Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
File: Iybu6t1MDuVbNZSlluZyIIGcGNU.mft (raw, json)
Hash identifier: EVDTcYBh/rcX3g8TFwOunNO3urpo6j/KLweRkv/2wXI=
Subject key identifier: C8:9D:00:9A:82:1A:3B:A4:DD:70:6C:4A:E1:A1:27:C9:A4:A2:90:08
Authority key identifier: 23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
Certificate issuer: /CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Certificate serial: 019786609202EE6C31A9FD0FD0E83D1320E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
Manifest number: 15A1
Signing time: Thu 19 Jun 2025 04:09:25 +0000
Manifest this update: Thu 19 Jun 2025 04:09:25 +0000
Manifest next update: Fri 20 Jun 2025 04:09:25 +0000
Files and hashes: 1: Btqp5Iqo4QdJgskBfDeTwX6Cjbk.roa (hash: FeBcGNbxMg6sJSDgU1gDHb7DLmMxJl+RT147+5WOXvA=)
2: Iybu6t1MDuVbNZSlluZyIIGcGNU.crl (hash: +CyjyfhAY09mYPk7I1B8BUUQt6WE65gLWYOLyG4luDg=)
3: MOYgH74CPuz3kq2_7g4GEYIEmJo.roa (hash: mV4mhA6ioj38dsiaxk1oztyyfy96UU4zdfkHT8G+pHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:60:92:02:ee:6c:31:a9:fd:0f:d0:e8:3d:13:20:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Validity
Not Before: Jun 19 04:09:25 2025 GMT
Not After : Jun 20 04:09:25 2025 GMT
Subject: CN=c89d009a821a3ba4dd706c4ae1a127c9a4a29008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:92:63:4d:eb:8b:20:30:8f:34:5f:a7:a1:1c:
c0:7b:47:14:b4:64:8a:86:6a:f9:eb:26:68:c1:50:
c4:ff:2d:13:5a:23:c2:4b:ea:e8:3e:6d:3b:68:20:
f6:16:11:a6:9d:a7:e6:dd:04:55:a9:37:0b:a0:b5:
03:9d:b5:c0:90:08:d3:44:4c:de:a5:33:5f:8e:ff:
99:44:0b:67:90:47:04:a8:6a:5f:9d:ee:f9:53:f0:
33:65:8f:49:c8:3b:f9:28:da:57:16:c6:62:81:2b:
7f:ee:21:00:61:0e:94:b7:19:4e:4b:5e:c8:4b:16:
1d:ed:63:4b:62:c8:8b:8b:d1:54:f2:0d:36:ea:05:
e7:5d:da:eb:f7:15:e9:27:ec:b7:85:5b:2f:dc:9d:
1a:66:96:8e:4a:5e:d2:f7:b8:9b:b8:1f:3c:59:85:
62:aa:59:a7:fb:cb:a2:a4:4b:9b:f3:68:8b:4a:af:
20:e7:00:27:4d:5f:b0:c1:51:f4:62:4b:fe:a5:06:
33:17:16:7d:25:6e:b1:bd:54:96:79:eb:e1:93:b6:
e3:fa:d6:d6:bb:30:87:e9:3e:db:b9:44:4d:bf:73:
ed:80:8a:77:1e:52:4f:ae:22:c6:df:e8:42:03:6a:
d8:ed:5b:63:95:5c:ba:47:9d:b5:70:a1:7c:a3:9c:
33:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9D:00:9A:82:1A:3B:A4:DD:70:6C:4A:E1:A1:27:C9:A4:A2:90:08
X509v3 Authority Key Identifier:
keyid:23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:99:77:9c:d8:05:df:e2:fc:12:c6:ba:8e:bb:6e:99:05:54:
36:89:41:f5:ad:6c:45:5a:8a:23:ed:58:19:43:47:e3:de:af:
69:57:c0:37:b2:df:ae:2d:91:35:03:c6:ca:78:f2:aa:e5:a6:
8e:f2:a7:6d:1e:08:6c:44:5d:0e:ca:0f:8d:25:e3:4a:0b:c8:
85:90:b2:a0:ee:34:84:4b:79:c0:2e:48:65:6a:cf:f4:62:33:
f5:cf:b2:01:1c:b8:0a:2e:37:03:97:12:82:c4:e1:8d:84:6d:
4c:2d:61:07:ee:48:c8:48:d3:45:08:fe:85:80:a0:a6:f3:e5:
a1:3e:a9:5c:4b:33:7e:13:3a:fe:bc:a2:4c:10:b4:eb:fc:e8:
85:1b:41:a9:4c:25:3b:14:e1:20:96:45:17:9d:d4:b3:03:75:
f1:98:58:2e:7a:3b:f6:e9:00:2e:d9:b2:24:91:a9:fa:dd:f5:
3b:9a:b9:31:8e:05:07:d9:cc:7f:7b:df:b7:9d:1c:20:8a:8b:
92:98:2c:89:73:97:ca:52:68:d6:df:63:a5:67:fb:2c:24:2f:
6a:46:a6:0e:ad:be:ac:f2:64:de:8b:bf:a2:ec:af:01:50:00:
3b:1e:28:68:b0:28:60:0f:70:4f:e6:25:f4:7d:d0:26:23:ff:
87:ee:e7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:01:14 2025 by rpki-client