Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
File: ia6mmISBzqS5W2UTHMSYhPPtDj8.mft (raw, json)
Hash identifier: uQxORSQ8gjqvNTzpkG0DeNKbVJUBo9zrufyzh7w9NNI=
Subject key identifier: 5E:B1:DB:8A:28:D7:38:3D:F7:BD:EB:45:1E:8B:82:A0:C8:1F:FE:24
Authority key identifier: 89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
Certificate issuer: /CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Certificate serial: 01977151A081BBBF6A22A6126D8502D29703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 02:01:04 +0000
Manifest this update: Sun 15 Jun 2025 02:01:04 +0000
Manifest next update: Mon 16 Jun 2025 02:01:04 +0000
Files and hashes: 1: Fl6pOlPLU-YJzCc-HkB3wwedcd0.roa (hash: jlDQ+VkQoTEiq8ZQ7EeJUmtKUn70x3pUuA4q7simdPM=)
2: ia6mmISBzqS5W2UTHMSYhPPtDj8.crl (hash: UWHwU73C158OqUtJZY3+B2Rcrgl+3ZhIVxTTtGlwFWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:a0:81:bb:bf:6a:22:a6:12:6d:85:02:d2:97:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aea6988481cea4b95b65131cc49884f3ed0e3f
Validity
Not Before: Jun 15 02:01:04 2025 GMT
Not After : Jun 16 02:01:04 2025 GMT
Subject: CN=5eb1db8a28d7383df7bdeb451e8b82a0c81ffe24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:93:e8:2e:d0:29:ff:65:0e:01:65:90:41:42:
94:1e:36:1b:75:53:7c:8d:af:53:14:e4:92:a0:b4:
18:ab:f3:d5:b7:b1:e8:c1:43:cc:2f:6d:b3:76:31:
be:3a:16:2b:12:ab:a2:3c:d8:94:6c:77:0e:c8:94:
07:17:ef:e9:75:fd:a4:c5:ab:28:55:0d:53:d8:c1:
ca:bf:6e:9d:4c:79:0a:3d:aa:67:57:86:f0:97:53:
f5:53:b0:0c:9d:0d:1e:05:5d:5d:db:d3:19:30:19:
30:48:3f:3e:eb:2b:65:f6:6c:c1:a2:d5:62:dd:a6:
9b:06:7c:c7:75:3c:81:13:a8:69:64:fb:09:d1:57:
3d:cd:8a:5f:c1:3a:d4:a4:d9:bf:4a:39:da:ce:aa:
0e:f9:71:d2:60:12:e9:4b:ab:35:26:5f:94:ea:88:
9b:86:b6:d1:89:f6:67:14:75:47:f0:13:76:86:ed:
04:e7:cc:79:ea:42:a7:9f:54:de:42:4c:0d:c1:66:
a4:b5:11:7d:5d:5b:91:e7:c9:0c:b5:bf:f6:62:28:
99:da:e6:a8:1a:1f:48:71:bc:21:cc:6c:99:c8:e0:
99:4f:dd:70:e0:9f:da:ae:a2:19:f4:d3:9c:d5:ef:
51:21:12:30:ca:ed:21:7e:8d:55:07:21:30:fd:6f:
3e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B1:DB:8A:28:D7:38:3D:F7:BD:EB:45:1E:8B:82:A0:C8:1F:FE:24
X509v3 Authority Key Identifier:
keyid:89:AE:A6:98:84:81:CE:A4:B9:5B:65:13:1C:C4:98:84:F3:ED:0E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia6mmISBzqS5W2UTHMSYhPPtDj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2a55a5-3304-4108-8d92-4d8e90e0333b/1/ia6mmISBzqS5W2UTHMSYhPPtDj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:66:d9:5c:f9:d2:b2:b0:17:0b:0b:fb:05:c0:74:20:90:16:
6d:2a:9b:42:81:7e:09:1c:7b:e7:e3:09:27:56:e6:de:39:c6:
cc:de:1a:53:d5:7d:61:10:2b:e0:36:cc:3f:90:e5:a2:de:56:
3c:05:a1:8e:5e:7f:db:d8:0e:dd:a6:6d:96:42:ed:e1:a2:6e:
56:93:92:1a:e4:c2:6a:4d:19:c6:4a:f0:bf:ed:c1:11:9e:f1:
86:02:99:bf:82:73:15:7a:99:7d:3d:c1:67:d7:33:31:fe:3d:
b1:0c:21:0c:21:ab:62:ab:07:d9:1a:a1:87:3f:e2:53:e9:df:
db:73:4b:64:9b:f3:56:5f:27:c4:92:e1:ed:90:a0:80:b8:e0:
b5:e1:8c:b2:c9:0d:c7:a9:f8:8c:ce:b9:0d:9e:13:cc:90:9e:
d2:81:63:1d:2b:36:09:a8:d2:08:c4:3f:e5:57:ce:41:c6:c7:
ff:2e:fb:7a:58:b6:11:34:b9:df:5b:b6:8d:11:8e:81:77:21:
60:64:eb:20:75:9f:fa:88:db:04:cf:63:fc:aa:17:62:1f:15:
f7:72:53:85:84:57:ef:a8:b8:b2:c2:d3:65:0b:d3:10:49:9f:
b3:32:e5:cd:7e:a1:b4:8f:78:e3:7a:57:aa:d0:c7:0c:48:1c:
dc:99:6e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:41:21 2025 by rpki-client