Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
File: igCeFxuvjCo6lNKbJIee-X8JZgI.mft (raw, json)
Hash identifier: 2Rykv2uLRZqpv8FLDGlAXdKbjZi8Fz8NJsyxj4yF54c=
Subject key identifier: 03:97:34:AE:80:4D:E5:B7:31:10:6E:24:EB:9E:DB:EA:59:EC:95:BF
Authority key identifier: 8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02
Certificate issuer: /CN=8a009e171baf8c2a3a94d29b24879ef97f096602
Certificate serial: 019786C5FF55EBDE0210A853D60744C8CB02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
Manifest number: 1347
Signing time: Thu 19 Jun 2025 06:00:12 +0000
Manifest this update: Thu 19 Jun 2025 06:00:12 +0000
Manifest next update: Fri 20 Jun 2025 06:00:12 +0000
Files and hashes: 1: 2BLzMpQppQIzMULCcWC3cZT9k_s.roa (hash: 9ppFZ5NTdqvnyOW3fgV2zOryT5Kz4P3yq37cnn0pzH8=)
2: igCeFxuvjCo6lNKbJIee-X8JZgI.crl (hash: 1MNb7UUzWrNCaTbKbDiFVsepvFDdWfqdTzAzpWM8NbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:c5:ff:55:eb:de:02:10:a8:53:d6:07:44:c8:cb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a009e171baf8c2a3a94d29b24879ef97f096602
Validity
Not Before: Jun 19 06:00:12 2025 GMT
Not After : Jun 20 06:00:12 2025 GMT
Subject: CN=039734ae804de5b731106e24eb9edbea59ec95bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:20:67:47:ed:af:12:d2:ae:48:fa:b0:63:
6d:c7:31:1b:23:03:84:8d:2b:8c:1e:65:2a:45:a7:
db:da:94:ec:bf:23:b5:39:23:85:17:80:28:ff:51:
44:27:81:7f:5b:30:e6:bb:a0:97:d3:db:a0:bd:07:
f5:a9:b1:f5:9b:03:24:f5:39:56:76:53:13:d4:6a:
5e:78:5d:f2:fe:45:4f:f9:3a:3c:00:b9:26:16:94:
34:0b:e3:e9:e8:61:1f:f9:6b:27:89:74:39:0f:c8:
1f:ce:67:d7:78:68:de:70:44:46:6f:02:ac:f5:c9:
90:a5:57:ca:b2:a7:d1:32:36:9c:6a:f6:63:84:db:
69:23:ef:4d:f2:63:f7:65:dc:4f:09:57:5a:5e:ab:
97:9f:33:7e:cb:2d:08:06:34:7a:5b:f6:b5:24:e0:
41:30:d7:32:8a:e4:d9:7e:a6:10:28:00:a0:cd:c8:
e1:39:da:21:86:63:df:51:17:9a:13:25:e3:f3:03:
19:ad:f0:78:c2:d3:99:ad:b8:d0:4c:84:10:0a:68:
89:ef:e1:71:53:7c:fb:b4:73:91:0c:eb:7f:09:f8:
16:0e:48:fd:60:aa:d8:2e:5a:0c:ac:98:25:13:fd:
91:c2:4d:7f:f7:5e:1c:b1:f3:ab:30:77:f0:ff:d0:
7b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:97:34:AE:80:4D:E5:B7:31:10:6E:24:EB:9E:DB:EA:59:EC:95:BF
X509v3 Authority Key Identifier:
keyid:8A:00:9E:17:1B:AF:8C:2A:3A:94:D2:9B:24:87:9E:F9:7F:09:66:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igCeFxuvjCo6lNKbJIee-X8JZgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9f37d1-14ca-4dcf-98f7-2e7213767628/1/igCeFxuvjCo6lNKbJIee-X8JZgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e5:3a:a7:f5:8f:df:35:81:6d:56:8c:a0:5f:b1:c4:30:a6:
34:ea:81:bf:64:05:41:5f:59:02:06:39:83:3e:cf:26:71:ac:
4d:45:c2:5f:df:03:13:1a:cb:38:d5:ea:85:d2:07:a6:cc:a7:
cd:2e:1a:4a:11:9b:da:1d:41:fa:de:3e:6e:9d:39:ae:1d:30:
a2:87:4e:47:f9:0f:c4:f0:4e:bb:22:55:59:fd:42:6b:f1:aa:
2f:75:f7:59:63:14:4f:35:61:d2:45:28:e7:4c:3d:44:29:d1:
aa:e6:36:e7:60:2e:9b:a1:65:05:01:f0:ad:7a:7f:c6:78:85:
8e:de:33:49:e1:c4:03:d0:0f:bb:e6:65:d6:21:fe:de:b0:ef:
f7:47:c1:7c:12:3f:19:12:19:42:69:73:47:04:7a:a8:36:7a:
d8:8f:61:38:8a:e5:df:4b:85:a5:92:12:f9:92:1a:6c:da:36:
25:e3:06:c3:a8:d1:6f:63:5f:08:51:91:8d:be:04:da:3b:86:
27:28:70:63:db:2f:6e:09:98:6a:d1:e6:3c:95:86:46:e6:00:
47:d3:0c:df:0f:11:e2:90:62:a4:7b:d7:c5:50:2c:41:2c:95:
0b:e0:e8:5d:be:99:fa:38:e6:db:07:4b:58:c7:dd:4c:08:da:
23:00:0a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 15:05:39 2025 by rpki-client