Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
File: jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft (raw, json)
Hash identifier: RE5o2uHRDiPClonxTtFka7XYSkyd8w1nkN652wvsyMg=
Subject key identifier: 32:F6:28:34:0B:FF:36:C4:22:1D:31:30:24:BE:26:89:9B:3A:A4:06
Authority key identifier: 8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
Certificate issuer: /CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Certificate serial: 01976E19576AFE5FA5F49DB266FD516A2273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
Manifest number: 0C4E
Signing time: Sat 14 Jun 2025 11:00:43 +0000
Manifest this update: Sat 14 Jun 2025 11:00:43 +0000
Manifest next update: Sun 15 Jun 2025 11:00:43 +0000
Files and hashes: 1: dElkIF-mcLyqREvxtPtBS6fW6DA.roa (hash: iNiAWSZuKBpZfK505SM5gcHkqyqDJqDnkohUerQ9rYc=)
2: jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl (hash: b7J0/3gdtekmPDF/nXCqvZJoPx/ZU6DqeG3puVALFeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:57:6a:fe:5f:a5:f4:9d:b2:66:fd:51:6a:22:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Validity
Not Before: Jun 14 11:00:43 2025 GMT
Not After : Jun 15 11:00:43 2025 GMT
Subject: CN=32f628340bff36c4221d313024be26899b3aa406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:28:fe:bf:b8:a8:9b:6c:ad:85:da:76:1f:
70:67:a7:7a:cf:c7:30:f0:87:8f:77:bf:a9:aa:c9:
1e:aa:46:c8:f5:39:d6:f5:cc:7f:90:04:04:ac:5a:
7d:39:06:e5:ed:ba:b2:44:fb:1e:9c:a1:13:c0:c2:
ec:d8:e7:7b:6d:68:18:34:15:50:47:c9:f5:de:f1:
4e:ba:82:62:bb:fd:1c:23:5b:2b:2c:ac:2e:da:a2:
b2:34:cb:97:77:30:60:fe:76:0d:ca:14:3e:44:54:
ee:f3:4e:91:5b:ae:c4:df:ce:d7:5c:c8:ab:da:d7:
b7:a0:93:0d:9c:6f:17:31:cf:0e:d8:a5:7c:c0:b7:
cb:7d:8d:05:38:30:d3:54:5b:b6:a7:ba:4f:f3:52:
67:e0:ff:5f:61:4d:5c:68:d4:97:96:6a:eb:f1:e3:
af:49:7b:7e:90:c9:d2:a2:3a:f9:6c:19:e4:14:c8:
7b:3d:4c:7e:06:bf:80:ca:c3:c2:00:26:34:ae:80:
86:39:31:41:73:49:b4:e7:58:94:f3:88:85:e4:b2:
c7:e3:3e:04:d3:52:5e:21:8e:eb:39:70:1f:ee:7e:
75:c7:47:d2:8c:af:dc:6f:d7:51:d9:8d:eb:39:6e:
37:eb:54:7c:b0:3f:9e:09:84:97:78:92:35:ee:98:
be:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F6:28:34:0B:FF:36:C4:22:1D:31:30:24:BE:26:89:9B:3A:A4:06
X509v3 Authority Key Identifier:
keyid:8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:18:5f:46:89:e3:ff:7e:cb:68:d1:d6:f1:3b:07:fa:80:aa:
ac:18:0e:9f:6e:8e:69:71:43:24:04:a6:4f:9a:48:5f:a8:7e:
e2:a3:08:3c:5a:38:fb:4c:e2:2f:96:de:82:27:cb:ee:c8:dd:
28:3b:4e:f5:8a:bf:cb:6b:6a:8d:13:6d:ba:68:7a:1d:5a:2d:
79:8c:12:31:15:89:fb:77:74:01:02:be:e9:4c:9f:89:be:85:
dd:b7:a3:cf:2c:fa:b5:59:7d:97:5a:9d:dc:d3:3c:eb:06:5a:
a4:e5:b3:fa:39:1d:6f:09:12:05:0f:7e:bb:9c:c1:08:75:c7:
34:3a:cb:51:95:4e:2c:26:53:d8:db:c3:95:37:6d:40:9e:db:
fd:5d:b2:e4:b6:0a:48:16:af:83:7a:a4:2f:6a:84:f0:40:ac:
62:f7:ff:f0:a6:ad:c6:91:3d:7d:25:d8:50:16:b6:f1:95:ae:
b8:b7:17:c3:80:38:98:29:21:a2:7e:29:13:ad:a5:26:39:61:
8f:16:03:19:78:d2:50:5b:de:8c:04:4d:f5:f1:c3:5a:b9:6f:
d8:68:9e:3c:ac:2d:89:48:30:94:b9:d8:76:17:03:22:ce:82:
dc:8d:a3:08:d4:81:26:25:06:81:fd:16:b7:9a:c0:f9:d1:a6:
a2:9d:96:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:50:25 2025 by rpki-client