Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
File: IY2n_1dueNwjTrdMvwcwdsH368k.mft (raw, json)
Hash identifier: g7E/CevUopSKBGuytZU/yTgmOOLE40jLXk9qZc+CiD0=
Subject key identifier: A0:74:DD:61:7B:CB:D0:7A:C6:04:EC:73:27:B1:BA:29:B8:9E:06:65
Authority key identifier: 21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9
Certificate issuer: /CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9
Certificate serial: 01976F62D83BF5B47536FA9168230B84B41F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
Manifest number: 11B3
Signing time: Sat 14 Jun 2025 17:00:38 +0000
Manifest this update: Sat 14 Jun 2025 17:00:38 +0000
Manifest next update: Sun 15 Jun 2025 17:00:38 +0000
Files and hashes: 1: IY2n_1dueNwjTrdMvwcwdsH368k.crl (hash: 8ENew3FFtEEWjGuNm1MD2eNbNYT2WMLA/w2X4TFR3xA=)
2: vHFL3NqT62c-dvNoqZM6UY1Qkso.roa (hash: a6jTEveih8CJwQfmE458rXUCSvGrU0Bb9osIwlUUdEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:d8:3b:f5:b4:75:36:fa:91:68:23:0b:84:b4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218da7ff576e78dc234eb74cbf073076c1f7ebc9
Validity
Not Before: Jun 14 17:00:38 2025 GMT
Not After : Jun 15 17:00:38 2025 GMT
Subject: CN=a074dd617bcbd07ac604ec7327b1ba29b89e0665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:38:26:cf:ed:ea:a7:9f:2c:c1:d8:c9:2c:9a:
94:79:52:cd:8c:78:6c:6d:47:9a:60:fd:71:94:fe:
24:da:98:f3:7e:6f:60:05:82:8a:63:db:58:88:98:
d5:a6:e0:53:23:2f:31:7b:ac:11:f2:fe:37:d7:f3:
ae:5a:cb:41:79:c8:09:f6:b0:a0:9a:d9:3f:6e:5a:
7d:5a:ed:08:e0:84:2c:33:6b:0e:63:32:f5:e7:01:
61:5e:bd:e3:55:c2:fa:be:c9:c6:a9:cf:9d:3a:0a:
33:d1:01:fd:44:e8:fa:84:d1:36:fb:95:b9:d6:5b:
dc:6d:e5:db:17:26:be:21:3d:fe:8b:1f:39:93:61:
37:f0:8b:aa:41:8a:f3:90:51:75:76:93:27:e0:9b:
b0:61:ee:86:07:ca:70:f0:57:75:e9:2c:e6:72:0a:
13:d2:d3:13:1e:f2:62:49:9e:fa:6f:a5:2a:7b:07:
d2:72:f9:ce:fb:b7:4b:1c:13:50:38:a1:88:76:63:
05:31:a3:63:a2:52:6e:d7:54:45:8e:93:8a:80:26:
ca:03:b6:9a:a2:80:de:91:d0:58:ae:cd:22:38:4a:
4a:4e:60:a1:78:dd:95:ca:74:5d:ac:24:6d:89:9e:
f4:2d:26:36:cf:6b:18:10:5d:07:71:41:14:95:bc:
47:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:74:DD:61:7B:CB:D0:7A:C6:04:EC:73:27:B1:BA:29:B8:9E:06:65
X509v3 Authority Key Identifier:
keyid:21:8D:A7:FF:57:6E:78:DC:23:4E:B7:4C:BF:07:30:76:C1:F7:EB:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY2n_1dueNwjTrdMvwcwdsH368k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/92b381-e514-438c-b8f9-f8aed30d54c3/1/IY2n_1dueNwjTrdMvwcwdsH368k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:0c:2f:d4:69:26:a4:fb:7c:76:ef:b8:74:f5:c9:66:32:5b:
68:1a:d4:ba:60:c6:ca:db:c2:e5:74:21:80:a9:0a:25:f4:9a:
36:39:1c:11:6a:a7:4b:b0:47:ee:d6:2d:ff:97:ce:da:30:16:
51:ac:4d:85:47:1e:fd:8c:6c:9f:2b:f8:cf:bd:3d:6b:f1:78:
a2:51:f9:38:56:b1:71:00:2c:e6:9e:b5:b3:6c:e7:0d:c1:66:
1f:c2:32:94:c3:07:f3:c3:77:59:d0:03:58:cf:2b:45:08:2a:
8e:24:6f:d6:6a:df:65:b7:03:d0:a6:3e:7f:f8:40:5f:d7:a6:
12:5a:be:ea:e9:46:b2:12:16:4d:5e:aa:61:90:91:22:9e:39:
f1:de:b0:50:fd:2b:49:c3:38:04:0b:a7:8c:46:91:99:b7:e8:
e2:81:2d:5f:a1:bd:6d:f6:be:c6:73:39:92:bc:e9:13:f3:1a:
f7:37:0c:08:5f:b1:4f:44:b5:83:4f:ef:53:42:c5:7b:ca:76:
de:1a:7c:45:e9:0b:bd:3d:1a:89:49:9f:03:72:47:44:8c:b8:
19:98:a7:39:13:6e:7e:2a:0f:eb:0f:32:08:9a:eb:74:db:a9:
f7:ea:d1:97:8e:2d:a3:0f:d6:40:24:ee:88:b6:8a:88:1a:38:
65:dc:ed:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:55:29 2025 by rpki-client