Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
File: Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft (raw, json)
Hash identifier: Zy/sIe9dxReD3zi2mLWbifihR+jpbBjG/87E+EWpoAc=
Subject key identifier: F4:96:55:08:93:FE:BA:62:F9:E1:A3:FC:28:1B:50:19:31:EF:25:D2
Authority key identifier: 23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
Certificate issuer: /CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Certificate serial: 01979001D69D33794223D4F4312C6EE33EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
Manifest number: 15A1
Signing time: Sat 21 Jun 2025 01:02:08 +0000
Manifest this update: Sat 21 Jun 2025 01:02:08 +0000
Manifest next update: Sun 22 Jun 2025 01:02:08 +0000
Files and hashes: 1: 1--lfY911D4o-n0x13kTzxgPAa1c.roa (hash: 7jYLrsmco67v6YLtE1rUNiJwEOZGyK+AZuLqYtKHcu0=)
2: 1-PLlhObhI2KvU31PH_oGB4eDG5U.roa (hash: h2JQLRGR8RDG0rSKaLT0jUCHodG0PW/TX0LlgI0i4Qc=)
3: Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl (hash: Jq0bTrXL2FMPAXfFqtlDN+6gJxPNeAaxxEHXiE/jNaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:90:01:d6:9d:33:79:42:23:d4:f4:31:2c:6e:e3:3e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Validity
Not Before: Jun 21 01:02:08 2025 GMT
Not After : Jun 22 01:02:08 2025 GMT
Subject: CN=f496550893feba62f9e1a3fc281b501931ef25d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:b9:ca:c4:ea:fd:d2:80:52:1d:ca:0a:a0:
a7:f3:1a:d4:34:97:52:2a:52:c0:09:36:f2:79:74:
4e:66:3b:c7:47:5e:63:df:33:68:1d:30:83:47:92:
f2:15:a9:62:52:7d:fb:87:c9:b6:75:cc:4b:85:63:
1a:13:a2:ad:d6:32:38:d3:10:9b:26:ea:e8:bf:aa:
a0:52:a1:6d:e4:0f:8d:8c:21:c2:5f:5c:ba:36:77:
7a:fd:bb:1d:0b:35:56:d9:31:27:3a:1d:9f:76:66:
a5:1b:cc:e2:a2:c2:db:63:40:02:89:ca:92:32:89:
51:f1:ca:40:d5:ef:91:2e:e3:59:a5:fd:c2:41:94:
a5:d5:e0:ee:1e:db:a6:a0:50:bd:5e:05:c3:e9:40:
b5:28:71:ba:d1:fb:b1:40:ad:9f:1d:a2:29:3e:9d:
fd:cf:50:e8:46:31:25:61:06:bd:3a:5b:20:57:34:
aa:3a:d7:0d:e8:b9:9c:2f:75:35:64:eb:bc:02:07:
87:24:88:38:de:f4:e5:b4:5f:56:a8:6b:42:e7:e3:
f3:34:f3:24:47:58:06:c6:ae:84:ae:e2:7c:52:8f:
70:f9:5f:7f:71:e6:f4:27:2f:f8:1a:f7:08:ac:48:
d8:2c:96:3f:32:14:e5:e9:a0:ec:7d:d4:2c:d2:51:
49:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:96:55:08:93:FE:BA:62:F9:E1:A3:FC:28:1B:50:19:31:EF:25:D2
X509v3 Authority Key Identifier:
keyid:23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:33:07:dc:da:33:65:c8:1e:51:b4:46:6c:35:32:aa:bc:b6:
0a:6c:60:66:50:b8:93:34:5d:f5:52:33:8b:ca:fe:02:87:65:
72:ef:af:a4:dd:3a:62:f2:14:5d:4e:78:4c:e2:c5:c2:13:1f:
81:15:f0:9f:e1:4b:f0:0c:3f:c5:15:02:89:54:31:8c:1b:26:
8c:e5:c8:a9:6c:1b:02:6e:e6:fd:69:90:4a:9f:72:df:62:ba:
75:04:bd:53:b6:a5:fd:da:ee:47:9b:90:b6:b3:52:af:18:d7:
fe:0e:db:dc:06:2c:22:b8:cb:a8:38:ea:4a:db:0b:c1:98:d4:
d1:d8:1a:96:64:5f:98:36:44:7b:d8:b5:0f:54:72:ed:63:ea:
7e:86:4f:e4:42:aa:36:f1:e0:33:3b:01:c2:a1:5f:6f:a7:b7:
a0:b0:cc:ff:a4:f0:d8:24:32:52:d0:77:50:6c:0b:52:8a:0e:
a0:2f:59:fe:51:97:3c:3f:5b:f6:7a:fb:4b:a6:4e:a4:d7:c7:
25:19:e0:a3:40:15:86:3f:5c:b0:d4:44:f5:f0:95:00:0f:1a:
67:ab:b0:2c:6f:4e:5d:01:b3:26:ea:52:24:f9:47:d3:b9:ca:
4e:48:fb:73:09:b9:ca:2a:2e:97:a7:1d:ff:83:64:87:c2:c0:
dc:fe:61:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 06:36:28 2025 by rpki-client