Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
File: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft (raw, json)
Hash identifier: o/Yj1PR378gumi2hre4FrVwm36LDkJqBgp2+3DQsAnw=
Subject key identifier: BF:6C:A3:82:F1:53:6B:DD:1E:75:F2:C2:50:58:86:AD:A2:6B:B3:A4
Authority key identifier: 23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
Certificate issuer: /CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Certificate serial: 019779E6693B993033B79190698F1CA429C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
Manifest number: 0B11
Signing time: Mon 16 Jun 2025 18:00:32 +0000
Manifest this update: Mon 16 Jun 2025 18:00:32 +0000
Manifest next update: Tue 17 Jun 2025 18:00:32 +0000
Files and hashes: 1: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl (hash: VqOI1yIyYT1CuCecrp0hN38EGRDFDSyf262sBs6hVZA=)
2: LCSxsz-FQ4GzwZw8Odnzg4_wz4s.roa (hash: cOtRnPje7E9WAoJFvY2RM5FM1p4R+PS2ZqyaTPw4hic=)
3: WWsWrGhHJPhxsXXJtUhA3vzECwE.roa (hash: LLPjYgAmQluoQLBe3s0wxjIyXNJ82uAq8ra1WEAoLDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:e6:69:3b:99:30:33:b7:91:90:69:8f:1c:a4:29:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Validity
Not Before: Jun 16 18:00:32 2025 GMT
Not After : Jun 17 18:00:32 2025 GMT
Subject: CN=bf6ca382f1536bdd1e75f2c2505886ada26bb3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e4:58:17:8a:d3:ba:57:b4:c8:6c:94:ac:c2:
30:19:f2:7a:bd:25:13:4d:35:ff:10:de:5f:c2:47:
a3:6c:bc:b1:1b:92:08:1c:3c:8f:3d:0b:90:55:e8:
5b:c1:19:58:89:f6:fe:17:ba:49:cf:70:c4:a2:38:
37:b3:95:85:47:ba:a1:9c:5f:7a:a1:8b:e0:14:f2:
05:21:29:db:cf:6b:97:bf:3d:6e:cb:eb:97:7b:07:
35:ed:c0:c7:70:b9:d6:1e:e5:b4:c5:55:5d:14:d2:
2d:2c:44:59:54:9d:56:d0:83:5f:c5:02:56:48:82:
87:b3:40:0e:76:fa:60:86:2f:19:80:ae:8e:88:65:
ec:7e:58:fc:2d:d7:a3:66:ed:58:ad:fc:87:5e:02:
6c:c7:47:0d:84:3b:62:40:90:85:96:52:18:14:4f:
49:e2:25:ba:35:b8:7e:b2:ec:3d:1a:a0:d5:d7:03:
98:3a:95:d5:3b:13:dd:93:24:72:23:20:3b:1c:1b:
2f:46:82:02:69:a4:9a:25:86:36:f2:92:28:f2:cb:
5d:6d:f7:c1:c2:9f:06:bc:66:5e:88:27:1c:ec:62:
f1:1c:45:49:38:67:9e:40:84:3b:61:9b:5c:9f:16:
d8:23:e8:32:a5:4e:30:68:55:a3:a6:1b:9d:ae:fb:
fe:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6C:A3:82:F1:53:6B:DD:1E:75:F2:C2:50:58:86:AD:A2:6B:B3:A4
X509v3 Authority Key Identifier:
keyid:23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:67:c6:b0:d5:21:63:dc:74:02:12:a1:0c:8d:cc:6d:f1:93:
d8:c4:a1:7e:7d:43:2d:9f:11:7f:cc:83:ba:3d:d0:1f:0b:e4:
df:45:fd:e5:e2:f5:14:f4:8c:4e:22:2c:0e:51:92:a9:09:1f:
ed:cd:1d:3e:9a:75:cf:89:31:ed:62:5b:30:9b:e8:0f:25:a4:
be:48:09:24:3a:36:f3:52:2a:8e:59:3f:83:d9:b6:18:41:f1:
55:95:68:81:b8:13:10:f3:23:84:20:3d:d6:59:ac:52:4d:e3:
4c:f8:e8:31:23:ea:65:8c:eb:8d:2f:51:9a:e1:e2:77:b5:d9:
0f:d1:58:b7:ae:d0:81:b2:7c:7b:e2:42:2a:31:e9:cf:c1:ec:
71:b6:db:7a:3a:97:40:43:98:b5:67:ea:43:86:5f:6b:96:19:
eb:a1:2b:d0:f8:ec:18:54:0d:d7:b9:b2:0f:f9:78:37:8a:e9:
15:f3:7b:12:bc:23:c9:89:01:de:f4:02:9b:bb:20:45:15:23:
43:45:5d:dd:f6:bd:a3:21:57:8c:8f:b3:4a:ff:23:82:38:96:
8a:fe:dd:49:c7:88:bb:ed:8a:3a:27:5f:ba:8d:70:63:26:7c:
42:89:cb:9c:de:75:d0:78:3f:20:94:0c:a8:62:92:e8:f6:d7:
c2:fc:5e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:51:21 2025 by rpki-client