:63:00:92:b9:27:f5:9a:3a:7c:63:49:6b:5b:77:14:
5a:7c:78:7a:78:7f:c8:46:bc:d4:97:cd:89:9d:b1:de:0e:09:
b5:2b:36:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:08:25 2025 by rpki-client