Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
File: I9hEjFy5A5jkwoXOycD0dmrJMd8.mft (raw, json)
Hash identifier: XGRsfO4xf6DKOiyv5WQeLvzrCz4NmnwzBSOcpyGLl0I=
Subject key identifier: 4B:3C:12:9E:1C:2D:85:60:35:10:49:85:E2:0F:7F:9E:D1:57:4E:2A
Authority key identifier: 23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF
Certificate issuer: /CN=23d8448c5cb90398e4c285cec9c0f4766ac931df
Certificate serial: 01977F43D84CAAE44C43CFC22D8996DD723A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
Manifest number: 1599
Signing time: Tue 17 Jun 2025 19:00:42 +0000
Manifest this update: Tue 17 Jun 2025 19:00:42 +0000
Manifest next update: Wed 18 Jun 2025 19:00:42 +0000
Files and hashes: 1: 0R9hBHck9goXLckWs83vfzxcFiw.roa (hash: obv3yvxGMmGg4JBfXp95o/8uj2ocziHcF4Wd0qYKBC0=)
2: 2ZLinOVEwJGKFicgX--T-MLOzJk.roa (hash: c5tPFVJAjAdrD/biJVfWeRiWObKwMs1MmzB2QE9giIE=)
3: 9unXgezNMxzwNg4bzifOYAuCs0o.roa (hash: g4XwuMrRwxeGeiZBFLLb9s8Q1VZBOHGp5ebHoGbs+mc=)
4: I9hEjFy5A5jkwoXOycD0dmrJMd8.crl (hash: oHsILDkR/VAohW3Sd5XG+OQZiVK1wxluR3gu7Qhnr7U=)
5: dK0aI2R_s129Y-75FIrpBYL1yE8.roa (hash: R66OS8lUtMZTTbo9eo/xMi56yXXva1T37X0KuifJS+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:43:d8:4c:aa:e4:4c:43:cf:c2:2d:89:96:dd:72:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8448c5cb90398e4c285cec9c0f4766ac931df
Validity
Not Before: Jun 17 19:00:42 2025 GMT
Not After : Jun 18 19:00:42 2025 GMT
Subject: CN=4b3c129e1c2d856035104985e20f7f9ed1574e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2c:21:a9:49:cb:44:81:85:2a:8a:04:39:bb:
f3:b6:46:4b:83:7f:c5:9b:4f:94:19:4f:af:56:e6:
cd:f3:de:2a:82:b4:a7:c6:06:cd:f5:0f:ca:ab:78:
41:65:e7:c0:ff:2e:a8:22:d3:89:a3:0e:9f:ec:01:
71:d7:ef:dc:76:b7:d8:55:b8:0d:52:1f:26:03:c3:
75:08:60:70:f4:43:6e:49:d0:22:ed:20:90:ec:bc:
74:46:2d:78:be:3f:01:43:a8:9a:b0:a6:8f:79:09:
f7:59:e0:c6:d8:69:dc:66:bd:22:1f:5a:a4:91:03:
c8:68:ef:e3:6a:e8:a1:83:bb:c4:0f:a9:01:1b:fb:
be:df:1c:49:6e:cd:81:62:1a:cc:49:f2:a2:9a:c5:
e0:ff:42:86:13:da:2d:ac:85:ac:e7:a1:24:f5:07:
73:f1:3a:11:b6:be:f7:db:16:76:b8:b1:e1:fb:72:
d6:04:46:77:38:2d:c0:15:82:68:64:f0:fd:91:f7:
46:dd:48:46:16:89:4e:e8:be:d0:c8:54:5a:5b:d7:
f6:07:1e:3f:4c:6d:e0:9a:3d:a9:bd:b3:fb:c5:04:
ca:cb:da:44:00:d6:80:5c:62:e9:bd:f1:c4:52:78:
10:a7:71:15:df:1f:6b:cf:25:41:c6:f8:a0:74:8e:
86:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3C:12:9E:1C:2D:85:60:35:10:49:85:E2:0F:7F:9E:D1:57:4E:2A
X509v3 Authority Key Identifier:
keyid:23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:fe:7c:1d:81:1d:08:86:7c:ac:7d:80:c7:2c:62:e6:1f:11:
0d:42:bb:49:42:32:a1:f7:84:e1:88:f4:6a:48:ec:4c:b5:8f:
70:eb:98:3f:ae:87:f4:4e:e7:af:25:b9:64:d2:66:f5:38:90:
ea:be:2e:da:d3:93:04:37:5c:31:b4:9e:fc:c7:58:c4:07:5d:
6f:2c:aa:49:8f:90:14:ea:7b:fb:e8:8a:5c:51:95:ca:94:33:
bb:ea:1f:f2:21:21:78:6d:02:68:d0:dd:9e:2c:bf:4a:ec:14:
30:0f:85:9d:60:a9:4e:a9:55:43:67:90:27:3a:20:e4:db:a8:
e8:5f:56:16:13:4d:e5:5f:b0:ca:16:f6:3a:2e:5e:86:7b:2a:
6f:4c:91:d9:b3:81:de:49:d9:32:9e:3b:a1:19:e9:5d:96:a5:
6b:47:9f:f3:e0:0f:67:94:37:86:30:0c:d5:95:28:23:cc:9c:
65:59:c0:87:57:19:94:da:1f:7e:20:9a:b1:5b:5e:0b:92:da:
81:02:88:7b:86:8a:ab:73:33:3e:77:21:6f:6b:a9:8d:05:18:
1c:74:cf:54:9a:b8:a8:ef:71:69:24:04:c2:b4:69:b1:fa:83:
75:42:ff:ae:57:aa:88:a1:f2:37:84:06:e5:17:87:c6:5f:4d:
47:e6:83:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:48:19 2025 by rpki-client