Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
File: I_IQvBU0utwI_5R9mTUEcRk1MbM.mft (raw, json)
Hash identifier: 8V9uvL30K9mS/6+Ia5IkJiMxyPReqYkJzkoV6+WLB/c=
Subject key identifier: 63:65:15:B2:0B:63:B1:9E:39:9D:B7:AE:D3:B0:1C:6D:B9:2C:A9:62
Authority key identifier: 23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3
Certificate issuer: /CN=23f210bc1534badc08ff947d99350471193531b3
Certificate serial: 01976D7442DB58C35692E27AC5F6610B094E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 08:00:25 +0000
Manifest this update: Sat 14 Jun 2025 08:00:25 +0000
Manifest next update: Sun 15 Jun 2025 08:00:25 +0000
Files and hashes: 1: IQl4HNXKSWovo0ppYzsGnJqwUZ0.roa (hash: I1ThZylWt52H2yyPu4akWSun+BojCZr3Y+wXTnrpft0=)
2: I_IQvBU0utwI_5R9mTUEcRk1MbM.crl (hash: CzbJF3rvA+HozrIIliZpwR5xK600xDtQFKBdcMQ07q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:42:db:58:c3:56:92:e2:7a:c5:f6:61:0b:09:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f210bc1534badc08ff947d99350471193531b3
Validity
Not Before: Jun 14 08:00:25 2025 GMT
Not After : Jun 15 08:00:25 2025 GMT
Subject: CN=636515b20b63b19e399db7aed3b01c6db92ca962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:51:52:30:c4:aa:81:bf:9d:5d:ca:b6:15:
95:06:a2:c7:44:16:b7:b5:05:3f:8b:62:06:c4:59:
c2:9e:0c:f7:35:21:ad:4a:37:39:0c:65:f9:33:70:
44:5f:83:57:30:3a:ff:f3:48:12:16:83:f6:87:21:
f2:fe:c5:3d:73:40:4e:62:d9:e5:72:c4:ee:e5:dc:
62:72:27:ef:a4:8d:c6:51:f0:53:a2:79:ff:43:ba:
b0:33:04:64:e4:21:63:0c:b0:76:3d:43:a8:96:c5:
8c:9a:46:8a:03:cf:89:d9:f6:a7:24:cb:8e:78:b8:
6d:eb:16:02:3c:e2:ef:25:a7:b7:8b:d6:44:d2:13:
f5:44:ae:39:00:2b:62:57:ba:35:a5:ce:4d:e0:a5:
20:6b:67:85:b0:5f:c2:f1:03:7d:76:a7:eb:dc:4f:
d7:c8:01:50:cf:36:84:e4:20:9a:25:64:2f:08:ac:
51:d3:50:2a:6b:0a:d6:64:f7:6b:f7:b8:52:70:0e:
d3:ac:b5:47:29:b4:b9:34:6c:f2:90:52:d3:76:b7:
e9:27:ab:5d:d6:87:ac:40:19:ec:30:32:20:89:ad:
46:18:d4:e3:f6:73:74:59:91:3b:94:aa:8d:11:99:
85:b2:de:fe:97:ab:41:34:ce:ce:3b:86:db:64:03:
15:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:65:15:B2:0B:63:B1:9E:39:9D:B7:AE:D3:B0:1C:6D:B9:2C:A9:62
X509v3 Authority Key Identifier:
keyid:23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:17:79:69:d9:a1:3d:8f:ac:92:16:6b:e0:b5:50:71:94:65:
3f:2a:c9:2e:2e:1a:41:43:23:9a:18:e2:16:0e:19:bd:17:f8:
07:7b:bf:eb:82:f4:af:33:9e:7e:67:de:43:bc:eb:96:c7:fc:
68:96:6e:ca:4d:6b:54:e1:34:cf:d1:1f:fb:ac:3e:3f:85:5a:
93:03:6b:05:f8:58:d1:41:d5:9d:6c:43:3f:53:94:0e:f5:2c:
a4:d9:8e:40:76:fe:66:e3:79:73:0c:fa:1e:54:2c:6e:6f:53:
f1:d9:5c:75:4f:49:1c:19:24:49:cc:97:03:b0:c2:52:74:55:
6b:a2:65:49:85:65:e6:af:9f:3e:15:2d:f8:30:98:19:66:f2:
1d:61:35:86:f5:8c:c2:63:a9:30:82:73:66:40:16:e4:f8:52:
82:68:b5:0e:52:d7:cd:2c:45:de:cd:93:e3:65:44:9e:8d:51:
3b:0e:5b:b0:e3:55:cf:12:b4:d6:44:f2:22:3a:29:4c:ce:6a:
0c:6d:57:9d:79:11:79:80:2a:ce:25:f1:30:70:3c:a2:46:59:
f9:b6:a9:ac:15:06:73:de:a0:f9:6c:56:78:d0:09:9a:18:be:
4b:86:05:01:97:d7:76:58:63:56:db:df:21:ba:ea:d0:f4:9a:
83:44:97:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:29:59 2025 by rpki-client