Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
File: iX2mABsSODBo_nGjD4zyhcZoMP4.mft (raw, json)
Hash identifier: KNuL1ltmWQiHpHeH0Mm3vRQuBEfdvraUOLviD5rBKi8=
Subject key identifier: 54:F8:DF:F1:A0:87:D7:C8:E4:30:23:4F:27:3F:C6:A2:6E:F8:BA:96
Authority key identifier: 89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
Certificate issuer: /CN=897da6001b12383068fe71a30f8cf285c66830fe
Certificate serial: 01976F9A5165ED17A03F0A0A9CA97D3ABDFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 18:01:13 +0000
Manifest this update: Sat 14 Jun 2025 18:01:13 +0000
Manifest next update: Sun 15 Jun 2025 18:01:13 +0000
Files and hashes: 1: 9Xk925SUUXfLnbw9FBp9N3qLdfo.roa (hash: Ly02I9+k8vuMGWxnQ136VFvx8sd3hejXT82bKGKV7BM=)
2: PHa1bwg0jlW9wU-ZxMrg4KmG4Zc.roa (hash: sT+3KqlrpBwNw2te0UajmvKsMUapvIEs9YfpHeq4XGU=)
3: iX2mABsSODBo_nGjD4zyhcZoMP4.crl (hash: WdzfhBVtNzwm4lPKQ3xCp9epr3DoBtKFgIsWXRVqQrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:51:65:ed:17:a0:3f:0a:0a:9c:a9:7d:3a:bd:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897da6001b12383068fe71a30f8cf285c66830fe
Validity
Not Before: Jun 14 18:01:13 2025 GMT
Not After : Jun 15 18:01:13 2025 GMT
Subject: CN=54f8dff1a087d7c8e430234f273fc6a26ef8ba96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:dd:e9:5d:5a:fb:c1:06:2d:f4:ae:00:be:d8:
7b:4d:41:a7:0f:32:c7:06:46:bf:bb:8b:ad:4b:b6:
d5:68:c6:50:3d:dc:94:6d:71:c3:ae:c3:d4:9e:64:
d7:a0:2d:20:3f:74:e8:4e:cd:5b:c0:16:4d:44:12:
d3:1b:9b:b8:67:87:73:52:0b:a2:3e:ce:5f:28:9b:
9d:0b:84:f8:30:ed:c4:89:15:e9:2b:18:5a:07:fc:
05:55:56:cf:89:2a:ab:74:31:9f:6a:21:93:e8:fa:
20:45:f3:0f:29:8e:d9:c9:31:c5:dd:1f:07:b3:10:
66:5f:e1:98:b1:98:17:b2:41:5a:e6:a6:8c:46:cc:
7f:f7:60:ea:41:38:86:b2:7f:ae:39:df:45:f3:81:
a5:5d:30:c8:a1:46:8a:c6:2c:61:93:6b:23:ef:76:
09:5e:67:b1:6f:97:27:0c:bf:b5:b8:8f:a6:9a:71:
f8:99:88:69:dd:37:c9:68:1a:1e:c8:0b:5e:63:d4:
67:2c:e8:f0:e2:9f:8a:2d:7d:b0:6c:f6:42:7b:ae:
26:01:b0:9d:58:2a:0c:cb:64:2f:cc:72:9e:95:be:
44:75:da:29:f8:11:47:fa:fe:74:36:de:8e:75:41:
9a:39:87:19:2d:a1:b4:b9:a9:09:06:e1:32:f1:44:
63:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F8:DF:F1:A0:87:D7:C8:E4:30:23:4F:27:3F:C6:A2:6E:F8:BA:96
X509v3 Authority Key Identifier:
keyid:89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:47:aa:21:b0:3f:16:d4:82:a6:b0:1d:b2:7e:d3:2a:aa:10:
92:1d:e5:48:2e:85:a7:28:97:48:48:e6:e2:88:fc:6c:73:36:
83:1a:5b:c1:81:2b:81:a2:d2:ed:1c:fb:b9:53:70:7b:93:da:
93:c6:ec:d0:da:bb:8c:83:7e:bc:67:f4:57:df:e0:b1:e2:0d:
3c:be:f3:0d:e6:9e:ec:ce:36:b8:7b:cd:d5:c6:cd:6d:6b:b2:
1c:c7:bf:45:73:13:25:a2:d6:7d:91:77:f1:96:90:be:ef:43:
0e:d0:00:89:fd:c2:57:20:8a:8b:9d:99:c5:d4:21:e4:42:81:
53:6d:a7:b6:42:b4:55:4f:f0:1d:84:61:0c:8c:f9:b4:47:53:
e0:a1:7a:e3:84:33:45:3a:81:7c:ed:9b:5b:e5:19:6d:db:87:
d9:1c:06:c4:eb:b1:a4:10:45:43:94:8d:68:be:32:e5:a1:32:
62:eb:f3:93:3e:7a:d3:75:96:7f:67:a9:60:eb:a0:f9:7b:10:
f3:b1:c3:0c:ef:02:e3:a6:fd:cd:47:3c:e9:e9:77:8f:03:b4:
e6:e9:4b:69:11:14:99:db:f0:78:3f:a0:03:c9:13:4c:3b:3d:
5a:65:7f:68:99:4a:2f:ca:c4:9f:75:cd:87:1d:30:72:78:aa:
e2:a5:76:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:35:15 2025 by rpki-client