Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
File: IxIMamyM8XJufUjjFKFszQXvhgc.mft (raw, json)
Hash identifier: QJ3HlIu296PDL5Sh7eB2ySLWGJZ/t3bEJgGpn8AAjQ0=
Subject key identifier: 48:F0:2F:E7:5B:48:A7:DC:CF:21:26:75:38:24:D7:36:FA:1D:BC:FF
Authority key identifier: 23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
Certificate issuer: /CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Certificate serial: 01978F922BA3B6B99DF9C958E5BC65AF05C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
Manifest number: 15A4
Signing time: Fri 20 Jun 2025 23:00:10 +0000
Manifest this update: Fri 20 Jun 2025 23:00:10 +0000
Manifest next update: Sat 21 Jun 2025 23:00:10 +0000
Files and hashes: 1: 3ljJaz1a5cIjZ8YC3COzHNt_p94.roa (hash: bMQghzShphucnVw2AcHoK8ZlibkBQSkRsxgVMSWXPUM=)
2: IxIMamyM8XJufUjjFKFszQXvhgc.crl (hash: YoYs0PevKqAk6XOv4t0mK0IYGLPNDFWcUxJu5jPi8UQ=)
3: PVPdjWfp5158kOXCBG02gGqvS2k.roa (hash: yHL6CrBTx/Lx7UNatKVR0PW+xHw8+FZidWVfHY4s2Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 19:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8f:92:2b:a3:b6:b9:9d:f9:c9:58:e5:bc:65:af:05:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Validity
Not Before: Jun 20 23:00:10 2025 GMT
Not After : Jun 21 23:00:10 2025 GMT
Subject: CN=48f02fe75b48a7dccf2126753824d736fa1dbcff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:07:e2:7d:14:5d:61:24:03:ba:82:3b:cb:
dc:16:f0:1b:fe:ed:ee:3a:0d:6f:96:f4:d8:76:ea:
2e:38:68:7f:03:9e:79:58:9f:4e:78:5b:fd:99:b3:
28:e3:b5:a8:59:64:29:ee:b3:98:79:7a:37:9f:de:
ca:e0:52:8b:ae:dd:0e:33:ca:36:da:ab:04:8f:1e:
7f:30:d7:36:bb:51:4e:40:ff:a4:21:9b:84:b9:9a:
15:4c:de:6d:7e:e4:05:5c:ea:c3:0f:43:dd:59:be:
8e:3b:75:b1:2a:e0:28:ff:fa:fd:c1:bb:a7:1b:c2:
39:22:df:51:98:28:c3:2c:46:57:60:32:10:84:80:
c4:75:8d:fe:35:89:b7:1f:9d:e3:3a:ee:66:1c:c3:
70:43:da:f0:93:12:bc:70:01:21:a8:5d:72:dd:41:
fd:c2:5f:0b:b6:51:4a:47:1e:fa:8a:f0:0a:5e:6f:
31:69:05:7e:2a:68:e2:59:48:f0:d0:20:08:76:fc:
a2:e3:dc:5e:9a:6b:04:8b:8d:bc:ec:1f:d7:2f:a8:
14:c7:65:04:c7:23:d9:e3:2e:73:14:c6:60:68:61:
ed:2c:ef:44:5a:dc:26:1a:27:ef:87:42:35:57:0e:
34:d1:b5:c6:c1:35:6f:57:f6:a1:5e:87:af:e3:2f:
93:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F0:2F:E7:5B:48:A7:DC:CF:21:26:75:38:24:D7:36:FA:1D:BC:FF
X509v3 Authority Key Identifier:
keyid:23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:74:97:e5:c7:6d:12:b7:54:2e:a4:67:20:51:64:fd:af:82:
3d:9c:93:22:14:f1:c1:31:9b:5e:2c:3e:a3:48:08:98:b5:17:
09:bb:92:4c:20:98:50:b4:8e:cc:48:e2:54:50:8c:c4:27:65:
63:3d:98:1d:48:30:41:49:1c:b4:15:0a:87:4d:a4:22:cc:09:
63:4c:10:65:37:01:63:a6:43:7a:25:96:d1:10:27:59:12:9c:
83:5e:4d:aa:0a:ca:27:98:ee:6c:ee:3f:b0:ab:49:a4:03:d6:
8b:dc:f5:91:32:84:41:df:6d:61:d7:62:77:a6:07:b6:7f:f7:
32:e5:4e:3c:a1:1e:16:77:fc:07:3f:4c:28:fd:a5:67:46:b0:
00:b7:10:f3:35:08:14:16:00:c6:f1:36:78:d3:dd:46:5c:ad:
31:43:31:2f:d4:54:46:a4:09:20:38:92:d5:5b:3d:bf:f7:7d:
df:f5:f5:6d:1b:9f:94:a6:66:df:7f:55:45:c3:ba:d7:42:fc:
a6:2f:70:b3:d0:9d:bf:e1:f1:21:9d:19:fc:90:e6:62:8f:87:
62:8e:46:8e:f6:0b:52:e6:6b:f6:c6:07:60:43:3b:18:77:3c:
d7:1e:84:20:05:75:dd:56:8d:f5:09:0f:64:17:30:27:2f:9a:
ca:dc:97:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 01:03:59 2025 by rpki-client