Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
File: IO7gXaGD3uK4EYFBlWRiySQNeHY.mft (raw, json)
Hash identifier: MytgXZbHCrPgvLa+t0Igr9CMKywfX19NQqvBlXa43WI=
Subject key identifier: E6:3C:B5:30:CF:87:8E:6E:C3:F5:6D:78:A9:B3:99:96:81:54:E2:34
Authority key identifier: 20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76
Certificate issuer: /CN=20eee05da183dee2b8118141956462c9240d7876
Certificate serial: 01976BBD18D035E986A3E8826D7A8655E124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
Manifest number: 1399
Signing time: Sat 14 Jun 2025 00:00:44 +0000
Manifest this update: Sat 14 Jun 2025 00:00:44 +0000
Manifest next update: Sun 15 Jun 2025 00:00:44 +0000
Files and hashes: 1: IO7gXaGD3uK4EYFBlWRiySQNeHY.crl (hash: 7h4HmF7Xv25oPGEbAEzNrMf34KjfNIln5yeIi/6wMh4=)
2: UOhBO5tiijOD2pDmpEzGmcmWS0c.roa (hash: xgr3YICoBLMfkC1gTEslMu1vKZNde/9vfYQRW1pAxzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:18:d0:35:e9:86:a3:e8:82:6d:7a:86:55:e1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20eee05da183dee2b8118141956462c9240d7876
Validity
Not Before: Jun 14 00:00:44 2025 GMT
Not After : Jun 15 00:00:44 2025 GMT
Subject: CN=e63cb530cf878e6ec3f56d78a9b399968154e234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d0:b0:ba:0b:7b:f8:3d:64:20:fb:f7:05:1d:
86:56:6c:6f:c9:6f:53:6d:8d:9b:73:fd:2e:82:96:
fa:ef:fd:47:f8:b4:07:85:2b:68:4f:06:42:a5:5c:
2f:3e:c4:e7:c9:4e:e5:11:31:0b:4e:d1:82:86:50:
29:36:00:92:e4:d8:d6:d9:c9:c9:8d:ec:17:a7:ed:
09:88:fa:63:18:d6:1b:2d:23:01:6e:e2:6f:9d:06:
bf:8b:53:e9:63:1c:99:dc:fd:64:a1:f9:bb:27:af:
33:4f:ea:6d:ac:43:83:38:b6:48:28:32:7c:1c:27:
f3:9e:16:8a:10:04:36:4a:39:45:10:7d:e4:74:87:
b6:88:2b:86:38:52:78:60:aa:0b:65:71:93:44:49:
11:44:4f:11:1e:e2:6e:34:28:75:87:d2:e5:80:d4:
be:72:aa:9d:49:48:d1:53:2a:1c:e7:a4:6c:8a:3a:
f4:01:91:59:86:7d:db:4b:58:67:f9:ff:0e:1d:45:
d2:2b:40:5d:d9:d2:71:41:1b:15:91:b6:6d:24:6b:
ec:ad:3e:c0:f4:32:7e:07:2c:99:fe:63:8d:81:d9:
3b:28:50:0c:b1:f0:21:ec:bc:22:1c:be:a0:d7:ed:
3a:74:69:1c:60:84:6f:e2:ec:15:cc:88:14:4c:9c:
fb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3C:B5:30:CF:87:8E:6E:C3:F5:6D:78:A9:B3:99:96:81:54:E2:34
X509v3 Authority Key Identifier:
keyid:20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4b:a3:02:68:43:9e:96:26:19:4b:db:61:04:e9:b2:9f:fd:
cc:8f:12:9e:21:24:b9:ee:b0:a5:64:56:9c:8b:7d:08:24:9e:
44:38:6b:18:7c:da:8e:5d:4a:93:7d:04:2e:30:d6:04:8f:d4:
f8:61:fc:5e:b7:5c:55:ee:17:45:0a:9a:2c:89:1d:7c:1a:fb:
a9:2c:cf:be:86:ca:d8:31:61:8a:64:9b:49:a5:4c:7b:13:cf:
b1:02:ad:cb:39:5e:31:ef:99:9a:1b:7e:ef:a2:4f:86:4d:af:
a8:e0:af:a3:10:16:62:f7:d3:47:9d:b8:50:7f:54:b2:b0:71:
25:20:6f:80:c0:88:8e:19:25:cf:94:f8:f1:d5:2e:5b:2d:17:
a6:1d:f8:63:a5:90:41:a8:7e:bb:69:b0:67:cd:83:7d:4f:6c:
34:69:04:55:06:77:3e:c9:ac:d8:50:fc:63:95:a2:70:26:81:
ee:39:a1:c0:79:39:db:3f:50:a4:a7:9f:67:e8:c2:a6:8b:a3:
f9:22:73:06:25:d8:fb:d5:f5:26:aa:c4:f5:8d:55:86:6c:f0:
4a:be:72:f4:b3:0b:7c:f0:fe:17:2d:0e:49:9b:6c:09:c9:e9:
39:4f:0e:72:b6:92:b4:8f:68:53:40:94:ac:b1:9d:af:27:e8:
20:f2:f0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:40:13 2025 by rpki-client