Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
File: I-Ivi97cvhm7M_zhT8HbauOkDpA.mft (raw, json)
Hash identifier: nk8uEHhMdxqosE9MA5NwVoaoqRN97CQ/1W1vnkP4UpI=
Subject key identifier: D8:9C:4B:8F:4F:A9:FD:E5:D5:74:E6:B5:5D:FD:E1:B6:4C:92:95:6B
Authority key identifier: 23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
Certificate issuer: /CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Certificate serial: 01977007E47E1211CE6A48E23A1298EB6F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 20:00:54 +0000
Manifest this update: Sat 14 Jun 2025 20:00:54 +0000
Manifest next update: Sun 15 Jun 2025 20:00:54 +0000
Files and hashes: 1: BSo6esZVhXizhr6rXIY91M7Ycb0.roa (hash: rDl9FCgKvio+Um9dNVGYTCS6mmU9eKk7X7/TBLZ4IMU=)
2: I-Ivi97cvhm7M_zhT8HbauOkDpA.crl (hash: /kaCMgJjL6GUzC2xPtPekEJYoJ+OdRvCwYxsarzWaGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:e4:7e:12:11:ce:6a:48:e2:3a:12:98:eb:6f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Validity
Not Before: Jun 14 20:00:54 2025 GMT
Not After : Jun 15 20:00:54 2025 GMT
Subject: CN=d89c4b8f4fa9fde5d574e6b55dfde1b64c92956b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:be:1c:91:61:87:de:6e:e8:f5:f0:d7:60:86:
b5:ef:93:be:14:f6:99:03:b6:73:ee:1a:f7:86:1a:
74:8c:08:0a:2d:88:ac:cb:7a:e3:c6:7c:4d:29:46:
37:b3:52:9a:95:b6:c5:7d:e0:b2:56:e7:75:e7:da:
8a:5b:cf:fc:44:39:0f:5e:0d:0a:2b:b0:03:89:5b:
b3:a6:64:0a:7c:33:92:c6:42:e8:33:89:c6:7e:e1:
22:d4:af:d8:5d:38:47:82:5b:d6:ef:a5:09:68:4d:
e3:7a:ac:2c:1a:af:6c:40:82:88:04:1a:27:67:60:
40:97:44:97:6a:06:d4:9b:d1:57:76:e1:e5:77:f9:
12:ff:bc:49:02:f9:5e:35:08:8a:94:60:a7:ee:bf:
8d:66:cd:c0:59:00:9a:53:21:51:5a:0b:e5:ef:ad:
91:f4:a7:03:be:20:6c:5b:94:91:3f:5a:2a:88:41:
19:54:99:61:e8:c1:7f:d5:b7:19:87:11:24:ea:86:
df:0d:3b:e4:88:51:2c:bf:86:f8:b8:21:1b:53:47:
3a:b4:03:91:e1:25:42:e8:d3:86:5f:55:0e:92:fc:
8a:87:b6:34:4e:be:eb:a4:8b:64:1b:64:a5:2f:83:
04:cf:fd:1a:65:f7:17:81:15:dd:17:26:98:75:a3:
47:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9C:4B:8F:4F:A9:FD:E5:D5:74:E6:B5:5D:FD:E1:B6:4C:92:95:6B
X509v3 Authority Key Identifier:
keyid:23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:8b:11:86:97:10:2c:94:6f:f2:5d:9d:9c:b0:17:d3:db:48:
41:b1:63:69:d7:71:78:20:2d:f7:60:cf:4e:b1:e2:cc:a7:62:
73:63:c0:ea:2c:15:5a:ba:d1:22:d1:b2:f8:23:58:3e:27:7e:
9a:c7:35:b8:c2:93:09:7f:b3:5e:e3:18:53:2c:fb:d7:b3:16:
5c:f1:f1:9f:9b:b0:7b:3c:1e:3c:20:d9:4b:05:fd:c3:3b:95:
c4:63:09:bd:00:a5:a3:1b:ea:56:73:88:c5:ca:15:44:b3:8a:
23:48:6b:c6:c0:c1:47:5b:3e:0c:48:ae:90:7a:ff:cc:75:03:
c7:a7:a4:b8:81:56:2f:3c:85:3b:1b:eb:53:fb:46:52:06:52:
62:59:58:cd:2a:fd:1f:e0:ea:03:39:2a:09:27:27:b1:02:9d:
7a:84:d1:53:6b:eb:f1:10:1f:11:cf:11:e5:ee:eb:16:e8:11:
42:27:06:a4:f0:5b:52:c3:bd:5b:99:e3:72:68:c4:06:74:08:
a0:f3:33:0e:8a:a4:d1:87:fe:1e:70:3c:d9:b1:27:14:13:d9:
fb:c5:64:bd:a7:03:6e:cf:82:f1:90:f1:c7:d4:cc:71:81:58:
c1:cb:2b:a2:5d:ce:24:49:d8:76:1a:67:03:ad:ba:97:2c:35:
87:e5:6b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:40:21 2025 by rpki-client