Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
File: I90F63vZRcZd8Yc1UtzJDLLhdyM.mft (raw, json)
Hash identifier: oiY3bv1zF8fysetkg4wj5bubJGA2ya/sKkHGB4IyJAs=
Subject key identifier: D9:D2:1E:40:E4:C1:1F:1F:36:D6:37:45:78:71:54:F4:3C:5A:93:AE
Authority key identifier: 23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
Certificate issuer: /CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Certificate serial: 019768F2F2CABF2AD01AB1D5615880BDBACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
Manifest number: 63
Signing time: Fri 13 Jun 2025 11:00:41 +0000
Manifest this update: Fri 13 Jun 2025 11:00:41 +0000
Manifest next update: Sat 14 Jun 2025 11:00:41 +0000
Files and hashes: 1: I90F63vZRcZd8Yc1UtzJDLLhdyM.crl (hash: mo+v3YTc3frhmiQl3nBDl8V6fJvpDtQcQKQMK1Ai1GM=)
2: jS5n1QIkV5a4mMLNQcvKPtlrQ-M.roa (hash: lelwm9WsLrqz4fINUrusZCHF/wAouDsWxQ/qaZbxy6o=)
3: kt9kY-16BQ4necIVFRgAtvjd9vU.roa (hash: 66gMsyaOtysX+kjpi4hM+Oe5TYeIKMy84VcIEuNL1pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:f2:ca:bf:2a:d0:1a:b1:d5:61:58:80:bd:ba:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Validity
Not Before: Jun 13 11:00:41 2025 GMT
Not After : Jun 14 11:00:41 2025 GMT
Subject: CN=d9d21e40e4c11f1f36d63745787154f43c5a93ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:66:28:07:8e:c0:c5:73:fc:c6:6b:71:5b:06:
5b:d2:f3:7c:50:52:b8:bd:73:dc:6f:97:8b:45:3e:
2e:4f:54:e2:c1:79:57:eb:cf:cd:45:6e:f9:c6:f9:
8a:da:6e:95:08:62:9a:6b:f1:28:27:50:63:bd:d9:
08:cf:ad:f9:18:0a:33:06:d1:b5:1b:45:cf:c7:fa:
02:f3:f6:85:70:34:22:4a:ef:83:35:90:dc:ec:55:
37:96:3c:f0:2c:b2:a2:b5:39:fe:41:87:ee:d6:6b:
c4:71:4e:6a:0a:28:ab:5b:67:52:de:d8:de:6d:2b:
3f:9c:63:cf:b9:a8:6e:51:68:83:46:69:93:84:f3:
00:99:af:fa:be:97:49:d7:a1:46:6a:f5:02:64:9d:
61:bc:49:81:72:88:d9:6d:02:13:45:5d:3f:d2:00:
3c:81:ef:39:79:ad:aa:9f:2b:b0:17:70:7b:c7:a0:
7d:6b:e8:75:7f:21:d8:79:50:b9:6f:f3:71:19:a6:
58:db:27:e8:ff:24:1f:b7:37:93:36:cd:d3:97:5c:
fb:c7:bf:2a:cb:ad:07:ae:c4:b6:d7:f7:e7:34:23:
4a:32:d0:e8:4f:cb:e3:1a:5c:6d:6b:d3:42:ea:f3:
78:61:ac:51:a8:33:73:8e:36:d6:0e:14:c6:19:5f:
4f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D2:1E:40:E4:C1:1F:1F:36:D6:37:45:78:71:54:F4:3C:5A:93:AE
X509v3 Authority Key Identifier:
keyid:23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:02:c2:0f:cd:0a:88:0a:f9:1e:bd:3b:7a:8e:47:fa:c9:d9:
17:65:4d:52:23:6f:66:cf:f2:1d:fd:0e:79:65:b7:e6:a1:7f:
21:eb:04:c2:25:15:7b:30:b1:a5:f4:e9:e3:36:13:bd:71:25:
6e:e5:7b:77:db:bc:e4:20:1c:e9:ed:83:2e:d9:fa:4a:5f:3c:
6b:82:47:ee:42:d9:49:8f:1f:8b:a8:04:47:d1:c4:19:98:41:
f7:1f:36:3c:e2:89:5f:43:aa:92:c6:99:1c:19:6e:73:bd:b0:
60:e8:a5:25:52:7c:50:5d:3d:96:7f:8e:0a:ab:5a:58:7a:eb:
f3:33:f9:f9:05:e4:5a:ee:bd:5e:f6:72:3a:4f:4f:57:2e:88:
1a:a6:02:70:47:88:15:e0:d0:8a:f3:44:30:93:da:21:1d:f1:
33:7b:32:00:7d:28:ac:a1:a5:b1:22:42:b8:2f:65:cc:c8:cf:
8f:88:b1:47:5d:d8:89:a5:d8:69:31:04:13:40:cb:e8:ae:3a:
ae:88:82:e4:fb:0b:f0:09:a1:4c:57:29:a8:08:9d:c0:3b:78:
75:32:92:f9:51:b6:f1:3d:5a:91:e8:3d:e9:9a:5f:1c:ac:7b:
1f:26:5e:ee:42:d0:c9:36:a7:b8:e9:9d:27:26:c8:a3:c3:ff:
55:12:72:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:00:55 2025 by rpki-client