Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
File: I3CEcS_euxv8WowCYtkZqKpEBgM.mft (raw, json)
Hash identifier: WAfF7vOAuYyKuwtFzRYkIF45ltfo7Eyas2A/I2UMDHs=
Subject key identifier: 2C:DF:6F:9B:60:31:7C:F5:5D:26:ED:D9:8F:D3:4E:50:1A:80:8C:58
Authority key identifier: 23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
Certificate issuer: /CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Certificate serial: 019774F723CD14C54CF325E1B93497C773F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
Manifest number: 1599
Signing time: Sun 15 Jun 2025 19:00:42 +0000
Manifest this update: Sun 15 Jun 2025 19:00:42 +0000
Manifest next update: Mon 16 Jun 2025 19:00:42 +0000
Files and hashes: 1: 7OwvAno2l244O2H5lKoBs2hR5TM.roa (hash: e9tNLBCWuvvFCB2/sKRegknsmXrZcwUi3KAU/8XQUJc=)
2: I3CEcS_euxv8WowCYtkZqKpEBgM.crl (hash: PraGsswdd1X6JzKtsPs/siWJdSrgxdA25TEQWo73Fe0=)
3: xGUXIbAREMv-V1pysPMGqJPyYrQ.roa (hash: 8GaytT9yxWXHKMLSPliggwp+AhOIaRE5tpGj4v/Bs/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f7:23:cd:14:c5:4c:f3:25:e1:b9:34:97:c7:73:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Validity
Not Before: Jun 15 19:00:42 2025 GMT
Not After : Jun 16 19:00:42 2025 GMT
Subject: CN=2cdf6f9b60317cf55d26edd98fd34e501a808c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:03:15:32:63:25:b6:08:09:cc:39:39:6f:b2:
5c:5e:2b:97:15:e7:a8:fa:7b:21:98:d4:e6:30:62:
d9:23:5e:b1:e0:ea:de:8c:34:f4:75:9c:c1:7f:83:
e9:ea:03:b4:ad:05:b1:75:27:0e:17:07:ed:b4:2b:
62:23:27:04:5d:27:9e:b1:04:a9:2d:a2:f4:a9:6c:
58:4f:9a:1b:ce:55:d7:17:4e:02:ff:4a:a1:8c:fc:
a3:c7:4c:a6:0f:69:87:df:a5:59:e5:6c:ec:88:ce:
54:23:c5:d4:83:c2:2c:cb:f6:16:23:d3:a4:a6:c2:
89:ad:b9:4f:43:f9:c2:34:84:ec:3c:e4:d0:2a:04:
60:83:82:1a:18:f2:d9:ec:91:8a:9d:e6:23:51:f9:
48:a6:f2:8b:c7:6a:82:e4:77:95:be:15:35:fd:fb:
2a:2b:f9:40:b9:58:f4:e5:78:6c:a5:91:38:6e:eb:
32:69:ca:0d:ca:86:b3:ce:54:c6:e3:eb:97:ca:a0:
51:89:b6:24:58:8c:7f:cd:4a:13:79:17:6e:ac:e0:
b9:30:4c:a6:9d:b7:93:5c:76:e3:e1:b9:07:b6:3a:
86:6c:d2:d2:4e:96:80:72:c9:7f:7c:21:ee:1e:fc:
aa:35:1c:9d:68:f2:0f:78:73:ff:0c:bb:de:26:68:
8e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DF:6F:9B:60:31:7C:F5:5D:26:ED:D9:8F:D3:4E:50:1A:80:8C:58
X509v3 Authority Key Identifier:
keyid:23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a4:a7:c6:61:da:f2:7c:b6:55:64:65:33:92:9a:af:b3:13:
2f:2c:74:bb:a3:4a:17:f6:70:9f:9f:07:05:ea:7f:47:65:d0:
81:74:46:f3:3a:e8:95:55:59:fd:c1:34:2e:b0:52:5b:e4:a3:
cf:8f:bf:33:01:2d:ee:54:da:90:32:e0:7c:0e:69:44:a1:8a:
96:46:e1:fd:10:6e:b0:30:2f:26:c1:be:49:4f:d8:a6:e8:5a:
d3:f4:c1:2e:1e:a5:a9:fe:2e:9d:18:8e:8d:09:c2:00:2f:ae:
5f:b8:d5:b4:f0:4f:d9:2d:d5:c7:aa:c8:a1:99:3a:b4:28:9a:
89:84:62:45:4c:3a:3c:e0:32:26:bf:89:3e:39:e1:fd:d7:e1:
e7:0f:18:ee:1e:09:67:e1:57:58:f8:ff:35:53:35:ee:c1:4b:
44:9e:27:04:47:fc:64:f1:61:ab:ed:6a:c8:40:08:33:4b:87:
d2:2d:07:5e:ef:6d:46:24:88:5f:9a:6d:46:ea:4d:3f:7b:50:
d1:be:e2:a8:8a:22:f2:48:ed:07:d8:f6:7d:bc:f0:74:73:2e:
75:3f:02:1f:d2:e1:0c:f5:88:86:61:68:1f:f0:24:64:bd:31:
18:db:b6:af:84:26:52:2e:31:bb:1b:24:4d:7f:6f:0f:b1:36:
45:1c:f4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:57:26 2025 by rpki-client