Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
File: IVxS75fj1VeY7-g0dNIDAIK5s6I.mft (raw, json)
Hash identifier: wU3S2uJEt33zd88JjhBR7CH07Lfje+dvqMorCIhn/N0=
Subject key identifier: 89:CB:CB:39:11:2D:8E:7B:44:23:E6:BD:18:66:FF:EC:B3:98:A8:50
Authority key identifier: 21:5C:52:EF:97:E3:D5:57:98:EF:E8:34:74:D2:03:00:82:B9:B3:A2
Certificate issuer: /CN=215c52ef97e3d55798efe83474d2030082b9b3a2
Certificate serial: 01976A3CF58F5765D38D919C243638FA8493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
Manifest number: 054B
Signing time: Fri 13 Jun 2025 17:01:09 +0000
Manifest this update: Fri 13 Jun 2025 17:01:09 +0000
Manifest next update: Sat 14 Jun 2025 17:01:09 +0000
Files and hashes: 1: IVxS75fj1VeY7-g0dNIDAIK5s6I.crl (hash: u65AvhQP1lrZ5IY/derrKVG8IfNYQAL8YXUp2myTgEk=)
2: OVZNKEszVhAJh-vQbtUO6A7beTM.roa (hash: oJbZ8tXjE9kGmveOiLsoY0EtqEnPlkhAWmkwOC/wslw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:3c:f5:8f:57:65:d3:8d:91:9c:24:36:38:fa:84:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215c52ef97e3d55798efe83474d2030082b9b3a2
Validity
Not Before: Jun 13 17:01:09 2025 GMT
Not After : Jun 14 17:01:09 2025 GMT
Subject: CN=89cbcb39112d8e7b4423e6bd1866ffecb398a850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:85:71:18:19:00:3f:a0:76:b8:54:46:f2:
18:78:b7:60:52:ea:f1:68:16:9e:32:55:17:a5:61:
6e:8d:aa:e5:a5:b9:41:45:53:77:06:f4:b6:99:34:
81:37:de:c4:89:3a:bf:31:4c:eb:98:d9:37:5a:72:
45:95:5d:20:83:4d:9d:a3:76:b0:af:fd:ef:5a:22:
01:d5:2f:99:41:31:13:f6:d4:10:7b:9a:53:49:6b:
b1:dc:9c:50:9f:cf:46:3b:09:4c:9e:80:55:19:f3:
34:61:e8:45:2d:1e:0a:51:72:bd:61:48:c1:c7:4e:
be:02:c0:65:36:f9:6e:9f:89:52:c1:1c:38:4f:5b:
7d:e6:0e:d7:df:5d:a4:67:1e:fe:a4:8b:6b:5c:c9:
aa:10:ee:0e:00:ac:4b:f3:d0:59:5d:23:2f:e4:07:
2e:22:95:ab:2b:83:ed:97:dd:a0:3c:dd:20:13:d7:
18:f1:87:7a:b2:ac:92:81:8b:d8:d0:be:2f:53:5f:
0a:5a:b5:88:e2:09:8c:bb:16:26:64:a8:d9:3c:fc:
ec:23:be:d0:3e:3c:d9:2b:10:cb:ca:e7:ac:ae:42:
86:3b:e1:ee:60:fd:15:a5:ee:85:74:4a:fe:00:59:
0b:dd:f1:4f:89:42:51:4f:31:26:ab:9b:1a:da:2c:
a1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CB:CB:39:11:2D:8E:7B:44:23:E6:BD:18:66:FF:EC:B3:98:A8:50
X509v3 Authority Key Identifier:
keyid:21:5C:52:EF:97:E3:D5:57:98:EF:E8:34:74:D2:03:00:82:B9:B3:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVxS75fj1VeY7-g0dNIDAIK5s6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a2f211-8618-43c3-9117-7aeee3ad7436/1/IVxS75fj1VeY7-g0dNIDAIK5s6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:7d:14:8b:e0:27:54:77:4b:95:ef:e0:f5:c8:c2:a2:4d:6f:
f5:e4:15:a6:90:ab:4b:e8:1b:ca:1b:89:75:3a:24:f5:81:19:
6d:33:8f:37:6e:55:d7:23:74:1a:cb:c7:2d:20:5d:e9:a4:9c:
35:eb:75:41:b0:42:c3:6f:95:51:97:89:23:77:78:92:e1:44:
ff:ee:ed:85:c0:22:f2:ad:43:c0:e2:3b:34:d7:3b:4a:7f:82:
9c:54:21:71:41:fe:36:08:32:10:b6:4b:af:6c:d7:94:a4:b9:
7f:10:b5:1f:0e:d8:5c:07:d4:37:47:46:f3:a2:e4:73:30:80:
2b:f2:4c:fc:b2:ad:47:31:2e:3c:f6:7a:f4:20:15:fe:66:55:
66:72:1b:97:b8:1e:d4:f5:3b:d6:5a:e7:e7:e1:2c:6f:08:84:
0c:11:0f:30:f0:02:de:1a:45:a6:00:c7:a2:c5:c6:c2:b8:6f:
50:8f:00:2e:d7:2c:4c:a7:0f:b9:33:9d:64:98:b2:c8:51:80:
74:10:7e:6b:89:25:22:d7:fc:e3:20:0f:b3:3c:d8:bc:ca:98:
22:83:29:29:fe:81:e0:ce:3b:ec:93:1e:a7:a7:30:e6:e3:ea:
6b:bf:29:f4:e3:15:a8:25:ae:be:d3:8c:c6:ff:82:ed:3b:6e:
cc:fa:39:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:48:49 2025 by rpki-client