Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
File: IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft (raw, json)
Hash identifier: 3ELbaFNuNUh+mygzfEMlK/WjY2e4TsuBeemCI79tVlA=
Subject key identifier: 38:5A:2E:5E:96:B4:09:21:74:96:EA:29:96:BD:8D:08:AC:43:EF:4D
Authority key identifier: 23:16:2B:BF:02:46:CD:A2:28:0A:29:34:32:AE:6F:0B:D6:82:61:31
Certificate issuer: /CN=23162bbf0246cda2280a293432ae6f0bd6826131
Certificate serial: 01977E3161C5B19CF589D85A38EBB4187471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
Manifest number: 085B
Signing time: Tue 17 Jun 2025 14:00:54 +0000
Manifest this update: Tue 17 Jun 2025 14:00:54 +0000
Manifest next update: Wed 18 Jun 2025 14:00:54 +0000
Files and hashes: 1: IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl (hash: 4yBjNxV8Za3XLDEsmC+ahf4NI6wbrDk6UO0EnPSnrWE=)
2: _Ya9SawdjIbplJ2DDMKFuiItpWw.roa (hash: D98XW56rnTmNC9SFO3Lu162y4j8aooITvkhCs2VUjc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:31:61:c5:b1:9c:f5:89:d8:5a:38:eb:b4:18:74:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23162bbf0246cda2280a293432ae6f0bd6826131
Validity
Not Before: Jun 17 14:00:54 2025 GMT
Not After : Jun 18 14:00:54 2025 GMT
Subject: CN=385a2e5e96b409217496ea2996bd8d08ac43ef4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:07:5f:a8:a0:45:f1:93:78:b9:2c:87:0d:79:
55:69:c6:f7:c5:2e:0f:d6:f4:e7:43:e9:60:66:a3:
0f:c6:3b:e6:5a:d9:33:3c:c5:79:78:fa:56:e4:2f:
ba:35:5d:00:29:65:03:af:37:8c:87:96:80:26:7e:
1b:c5:97:6b:da:35:c6:da:8c:8c:30:ca:70:8e:3f:
c7:aa:db:3f:37:64:b1:11:cd:32:be:7a:51:12:71:
8a:93:96:00:36:80:61:b4:49:4e:e7:e7:bf:4c:c2:
5b:0b:1d:e7:bd:7d:09:ba:45:9a:87:d1:34:8e:3c:
00:b9:8f:4a:90:ee:4b:be:a4:7e:fd:ea:ca:1c:5c:
2e:0e:e8:b7:49:48:8d:c2:34:33:2a:30:e5:12:de:
5b:6e:37:2d:c5:48:49:11:e9:9d:a4:e3:c0:3e:5c:
d7:d4:c4:cb:e5:eb:d9:69:11:3e:3b:74:8a:b2:2e:
11:88:aa:39:b9:cc:d3:87:e0:93:0b:4d:f5:a1:2e:
76:79:41:13:ff:c3:6b:0a:84:f3:b2:3d:0e:a6:61:
5a:6e:74:c7:ff:ad:8b:08:59:5d:03:67:aa:52:9c:
ff:c8:98:15:ee:06:42:78:17:2a:e3:15:cc:5a:17:
2f:9b:03:30:49:c6:4f:30:43:98:0e:c9:1c:2a:ef:
e6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5A:2E:5E:96:B4:09:21:74:96:EA:29:96:BD:8D:08:AC:43:EF:4D
X509v3 Authority Key Identifier:
keyid:23:16:2B:BF:02:46:CD:A2:28:0A:29:34:32:AE:6F:0B:D6:82:61:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7e:56:ef:71:1b:c3:d4:99:43:84:83:2e:77:a3:14:c9:03:
21:a7:36:8a:56:c2:e8:b5:5a:12:a1:79:a9:ab:12:20:2b:aa:
b3:45:15:8e:8e:2d:1f:d1:25:b0:af:91:28:bf:65:80:c7:b0:
62:54:e2:f5:47:16:c7:95:bc:a3:21:1a:3a:95:1b:3b:5e:25:
51:ad:03:b6:df:5a:6f:ee:77:d7:2d:c7:37:78:6d:85:ee:81:
4e:8b:e7:28:57:7d:40:78:76:51:43:80:e3:4c:9b:d9:2a:a2:
5d:bf:be:71:e9:c4:05:41:fb:95:95:e6:e1:e4:f7:56:1b:d3:
45:63:58:d4:ec:80:ab:2e:f1:ef:81:8a:7d:12:a1:26:5b:c7:
d8:f4:28:6c:6d:96:22:98:1d:81:47:16:3d:3d:aa:fa:8c:72:
86:53:6d:d5:08:f3:fb:05:8d:63:e2:53:e7:7f:1d:86:ba:06:
10:52:03:c4:a4:7d:ff:5f:fb:47:65:59:0d:2c:f4:25:a5:fe:
ab:b6:65:ad:96:9c:68:c4:05:20:c6:45:34:88:14:c9:1e:d1:
35:80:7e:a4:71:d3:01:2a:59:8b:36:5c:e8:2a:e3:13:4c:1d:
43:96:48:a1:d6:53:58:dc:08:3b:67:80:34:cf:fc:df:17:f7:
91:dd:81:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 17:24:26 2025 by rpki-client