Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
File: I9SAsHlWF-Libm4YJkN356lsePM.mft (raw, json)
Hash identifier: udAhnN51MQ7OXuIZVfx3Y5iUO9kChcjznGKnpRjV1Y4=
Subject key identifier: 8A:A5:EF:8A:64:B3:07:CD:BC:25:43:87:8B:42:BF:14:D6:23:CA:30
Authority key identifier: 23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
Certificate issuer: /CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Certificate serial: 01976B85D7A98B50B1BDC5F84CF6C9006E1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
Manifest number: 1417
Signing time: Fri 13 Jun 2025 23:00:22 +0000
Manifest this update: Fri 13 Jun 2025 23:00:22 +0000
Manifest next update: Sat 14 Jun 2025 23:00:22 +0000
Files and hashes: 1: I9SAsHlWF-Libm4YJkN356lsePM.crl (hash: W3fa+RvZqs4TFKop0YK63H2/QFlIuLP/+/5fG7FxFiI=)
2: aLLfQWJh4e8MWIBxW7MrVPCtfI0.roa (hash: b2SmcSH4KOG2Jvamzo/dYIoESNg2kaU1WJmva5O/UBE=)
3: i2GfKnioIrK4DFco2liFl7JEt9U.roa (hash: Ib8ibm5kzCYxk8mp5/206nEi8+cY3/XjnCkQAxAJBU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:85:d7:a9:8b:50:b1:bd:c5:f8:4c:f6:c9:00:6e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Validity
Not Before: Jun 13 23:00:22 2025 GMT
Not After : Jun 14 23:00:22 2025 GMT
Subject: CN=8aa5ef8a64b307cdbc2543878b42bf14d623ca30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:25:bf:8a:f0:1d:77:67:ad:2f:04:9d:83:ce:
89:33:f2:8b:c7:82:ac:20:d1:80:26:45:a0:d5:c3:
1b:23:20:be:97:58:62:15:d5:c8:1f:b8:2d:3c:fa:
c8:e6:da:7b:f3:50:18:90:4e:c5:fc:08:54:81:67:
5c:62:8d:e9:13:1c:6a:96:93:54:97:80:cb:53:aa:
3d:68:eb:2e:f3:8d:47:57:a3:b2:6a:9c:8e:bd:24:
9f:3f:fa:39:ec:74:2a:a7:97:ce:fb:bc:5b:da:3e:
85:7e:09:a4:b2:15:7b:e0:e8:23:39:44:d6:4a:63:
2d:1b:bc:dc:99:c8:15:a3:5b:a8:bc:f4:74:de:a0:
59:d6:87:67:52:9f:09:58:55:e6:15:e9:ab:b3:7d:
0d:fa:61:e4:91:0c:b0:c7:9f:2d:b5:a8:bd:17:c5:
5c:12:bf:f1:0e:72:46:b8:4f:b4:7b:5d:22:62:c0:
10:0b:74:72:d9:ff:19:da:d4:c1:e5:78:3b:9a:93:
d5:f8:c3:03:76:9b:95:e4:df:30:a4:d6:ec:b9:a1:
22:44:d4:35:86:2f:f8:72:20:54:57:80:0c:89:10:
11:3a:4d:38:b2:5e:bb:91:ac:f5:9a:3d:27:60:bc:
93:2c:82:ea:5f:02:33:90:f0:3e:4c:9f:25:69:be:
b0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A5:EF:8A:64:B3:07:CD:BC:25:43:87:8B:42:BF:14:D6:23:CA:30
X509v3 Authority Key Identifier:
keyid:23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e2:07:93:5a:ea:98:8b:54:5d:59:7e:95:57:2c:4b:f2:7b:
50:8c:f3:89:b9:a1:4c:90:0a:65:6d:b3:db:e6:ed:c1:c4:0b:
20:98:ea:97:f9:17:41:21:ce:6b:98:bf:ef:61:72:ce:52:24:
e4:d8:5c:d4:af:68:9f:bc:e1:eb:e4:fe:1d:50:08:f5:62:ba:
40:63:42:ba:df:3c:b6:fa:ba:86:e7:a3:42:d0:16:d7:54:13:
a2:88:b8:41:bf:76:8a:a6:0e:5f:29:3b:4d:99:5c:0b:68:af:
35:8f:10:a0:e8:2d:ad:69:bc:c6:e3:4f:ed:3a:69:f4:cb:3f:
45:e3:e2:f0:2e:bc:45:8d:16:60:50:25:a8:82:fd:19:4d:22:
7a:8f:78:f5:da:a4:60:ca:33:6b:c9:51:77:98:ec:7f:4c:42:
8d:a7:cb:05:90:7b:6f:0a:c3:36:4e:48:fa:c3:40:ca:f3:95:
d7:4a:d3:c2:a7:a0:82:db:cf:17:31:ee:d3:b6:3c:62:bd:5f:
5a:91:8c:47:11:9a:0d:74:1a:86:b6:1f:dd:7d:e2:78:ad:1d:
94:cf:09:8e:a5:6e:85:ee:d4:b9:d0:b4:c6:48:26:71:74:a2:
92:2d:66:08:c8:3e:76:90:4b:69:9e:5f:73:39:69:65:ab:bf:
ba:a7:bb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:17:21 2025 by rpki-client