Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
File: I5xF5DYlUiCArsU5UpiaE6KKvQA.mft (raw, json)
Hash identifier: kpF9nhqyPmS2uJeKakrhs9sL78iUqW9PZvQ3Bw3KVM0=
Subject key identifier: 86:C0:1A:63:DA:1B:17:DF:F4:53:AF:93:65:67:4C:1D:08:37:22:15
Authority key identifier: 23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
Certificate issuer: /CN=239c45e43625522080aec53952989a13a28abd00
Certificate serial: 019769619767695FA1F18F092CB44048480C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
Manifest number: 1590
Signing time: Fri 13 Jun 2025 13:01:32 +0000
Manifest this update: Fri 13 Jun 2025 13:01:32 +0000
Manifest next update: Sat 14 Jun 2025 13:01:32 +0000
Files and hashes: 1: I5xF5DYlUiCArsU5UpiaE6KKvQA.crl (hash: ChIEkHaThovFwPGyRx4gRXDh926Vc9b+b5Ib6B4iKOQ=)
2: lw90sey6Y2XkP3Sip6ebzWQtTKU.roa (hash: IdqbojAlXr4XwjmKtJYEU/2zd7cvDplQCfLZ9IO+/d0=)
3: uBZl19XYTdc5SBXaRHXvV0GGF98.roa (hash: 1Ti03xYR3EsLOQdndtqiFtUtuVxyXY66yoLYTtqG1ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:97:67:69:5f:a1:f1:8f:09:2c:b4:40:48:48:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239c45e43625522080aec53952989a13a28abd00
Validity
Not Before: Jun 13 13:01:32 2025 GMT
Not After : Jun 14 13:01:32 2025 GMT
Subject: CN=86c01a63da1b17dff453af9365674c1d08372215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:ee:bf:47:5f:dc:bc:80:8d:ea:4b:5a:e7:
4d:b9:25:da:51:08:73:85:37:94:ad:9e:14:f7:16:
85:2b:24:6a:87:d0:18:fe:0e:90:b8:45:66:56:02:
a2:9b:57:af:a0:7d:f0:2b:af:fd:5a:ca:96:d3:14:
c2:2f:72:3e:3d:3f:67:7d:28:2b:2b:46:7f:15:08:
bf:f3:26:7e:71:5b:90:12:0a:02:7d:d0:cd:0b:be:
93:56:1d:17:5b:b8:53:df:b6:40:29:20:d9:85:93:
28:6d:f6:16:86:e1:a9:85:20:3a:f8:0c:23:62:38:
e4:d0:dd:c9:b1:c4:3d:db:a2:3f:38:00:91:74:76:
7f:bf:45:9f:d8:e4:2d:ce:6d:6d:2b:45:7f:19:c7:
af:3a:8f:65:b2:a5:e7:35:e1:f8:56:32:2c:ad:ac:
a8:dd:3d:ef:80:24:a5:b5:fe:7b:ca:c6:57:5b:b9:
24:f6:26:cb:bf:11:99:b8:24:66:c3:b4:69:54:71:
66:b1:7b:20:67:23:92:16:e0:04:c7:08:1d:54:30:
28:ed:5c:1c:51:45:06:7d:0e:70:59:48:00:dd:57:
21:1b:40:0e:81:ae:8f:04:00:19:d3:70:2f:d4:0c:
d6:17:d4:7e:6d:ba:f9:7c:1a:1e:ac:59:23:5e:d3:
69:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C0:1A:63:DA:1B:17:DF:F4:53:AF:93:65:67:4C:1D:08:37:22:15
X509v3 Authority Key Identifier:
keyid:23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:36:4b:c5:43:f4:be:5d:52:9f:3d:4f:85:50:9c:52:46:6b:
72:f7:a5:c3:f6:ee:33:9e:99:58:75:ac:11:65:bc:61:ab:6d:
93:75:a8:29:c9:51:f2:6f:96:a9:1a:10:52:2f:dd:80:c4:51:
f8:b7:04:10:25:27:e6:23:c8:ef:68:23:8b:2e:e5:ef:72:0e:
db:5f:c1:2d:7e:5b:bc:d6:6c:9c:f2:8a:e7:b6:67:14:84:e5:
79:31:46:95:8b:e8:10:d4:f2:0c:7e:72:79:42:43:b6:07:ba:
5a:99:8c:b6:25:33:ac:90:40:15:42:44:39:c3:73:c4:7f:a4:
a1:09:6f:50:d7:c4:98:7b:db:c0:cb:59:a5:ca:da:87:7f:82:
2a:0f:06:6d:59:68:1a:10:6b:33:7a:7c:c6:78:b0:e7:07:4e:
5e:7e:43:7b:1d:3c:d7:6f:34:57:c6:82:5d:c5:11:0d:3e:85:
cf:d9:e7:68:f7:57:2c:86:90:da:bc:23:62:8b:69:b8:8b:a6:
dc:2f:d3:2a:71:4b:5a:87:53:e8:2e:e3:f9:1a:8a:8e:78:22:
f0:39:aa:73:3e:5f:c0:9d:f3:a0:6b:5c:b3:e2:16:a1:79:1b:
f0:c3:c2:8e:cd:05:ab:2e:46:c1:f5:df:1e:9f:d4:69:c8:80:
01:b2:27:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:34:11 2025 by rpki-client