Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
File: I5Vy3fyrYpHmQQzNToYO42AA5mg.mft (raw, json)
Hash identifier: cQepUIUajEFxycKf5anURO1CeY71K4whryyWL1usqtY=
Subject key identifier: 0D:8D:5B:D4:33:D9:67:B7:51:11:D6:B6:EA:D0:31:13:C5:69:3B:38
Authority key identifier: 23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68
Certificate issuer: /CN=239572ddfcab6291e6410ccd4e860ee36000e668
Certificate serial: 01976D3D97BC378962EBD6687CE348754434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 07:00:42 +0000
Manifest this update: Sat 14 Jun 2025 07:00:42 +0000
Manifest next update: Sun 15 Jun 2025 07:00:42 +0000
Files and hashes: 1: I5Vy3fyrYpHmQQzNToYO42AA5mg.crl (hash: rVico4SI+4ewU3iEO04j2nXA8Rp7dFNZwF21xNrZ9LM=)
2: cEnlNHZ35kSVNo2T27Ex45pap18.roa (hash: q/g4pWJ8XYH4irxAQK7i5w/oElgLduGOhld/VI56BOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:97:bc:37:89:62:eb:d6:68:7c:e3:48:75:44:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239572ddfcab6291e6410ccd4e860ee36000e668
Validity
Not Before: Jun 14 07:00:42 2025 GMT
Not After : Jun 15 07:00:42 2025 GMT
Subject: CN=0d8d5bd433d967b75111d6b6ead03113c5693b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c5:9a:d5:11:7f:43:4b:60:3f:4d:90:27:b0:
a9:cf:9c:2a:ed:5a:96:68:8c:03:92:df:55:79:b6:
f6:88:d7:da:a8:e2:1a:65:e7:c7:81:6a:66:f4:7d:
d3:ec:18:06:48:78:67:23:90:88:58:9c:4e:cd:22:
d3:6e:28:28:87:9b:ac:c1:9a:ac:d5:95:a4:38:28:
1a:b4:aa:89:37:e0:af:d7:df:5b:c5:28:a1:fb:ef:
7f:85:ea:3d:48:e4:73:a3:6f:61:85:68:2d:83:f0:
91:32:1d:86:e1:27:aa:14:1f:ed:8e:1b:52:3a:71:
7f:ae:17:cf:7b:d6:99:a3:d5:e1:cf:6d:9a:71:9f:
0e:38:17:ea:c9:2f:24:56:3e:79:4a:ad:29:b5:86:
07:aa:58:a6:e1:c4:10:54:a6:f6:45:49:ae:6e:58:
96:8c:a6:49:e7:5c:55:fe:f7:92:56:9f:10:77:70:
24:be:96:9a:47:fc:12:17:39:6b:5b:c3:66:4e:89:
2a:c6:5d:e3:84:77:3e:9d:e7:90:2e:ee:42:be:52:
cd:16:17:65:42:12:c1:36:89:db:95:7c:ff:bb:c8:
36:24:ee:35:3c:e5:6c:84:81:be:73:4c:ae:62:89:
e3:67:63:53:96:8c:df:bd:63:56:86:7b:a7:b7:e8:
8f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8D:5B:D4:33:D9:67:B7:51:11:D6:B6:EA:D0:31:13:C5:69:3B:38
X509v3 Authority Key Identifier:
keyid:23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a8:93:8f:cd:2c:05:79:6e:98:0d:bf:39:71:67:ac:a0:42:
a4:f7:9e:c0:0d:b6:bb:e3:5f:be:8e:3d:de:6b:00:0d:05:d6:
a6:19:86:ae:7b:5c:78:ee:73:bf:1b:9a:90:35:74:bd:01:11:
28:82:81:a3:03:cc:e7:5a:67:4e:fa:b4:88:cf:64:b2:02:6e:
9e:b5:4c:f2:2f:f9:4b:7e:f5:77:3c:74:d6:92:71:a6:8f:2b:
60:34:72:1a:bc:be:78:b3:87:26:3f:25:5d:94:f1:70:7b:f3:
50:1c:9c:4a:93:5a:0d:5e:c7:1b:74:19:5a:62:53:a6:e3:cc:
78:ee:0a:7d:cf:73:b8:20:47:ee:be:f1:a7:91:e4:50:71:88:
47:80:c2:20:b6:62:ef:08:f9:92:0e:03:67:73:e9:b0:78:03:
b4:9e:e8:1b:cd:6a:ec:32:5e:35:f6:38:b7:53:68:19:29:07:
fb:44:58:94:70:fb:38:74:1b:cd:10:e5:ab:d4:34:08:26:02:
be:b9:75:b8:c0:fb:09:18:98:da:b4:65:1a:a1:1c:5e:01:93:
18:5c:74:c5:06:47:56:55:e6:50:0c:26:c5:35:a3:11:be:74:
bf:e3:25:10:2d:69:25:3b:09:29:c3:38:c5:dd:8e:cc:d0:87:
3f:fc:cc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:10:45 2025 by rpki-client