Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
File: IOagEH1ompNwtiKVGkSWRsw4tZA.mft (raw, json)
Hash identifier: lQFej26ig/rNRpzsF0ku2RHfLMQClbZXDo1JekHlXyE=
Subject key identifier: 59:1E:37:40:9B:83:15:84:44:38:B5:EE:2B:18:E2:7C:CD:5D:CE:79
Authority key identifier: 20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90
Certificate issuer: /CN=20e6a0107d689a9370b622951a449646cc38b590
Certificate serial: 0197696129A23FBC6D2D7D86BFC9C707FF3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
Manifest number: 110D
Signing time: Fri 13 Jun 2025 13:01:04 +0000
Manifest this update: Fri 13 Jun 2025 13:01:04 +0000
Manifest next update: Sat 14 Jun 2025 13:01:04 +0000
Files and hashes: 1: IOagEH1ompNwtiKVGkSWRsw4tZA.crl (hash: oAoqsk1DxX9IXFERdXWL6Ldz8EmXEUSpSpXG/AfdbAc=)
2: g2AkX7o9HPLfXDUc9lLxF0hd7Tw.roa (hash: GtbK3C6ImbkCxUfm64Bkm+DP0kf7OaLjUPRMxP6pI/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:29:a2:3f:bc:6d:2d:7d:86:bf:c9:c7:07:ff:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e6a0107d689a9370b622951a449646cc38b590
Validity
Not Before: Jun 13 13:01:04 2025 GMT
Not After : Jun 14 13:01:04 2025 GMT
Subject: CN=591e37409b8315844438b5ee2b18e27ccd5dce79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:50:fb:84:5d:a9:88:67:8f:70:e3:d5:f4:c7:
d4:34:b4:e7:2f:0f:ec:31:27:e9:2d:3d:d3:33:e5:
97:56:9c:d9:0e:54:a1:c9:5b:cc:50:01:22:71:d3:
99:d2:1b:c4:ef:bd:3e:32:04:82:6d:0f:90:62:73:
5a:20:1b:c7:0a:44:18:a7:1b:39:3c:49:26:76:dc:
51:96:fb:70:4f:96:ba:72:4c:51:15:30:d1:8b:eb:
42:a4:19:bf:45:14:1a:1b:06:b7:03:44:db:d3:d4:
42:ca:a0:6a:3c:12:1b:f4:64:f7:3f:42:d5:b9:08:
e8:91:f9:00:75:21:a2:22:39:62:11:20:f6:f6:17:
24:31:dd:90:55:4a:25:86:4a:44:e8:07:0e:d5:f3:
02:cf:4e:63:3d:ad:85:a0:93:30:6b:9b:6c:5d:bc:
dc:8d:b4:a4:e7:1c:7e:44:c1:e6:aa:5a:2a:d6:1e:
8f:f3:ab:0a:03:1d:72:f5:be:cc:bd:5f:9d:b3:11:
3e:be:40:cc:2f:ba:39:5e:5e:0b:62:41:7c:24:eb:
8a:37:da:2c:5b:dc:80:98:c7:e4:6e:dd:52:5c:f7:
85:95:43:91:fb:44:d9:d7:66:db:34:ad:3f:ea:bc:
d0:f2:9d:87:1a:1b:eb:95:f0:20:40:30:e0:ce:80:
d7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1E:37:40:9B:83:15:84:44:38:B5:EE:2B:18:E2:7C:CD:5D:CE:79
X509v3 Authority Key Identifier:
keyid:20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:30:47:76:5c:7b:b1:27:93:93:95:74:d3:9a:d3:cd:7d:ab:
da:80:19:0e:15:1f:0f:1d:34:7f:00:af:9f:e2:bf:62:da:e3:
06:63:b6:40:40:c9:01:86:bb:57:65:90:c9:44:87:09:c3:de:
7b:ea:73:4b:1e:f6:99:a9:2a:5c:19:96:5f:c2:f9:97:cd:d7:
07:d8:ce:b8:de:d1:e5:93:f3:0a:59:42:e6:d1:27:77:b5:61:
0c:6b:97:00:39:7d:f9:36:71:c1:47:0c:54:e1:d5:59:ac:e6:
fc:14:22:df:68:a1:a8:6e:ed:65:53:94:b2:e7:6d:2f:7d:f0:
e4:46:27:28:36:5f:3b:80:50:89:cc:a9:30:04:34:dd:77:c8:
3e:cd:83:21:08:a4:32:ae:b1:0f:93:88:02:eb:73:cc:c4:85:
63:aa:12:9a:d3:91:37:b7:da:53:8b:61:c2:7f:f2:e7:cb:ac:
64:e4:38:0f:c3:c3:11:64:d6:33:c5:e6:cb:94:7f:21:a6:63:
24:f8:73:ae:e5:ec:e9:6f:1c:d2:22:42:b7:f5:88:19:e3:72:
26:9a:4c:77:a1:13:36:7f:84:9b:8f:8a:7a:4a:09:09:50:a3:
81:e4:9b:e2:b9:c2:bf:86:92:c4:ae:2b:e5:1b:b4:fb:0c:b8:
5a:1f:e7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:25:54 2025 by rpki-client