Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
File: ix22ROoOJ0ndbtAirs0SGUvLlvI.mft (raw, json)
Hash identifier: gu4tIfqQ80FTSqsi4DJg59uhyAzeUATYOH0YycBQY9M=
Subject key identifier: 9D:67:61:AA:09:2D:C7:5B:6D:C3:9F:39:63:67:20:CA:6B:0A:3B:A6
Authority key identifier: 8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2
Certificate issuer: /CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2
Certificate serial: 01976DABA856AE629CCDCD8F470AAABDB7D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 09:00:55 +0000
Manifest this update: Sat 14 Jun 2025 09:00:55 +0000
Manifest next update: Sun 15 Jun 2025 09:00:55 +0000
Files and hashes: 1: A41bCmeGcRe18SujefEGCOd0pEc.roa (hash: NjleSysihCL9A6oaK71bgTpnAO+ec2pn28x66pipbdA=)
2: ix22ROoOJ0ndbtAirs0SGUvLlvI.crl (hash: BH+YgEN+54pub3NzjZhKRajmjLLfbGhnVe04al/RDaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:a8:56:ae:62:9c:cd:cd:8f:47:0a:aa:bd:b7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2
Validity
Not Before: Jun 14 09:00:55 2025 GMT
Not After : Jun 15 09:00:55 2025 GMT
Subject: CN=9d6761aa092dc75b6dc39f39636720ca6b0a3ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9e:51:d7:7b:38:fc:a4:ac:0a:c8:0e:7b:54:
a4:a8:79:64:1a:b5:a4:25:66:52:79:74:60:d0:36:
02:7e:ce:f8:a7:92:6b:2a:72:93:55:bc:00:dd:2b:
cd:62:1e:35:45:26:65:fe:d7:96:de:5a:c3:e1:53:
68:cf:a7:70:68:06:c8:2f:fc:f4:3e:95:01:2a:0f:
9d:fe:9d:79:8a:7e:f9:32:69:7a:12:67:05:fa:0c:
63:7e:1b:0b:7b:4d:49:38:ad:e8:df:ac:17:e1:b4:
bd:99:21:2a:38:11:bf:57:87:3d:64:1d:fa:f1:12:
5d:32:69:ea:c1:43:e2:0e:40:d4:79:aa:e4:4a:bf:
25:50:10:59:e2:40:d6:3e:96:3e:72:74:82:2d:3e:
35:94:d7:61:cb:59:8e:9c:f7:70:69:3c:d3:ff:80:
6b:78:b8:35:c9:f7:47:8e:90:1e:58:d1:92:a2:bf:
66:32:69:f6:ba:a6:6e:1d:14:01:b6:4e:52:13:f8:
07:20:7d:26:e2:30:31:e9:55:07:38:a6:60:b2:a0:
94:fc:11:5a:aa:37:f9:bb:5e:9a:7f:a8:f4:93:4a:
54:3b:47:aa:b0:fb:78:31:6c:7e:1f:a9:50:0c:4b:
57:d8:93:d7:b1:77:c1:12:4f:e7:c5:17:d2:47:0b:
bd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:67:61:AA:09:2D:C7:5B:6D:C3:9F:39:63:67:20:CA:6B:0A:3B:A6
X509v3 Authority Key Identifier:
keyid:8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:29:07:0b:40:75:62:a5:87:64:7b:1f:80:2c:bc:e2:aa:86:
74:0c:d6:5f:53:4b:8f:bd:23:b2:b3:91:a8:4e:be:ac:bd:0b:
b7:d3:34:38:aa:4c:ad:1e:3c:49:53:d9:77:e3:15:17:3f:56:
5d:b1:dd:9c:9a:03:15:72:28:55:db:c3:26:71:b3:8e:c3:6c:
34:4e:e6:e1:24:34:45:62:02:cb:03:99:f7:1b:21:28:81:f2:
5b:0f:8d:be:b4:1b:e4:3b:1f:20:67:43:68:f5:9f:f6:ca:af:
2d:5e:4a:4f:03:50:68:56:1f:e3:ed:24:04:f0:96:2d:09:e5:
43:5b:48:01:8d:1e:c4:b9:7f:13:5d:0c:9f:5e:5c:c2:a5:2c:
a1:af:89:73:ae:27:35:4d:2e:6b:9a:a1:a6:55:78:32:90:30:
51:47:91:b4:f7:dd:45:cc:5f:fc:fc:ff:b2:42:a9:06:64:e7:
f9:6e:79:d0:10:45:03:4a:8b:06:38:06:12:e8:97:45:3c:7a:
20:1a:9d:91:88:b3:fb:37:6a:0f:e4:f3:6a:7d:fa:c6:e7:c0:
f3:c7:1f:79:27:b7:51:db:d2:46:18:44:ae:ac:d2:18:21:f4:
ae:98:0b:cd:1d:ff:36:69:b4:f6:b0:22:f1:ce:cd:9a:d3:9f:
a3:5f:c6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:51:20 2025 by rpki-client