Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
File: i3P4NzXIqxCgqNROFwEo8COEbnk.mft (raw, json)
Hash identifier: drSq9OUWab16Dnh5jtsJw0ZSBWxkAsNyQDxQ9peE8pE=
Subject key identifier: 72:25:D1:2D:21:CA:DB:1C:E3:27:6E:F2:D2:54:72:FF:50:94:CC:FB
Authority key identifier: 8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
Certificate issuer: /CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Certificate serial: 0197BA0F862176A36903FB61DB767E2FF928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
Manifest number: 047A
Signing time: Sun 29 Jun 2025 05:01:08 +0000
Manifest this update: Sun 29 Jun 2025 05:01:08 +0000
Manifest next update: Mon 30 Jun 2025 05:01:08 +0000
Files and hashes: 1: L3ocwI9skWdmpza9Qr_soDnI5iA.roa (hash: 9lUp3ywFYQ08BYq4aJkqYCgUsr8TmtCB3L7KRcDWSOM=)
2: i3P4NzXIqxCgqNROFwEo8COEbnk.crl (hash: Rbf5m/bCZgmRX7F1GEaPl5tqRZIg7lh9yFcI77RbHj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:86:21:76:a3:69:03:fb:61:db:76:7e:2f:f9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Validity
Not Before: Jun 29 05:01:08 2025 GMT
Not After : Jun 30 05:01:08 2025 GMT
Subject: CN=7225d12d21cadb1ce3276ef2d25472ff5094ccfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ec:32:bb:e6:aa:da:b7:57:06:c6:b6:68:83:
b9:47:59:2a:b3:65:38:57:fa:93:75:cf:83:be:e2:
09:fc:f4:f4:16:72:dd:27:0c:32:50:04:b4:7c:9f:
77:45:f4:83:6c:0b:39:02:e5:54:69:3a:24:53:fb:
6f:31:80:21:74:33:7c:56:06:5b:13:91:7a:b3:8f:
b6:38:f2:cc:dc:36:3d:23:c9:35:e3:56:a0:4f:40:
22:58:5a:9b:84:8a:2c:7f:84:94:05:17:01:c0:c5:
98:e4:b7:10:46:1c:64:a6:0b:6c:26:2c:8c:04:db:
a8:2a:f3:e8:6e:fa:54:ac:77:5a:42:04:bf:e9:2e:
90:2a:0f:10:18:0f:c0:46:b8:64:50:70:49:79:cd:
1c:a1:fc:42:b4:7a:9b:7e:5c:f5:b9:6e:0b:2c:c5:
59:b5:1e:3e:48:a2:d8:db:1f:b5:da:a9:f0:9c:fd:
56:1a:b5:4a:c7:6f:3e:02:bc:f0:eb:1a:9d:90:6c:
77:9e:43:7f:13:e0:e0:e0:88:c6:84:08:cc:22:ad:
01:13:b0:25:96:b2:e9:bb:ba:2d:fb:7e:b8:73:a4:
a1:81:7c:16:9b:39:c8:af:47:2b:a9:3c:3d:07:31:
9a:69:21:b0:ed:06:b8:16:16:d3:35:ea:5d:98:16:
cf:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:25:D1:2D:21:CA:DB:1C:E3:27:6E:F2:D2:54:72:FF:50:94:CC:FB
X509v3 Authority Key Identifier:
keyid:8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:fb:02:99:d1:11:df:98:01:10:48:ea:8a:50:63:21:22:71:
50:33:b3:d3:83:6f:51:32:f3:6b:ce:3a:ec:6b:ec:ba:3b:18:
db:ff:8d:72:76:4a:db:1d:96:f6:56:ba:f4:5d:b2:50:a6:ba:
e3:98:b1:0a:9c:51:80:3c:90:7a:9f:e0:22:db:7a:0d:b3:0f:
d9:9b:c6:44:1b:63:de:77:f9:5d:6d:05:6f:ff:84:5b:b4:14:
ea:56:4b:6d:6c:54:44:04:cb:51:24:a7:33:f8:e1:9a:84:0b:
be:05:ab:8b:f4:d0:b2:c9:23:c8:b4:71:68:9b:95:89:9b:af:
a4:cf:76:84:23:a4:4a:ce:db:20:f1:f9:f3:96:95:ae:ac:54:
7f:f7:0c:c2:1a:8f:0c:70:92:89:0b:33:56:5e:04:7e:8e:7c:
63:60:0f:2d:2d:e3:e9:2a:60:46:14:90:ff:a1:c8:da:c6:6f:
6d:1a:ca:53:d5:58:d4:25:d8:ba:62:10:da:ed:a4:d6:5f:ee:
12:df:16:24:5e:d3:ac:dc:68:9d:96:90:8f:72:e4:5c:ad:82:
a5:1c:c2:07:5b:88:00:a9:f3:76:d9:db:8d:9b:27:60:81:e5:
61:4a:f0:05:39:2e:cc:e4:39:c1:e9:01:1f:47:5a:79:1e:b0:
49:58:7a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:36:04 2025 by rpki-client