Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
File: ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft (raw, json)
Hash identifier: qDXBahOHL5FWjgxlkgpyOq/RSIA4TUd6BkUHCYknz1s=
Subject key identifier: 4B:6C:0C:A4:F9:BE:A7:B5:48:1D:D7:FD:14:50:8E:3D:5E:95:B2:77
Authority key identifier: 8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
Certificate issuer: /CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Certificate serial: 019771F68949C85AF6FC72B2AEAFE8EEA9B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 05:01:11 +0000
Manifest this update: Sun 15 Jun 2025 05:01:11 +0000
Manifest next update: Mon 16 Jun 2025 05:01:11 +0000
Files and hashes: 1: SZpd9qPeF2_UcZ0BFTiD1uQx6CE.roa (hash: 4d7c/yFsOUlnwxOih4L4b458874C6mb5/7y63/As6E0=)
2: e6NTQMQbAc2rRpYIgSE0b5QlitQ.roa (hash: AW2JD/AMZP/3NkMYPVumCDsjg07AD98EjBhRoynRE5I=)
3: ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl (hash: foHUqKrwd99dguJmYloZ/4Ats180jimSvjFpcZWqNT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:89:49:c8:5a:f6:fc:72:b2:ae:af:e8:ee:a9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Validity
Not Before: Jun 15 05:01:11 2025 GMT
Not After : Jun 16 05:01:11 2025 GMT
Subject: CN=4b6c0ca4f9bea7b5481dd7fd14508e3d5e95b277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e2:c7:41:05:c7:a2:78:3f:fa:9c:91:06:40:
f8:59:81:11:85:b3:a5:d6:f5:ea:92:7c:81:b8:e4:
a9:d4:1c:8b:42:ff:bb:04:a8:7f:c7:42:17:d2:3d:
1d:1a:06:03:22:61:ea:19:88:1b:b2:ec:ad:58:4d:
67:69:67:f8:ce:e8:9c:b6:9c:a8:27:e3:fa:19:3e:
94:0e:18:39:7a:ac:3a:89:a3:d3:83:00:6a:6a:5b:
dd:6c:ed:c0:bd:7b:ef:dc:0d:22:76:76:41:20:60:
9f:f2:53:01:7d:16:a0:a0:62:66:8b:17:fe:66:a6:
3f:7f:e7:04:2a:1e:de:f7:b0:bd:54:c9:60:a3:8f:
2c:83:23:20:98:9a:1a:68:02:62:aa:96:20:48:5a:
91:06:1f:f3:30:36:89:7b:c0:5b:7d:7d:2d:9c:9c:
29:56:8f:ad:39:83:11:2e:14:3d:91:30:4a:32:46:
09:af:6c:b2:2e:9c:89:97:51:0d:17:1d:95:a6:7d:
5e:79:bc:5c:79:44:bf:b1:0b:7a:a3:f5:ce:db:44:
60:4d:56:dc:0c:26:b0:dc:95:fb:7a:4b:e7:38:ec:
a7:c6:f6:05:fa:f8:51:49:69:47:c1:de:25:93:e7:
23:e0:dc:c6:56:a8:4c:58:16:3b:be:d9:58:b9:9e:
a8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6C:0C:A4:F9:BE:A7:B5:48:1D:D7:FD:14:50:8E:3D:5E:95:B2:77
X509v3 Authority Key Identifier:
keyid:8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ee:05:d2:59:1a:1a:f8:bd:57:55:09:74:13:60:a1:34:b4:
22:7d:be:4b:d0:d7:e1:fd:53:de:e8:39:be:df:12:3a:fe:62:
14:16:4a:8e:a4:23:67:5b:cc:0f:6c:03:df:d3:09:a1:4d:08:
ae:18:97:d4:fd:73:a3:98:6d:3c:dc:3f:39:fd:9e:74:e1:61:
85:57:af:e3:a6:93:b9:f3:73:c8:04:9a:50:8f:aa:26:6b:11:
6e:1d:f9:f7:c4:b4:cb:bd:23:6a:ce:14:60:bb:62:6f:0a:cb:
58:1c:29:28:ca:02:d3:0a:f6:21:6b:a0:3f:40:63:34:a0:39:
2d:b2:f8:45:32:83:88:e1:6e:8e:96:07:18:e2:70:a4:02:62:
73:e8:9f:65:ca:09:5b:ee:0d:fd:51:8d:84:8e:4b:6e:a9:9d:
2b:20:6c:32:c0:da:22:ab:ec:61:4b:36:cf:c9:2a:96:2b:ad:
80:b1:51:45:62:2c:fe:c6:b0:97:70:4b:62:f9:5c:8f:1b:60:
cb:46:a3:b9:12:1f:ea:a3:fc:f2:8a:f8:e6:18:69:22:ca:3b:
0b:59:48:f1:4a:f1:2d:a0:ab:7f:68:ba:1b:2e:f9:89:e8:d7:
2a:6b:ce:e2:ad:ce:fa:b8:30:9c:ca:59:75:6d:5f:34:d2:bc:
1f:df:7f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:08:13 2025 by rpki-client