Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
File: IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft (raw, json)
Hash identifier: Vv4ufZIrNpZ0bn3dQOSNw7U3+9vXnNvzI4ZsSavnOXI=
Subject key identifier: 87:7F:5D:A0:1C:C6:25:DE:D2:54:2A:38:5F:04:4B:35:AF:F3:D7:E6
Authority key identifier: 21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61
Certificate issuer: /CN=218af26f9a36653f4d996719d4a410fe84af4861
Certificate serial: 01976E508863E72936E2D727916EB5355F80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
Manifest number: 0454
Signing time: Sat 14 Jun 2025 12:01:00 +0000
Manifest this update: Sat 14 Jun 2025 12:01:00 +0000
Manifest next update: Sun 15 Jun 2025 12:01:00 +0000
Files and hashes: 1: 8aRFc9FMZuB39L9ezbDQe4rTWqI.roa (hash: d0kPdTmIfua7sOVHFgh6TKa6BfDr4mbqEziPITcO1vw=)
2: IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl (hash: aB+uj+VQE0R98gpvOdAxPSn0eKETJ7agu+oTD8qXVis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:88:63:e7:29:36:e2:d7:27:91:6e:b5:35:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218af26f9a36653f4d996719d4a410fe84af4861
Validity
Not Before: Jun 14 12:01:00 2025 GMT
Not After : Jun 15 12:01:00 2025 GMT
Subject: CN=877f5da01cc625ded2542a385f044b35aff3d7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d9:d6:64:67:90:0f:91:ca:33:6e:a2:42:68:
d9:7e:17:f7:5b:d3:d7:2f:54:04:9a:5b:88:0c:a1:
90:c6:9b:f9:3f:90:3e:43:9c:d8:5f:cd:d6:9e:53:
9a:a7:3c:1a:ff:f4:94:79:79:5d:11:35:75:f5:c1:
d9:e5:89:a0:89:0e:64:79:24:3d:b8:be:bf:2a:20:
d9:86:4a:8a:38:0d:2f:9e:ed:54:8b:4d:fc:40:62:
e4:fe:1b:0c:7e:d1:be:0e:d2:a1:75:95:aa:f2:51:
e4:08:97:3a:2a:a9:38:7c:58:0a:7a:d8:26:a3:11:
8b:7c:ff:d7:44:e3:f9:fd:b5:e3:0c:6f:f6:cd:7c:
e4:9e:9c:08:da:fe:3c:e0:d0:cb:d7:c7:a5:de:a8:
cb:51:52:56:c5:86:6b:24:e9:3a:59:ea:cc:90:f5:
11:26:4b:a0:72:1b:03:cc:3a:a0:33:f0:55:75:60:
7d:5f:cb:57:47:e0:af:25:75:13:49:ac:fa:4c:c1:
e9:0a:ae:18:18:75:e7:b9:59:5e:c3:30:45:ad:20:
35:c6:fa:8d:29:76:2d:98:63:15:77:c6:ed:4e:62:
4f:6b:af:aa:1b:01:33:80:50:68:19:3a:ad:19:ea:
10:a8:ab:13:93:9e:6a:cc:03:7c:e0:c9:ed:6a:75:
28:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7F:5D:A0:1C:C6:25:DE:D2:54:2A:38:5F:04:4B:35:AF:F3:D7:E6
X509v3 Authority Key Identifier:
keyid:21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:69:6e:1c:ca:08:aa:cd:2d:d9:f6:5f:65:80:6b:91:19:f2:
4e:95:dd:3b:4a:7b:fd:23:14:aa:61:33:7d:b7:9c:22:cd:c6:
be:67:0d:00:d4:aa:bb:e3:f6:5b:5a:24:e7:d1:14:c3:81:29:
57:2e:f9:03:eb:c0:29:3c:45:89:60:95:44:e2:bd:aa:aa:04:
f1:4e:d3:0a:3e:97:d8:10:49:60:65:45:db:8b:94:26:67:2a:
8c:24:54:30:84:97:21:8d:29:80:fc:c2:14:0b:f5:1e:20:b1:
19:6a:71:a3:b8:27:c9:86:cf:88:1e:ed:1b:f6:04:90:ce:7c:
32:2b:28:1c:27:83:39:b3:29:0c:b9:de:f8:24:a6:4b:8c:4d:
8d:01:f9:6c:c4:a0:0f:f3:be:86:a9:80:59:31:2b:1d:f1:49:
9d:95:a1:6f:cc:77:52:cb:16:6d:b6:38:15:f2:9e:48:05:88:
a5:69:ae:3a:3a:a7:7b:e7:7b:a5:e2:fa:b6:d9:f9:aa:d4:2f:
b6:18:d1:0a:a6:cc:d1:2d:f6:55:4d:07:18:4d:41:ae:a3:7c:
dd:95:43:f0:70:d0:e2:af:8d:2b:b6:51:76:83:71:a9:8f:8b:
28:43:e2:a2:a2:90:3f:e1:fa:fe:1f:e2:c4:e7:88:e2:ce:c7:
34:23:8d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:18:57 2025 by rpki-client