Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
File: I7oexPA1py36OekwrY7FQ2jrevQ.mft (raw, json)
Hash identifier: wSiBgVG48PVf+EAWsyfe8NxUyb1kldOB9rXTdt1zOHw=
Subject key identifier: BD:8C:59:7A:04:A2:A9:D5:3A:0E:0A:6D:25:16:AE:7E:D3:BC:9D:92
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Certificate issuer: /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial: 019776AE4B0F7FB44AD2A018FB151A9DB794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
Manifest number: 159A
Signing time: Mon 16 Jun 2025 03:00:23 +0000
Manifest this update: Mon 16 Jun 2025 03:00:23 +0000
Manifest next update: Tue 17 Jun 2025 03:00:23 +0000
Files and hashes: 1: I7oexPA1py36OekwrY7FQ2jrevQ.crl (hash: tAuROPtJSxoRiu3yQE9ECI22YXbY888pzUvb3kg8ozQ=)
2: LrVwKiIfML7mAYKSwQjrFc9mp0A.roa (hash: pqGsuXC48BK/nJrmWeripHJL6964Try+bgZKQC5cMuM=)
3: bKwA7ygctFGfYxj37Ulrjy4h7wc.roa (hash: wDr01UuqGpYUgCW7TRCxOE6weB2OEkQge2nt3Tah0ms=)
4: b_MmvUZfA5ZZF4bFCypyK1p5UMI.roa (hash: 9E4PGJ6w5hYLiKvYcuEqwE8eKmB9cOnevFWIyVMZhgE=)
5: wmfmaFsDhu27cNgPElAJRkA9d2A.roa (hash: jsS53vdJzXk5aLl615moQFBVWf7IQgXR2RroQvAW/zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:ae:4b:0f:7f:b4:4a:d2:a0:18:fb:15:1a:9d:b7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Validity
Not Before: Jun 16 03:00:23 2025 GMT
Not After : Jun 17 03:00:23 2025 GMT
Subject: CN=bd8c597a04a2a9d53a0e0a6d2516ae7ed3bc9d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:40:c5:07:be:f7:bf:f0:70:6f:26:6a:79:53:
2d:75:01:cc:7a:85:4a:59:31:e4:4e:57:42:49:13:
80:97:93:16:b1:fb:13:84:4a:bf:a1:de:8d:23:69:
89:8c:1a:e9:1b:db:c3:0e:66:f6:fd:9c:2c:1a:aa:
cf:fb:19:45:8f:b1:87:df:22:75:59:a2:77:41:2f:
2c:65:f8:83:74:9d:60:25:97:39:21:87:01:ae:38:
46:0d:f2:d2:b5:13:52:ad:41:89:22:2f:96:e9:29:
e6:ac:3d:60:7a:cb:5b:54:f7:5a:92:b8:76:00:17:
95:8f:ac:4c:1e:45:10:bf:3b:85:6f:06:40:e0:9a:
25:22:4b:ea:f7:a6:7c:58:36:e9:84:e6:9b:15:08:
ff:d7:4c:84:1c:22:71:fa:3e:fc:bc:b1:67:ee:64:
3c:ae:84:0a:1d:9a:93:ab:bc:9e:be:21:d2:04:dc:
84:05:f4:fc:06:73:b7:f7:92:6d:7f:f8:9c:e8:b9:
bd:33:a1:c1:e6:c0:2d:de:ee:c0:4e:54:5a:85:d8:
ad:8c:96:06:79:d9:fb:ba:40:e8:da:c6:44:dd:3f:
bf:bf:99:87:95:b1:59:16:16:a8:2c:4a:fe:ac:07:
2d:fa:d0:9f:47:10:43:b2:03:70:2e:b6:bf:08:41:
33:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8C:59:7A:04:A2:A9:D5:3A:0E:0A:6D:25:16:AE:7E:D3:BC:9D:92
X509v3 Authority Key Identifier:
keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:4a:79:ba:3c:a4:51:ad:1a:d4:6c:86:98:a6:d6:c1:2a:d5:
23:86:94:54:ea:35:cc:dd:4d:14:0c:a7:61:c6:1a:e6:13:a8:
64:52:de:fe:50:70:91:51:ea:f0:92:43:1d:f2:ce:fd:4d:5e:
bb:0b:73:58:6f:91:26:24:65:31:40:6d:f8:7c:84:d6:22:51:
f2:34:47:92:b2:5b:88:69:2f:5f:48:15:d6:11:7d:43:20:18:
9f:2b:e6:a6:78:a8:2c:44:a7:bb:e9:ec:c5:49:69:b9:2a:ff:
0f:bc:11:d4:a3:8a:8d:4e:63:12:e2:15:55:a9:b2:cb:4c:5b:
3b:78:14:b8:57:82:72:11:4f:88:d3:f3:ee:f1:06:d5:92:35:
18:ba:2b:c2:63:38:d9:e8:f4:e6:c0:3d:24:f3:28:7d:b7:de:
47:13:08:11:e3:17:b2:ae:17:6e:46:e0:59:94:2e:b3:44:cc:
1e:64:09:cc:22:4d:a9:8d:7b:da:2c:62:ad:2c:15:c3:95:a3:
63:d7:53:ef:80:e0:97:07:40:3b:7c:ee:27:62:f5:9b:bb:33:
3e:bb:f1:b6:8e:ed:96:8f:e5:45:c5:3b:28:a8:f0:84:62:f4:
22:f1:e7:65:79:fa:73:7f:19:75:ec:b0:70:9f:78:8e:13:07:
7d:38:6b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:06:24 2025 by rpki-client