Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
File: IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft (raw, json)
Hash identifier: jhBiT33ao+sZaWZpO17MsVSBH8iXpM2ePlZzwRSrBWk=
Subject key identifier: 84:5A:A3:75:5C:E3:0D:7F:A9:AD:0A:AF:05:08:90:0F:2E:FE:0E:F4
Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
Certificate issuer: /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Certificate serial: 019774891D1748776604016533198B9EF70C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
Manifest number: 1304
Signing time: Sun 15 Jun 2025 17:00:32 +0000
Manifest this update: Sun 15 Jun 2025 17:00:32 +0000
Manifest next update: Mon 16 Jun 2025 17:00:32 +0000
Files and hashes: 1: IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl (hash: 0pHYPrjTpHS3lLUpEDaA/2HTxgDGJJhbPC12dKZIaP4=)
2: Tj1VT7s8ilnWaRH5FDEx4ErgOfw.roa (hash: EAnVAxYXeZnLn3O7V7JRGZpaiw9YJLofd+adf3s7hWw=)
3: z8gJT3mWJvoCjNtGavez3w-sptI.roa (hash: rAtA37xRZ8BRiEnR3BviWDsE+vEFga17zSGIolCXdPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:89:1d:17:48:77:66:04:01:65:33:19:8b:9e:f7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Validity
Not Before: Jun 15 17:00:32 2025 GMT
Not After : Jun 16 17:00:32 2025 GMT
Subject: CN=845aa3755ce30d7fa9ad0aaf0508900f2efe0ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:39:66:51:9a:1a:8e:db:c5:a0:50:0d:32:b9:
3c:6d:cb:3b:0a:3d:c4:a2:f8:0e:dd:e8:a4:3b:cc:
1e:a6:ef:62:19:72:06:e4:c9:00:bc:38:df:52:22:
5a:34:df:26:9e:65:56:52:9d:b7:31:82:9f:7b:a8:
4e:56:e8:98:28:62:7e:8e:33:ab:d8:e7:88:d4:e4:
53:2e:ec:f7:4b:14:8d:4d:16:12:3e:4b:a4:ff:fa:
60:ea:ae:41:8c:12:db:ec:4f:6e:22:9f:a0:f9:54:
d2:48:8c:5e:2a:b2:9e:21:2b:c5:68:d3:77:13:60:
86:90:81:c8:0c:8a:06:7d:b1:52:30:67:f6:d0:a1:
46:4a:c8:86:d7:f7:25:95:e0:f3:23:f3:ff:fd:29:
e3:38:e0:5b:53:67:c9:8d:7e:dd:04:2e:68:ad:7d:
27:c8:d2:95:b8:8c:b6:18:ac:15:82:10:64:25:11:
f2:83:81:48:92:ab:d6:ae:a6:fb:04:7e:e3:73:cb:
be:cb:3d:c3:b4:ec:c4:af:2f:96:3f:af:bd:d2:b6:
73:d9:74:50:2a:47:c7:bd:5e:11:02:9e:2f:20:eb:
ed:e2:0e:96:51:e0:6d:52:75:0d:19:6c:ee:b7:95:
b5:2e:46:6f:33:35:41:77:3a:01:5d:46:82:61:64:
02:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5A:A3:75:5C:E3:0D:7F:A9:AD:0A:AF:05:08:90:0F:2E:FE:0E:F4
X509v3 Authority Key Identifier:
keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e5:e1:d3:8f:b8:06:c9:59:c8:57:e3:14:3f:80:59:ea:da:
5b:f6:09:64:eb:9e:ba:42:74:0c:8d:c7:67:60:ab:b6:b7:48:
d7:85:63:fa:12:1c:06:9a:4d:79:3e:7d:f3:b4:e7:11:da:d6:
99:ef:c9:9e:e3:b9:a6:f2:cc:36:19:86:a7:b6:89:ef:01:58:
27:84:d4:c8:f6:b6:41:f4:59:a4:0e:d3:5f:b4:8f:6f:5f:6c:
86:1a:1a:b2:ef:98:ba:bc:8f:ed:2c:4f:77:bb:d0:36:29:e4:
3a:8c:a1:53:5f:51:34:ac:4f:39:e0:34:6b:20:98:49:bf:c2:
a0:04:6f:3b:09:a9:19:0b:24:03:42:05:45:1c:cd:1a:43:e6:
66:2e:7f:84:e8:19:74:0d:be:06:4e:ea:2c:d2:15:f8:0a:a4:
de:65:d2:74:1b:41:f7:4b:fd:05:cc:b5:b2:5e:04:75:7b:1b:
28:43:b4:e6:a3:44:89:28:2a:0d:6e:c8:fe:00:9a:43:b9:b7:
df:69:76:aa:57:f4:f3:1e:ce:50:64:ad:72:a3:25:09:d2:b1:
c7:35:8c:ac:5c:f4:98:64:76:30:4f:ad:5d:f9:db:8b:e7:68:
d3:32:40:79:dd:55:24:fd:b0:f0:12:f6:e2:d3:62:8e:41:5f:
4c:3d:b6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:47:07 2025 by rpki-client