Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
File: IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json)
Hash identifier: SiRdg5WggoydPoQziSTMLIRbZ3rkAu6wv1AfttXfrtw=
Subject key identifier: 63:29:CB:10:BD:15:6D:02:0D:DD:00:D4:76:E4:73:58:15:67:4E:02
Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
Certificate issuer: /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Certificate serial: 0197B857ACC3BF4FD4BB8631D9D9B11D6B46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
Manifest number: 0587
Signing time: Sat 28 Jun 2025 21:00:42 +0000
Manifest this update: Sat 28 Jun 2025 21:00:42 +0000
Manifest next update: Sun 29 Jun 2025 21:00:42 +0000
Files and hashes: 1: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: duZRRgjsgnPfxYwLMLLOlFYqmaKsqC2NP6zf8ThSD78=)
2: P4joPrMbyyf9eJU97dD_0zc8DJY.roa (hash: gl6GZ/HrB5BKfA9rjfcCYlZhjRwEwX8+Blcs80phGI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:57:ac:c3:bf:4f:d4:bb:86:31:d9:d9:b1:1d:6b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Validity
Not Before: Jun 28 21:00:42 2025 GMT
Not After : Jun 29 21:00:42 2025 GMT
Subject: CN=6329cb10bd156d020ddd00d476e4735815674e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f2:d5:2a:7f:e6:1f:f7:b5:e7:42:8a:d8:35:
ab:82:fc:0e:fa:8f:8c:5f:eb:63:28:88:fd:b5:91:
c2:64:75:c6:cf:6d:06:a2:c7:00:c2:78:be:e8:ad:
ad:bd:35:a8:2d:5e:98:c2:10:e9:c5:b8:fb:55:04:
fb:39:18:f9:c8:a9:ca:79:68:e4:87:6f:32:e8:af:
a2:4d:3f:55:fa:57:1d:e7:2e:71:51:9b:28:c0:e4:
2c:41:73:69:7f:16:90:17:eb:e1:a6:e5:9d:37:d3:
26:59:76:c6:4b:dc:b1:c9:65:82:3a:3e:be:79:c2:
bb:d8:eb:af:c4:82:4f:c6:86:f1:43:4b:a8:0b:1f:
a8:8e:6d:d7:5a:5a:e1:be:02:f5:0e:f7:c7:a5:e0:
00:4c:35:5e:5c:3c:c8:4e:cb:ee:1d:cc:64:c1:fe:
d0:d9:7d:e5:88:98:b3:1a:66:df:d8:70:07:3f:5e:
51:ce:8e:b0:fe:c8:29:6d:5c:da:4a:73:32:15:27:
d1:bf:ba:e3:1f:ec:5d:73:b8:dc:f1:d0:0e:38:84:
4f:10:86:55:52:92:a6:ce:28:65:8c:83:85:e0:e3:
e5:d7:36:88:9a:59:59:41:28:e4:bf:c5:3f:69:9d:
9b:a2:c0:8f:83:df:a0:ea:36:c0:a0:5c:7a:56:4d:
c1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:29:CB:10:BD:15:6D:02:0D:DD:00:D4:76:E4:73:58:15:67:4E:02
X509v3 Authority Key Identifier:
keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:d7:da:7e:cd:6e:af:5c:45:6e:1d:67:4a:fc:f4:a6:1c:01:
f1:9a:eb:f9:9b:f9:b4:a5:e4:48:fe:a2:79:da:ca:07:45:5c:
1e:91:3e:f4:68:42:a9:36:7e:5b:ee:a4:97:df:68:fc:a2:1a:
d0:df:3c:e3:4d:8c:9a:22:d7:f7:8d:0f:76:d5:99:32:1a:fa:
48:03:75:b4:e2:76:d3:9c:42:d9:de:f5:1b:a0:76:d9:41:5a:
86:70:fe:e0:c2:0d:31:9a:77:8a:f1:58:02:ff:14:73:7e:44:
e5:a8:5c:d3:2d:3d:e0:b7:6b:58:a5:90:57:fd:c3:31:48:94:
c3:13:17:a7:0e:e2:2e:e1:c0:73:e6:25:49:64:05:94:76:19:
7b:eb:8a:e6:55:4e:32:f0:a7:21:38:80:e3:74:cc:f8:f2:29:
50:d4:6a:6b:3e:8c:7a:44:b9:fb:41:62:9d:c7:47:75:96:79:
a0:92:a1:91:de:b8:20:7c:39:72:fb:0b:cb:7f:46:71:6a:a8:
44:cc:54:bf:ad:c8:2f:36:7c:c5:4a:c9:78:3f:79:c2:6a:7a:
27:76:3d:fa:95:1b:78:f9:da:1f:36:8d:8d:0d:74:35:32:b7:
97:ab:a7:cc:8d:75:b3:3f:14:da:44:9d:c1:5b:b4:56:1d:d6:
81:b1:d6:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4V6zDv0/Uu4Yx2dmxHWtGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMzI5Y2IzYWJlNGU5NDBjZmM2MmEyMGUyYTZlMmMyOGZj
MjgzMjkwHhcNMjUwNjI4MjEwMDQyWhcNMjUwNjI5MjEwMDQyWjAzMTEwLwYDVQQD
Eyg2MzI5Y2IxMGJkMTU2ZDAyMGRkZDAwZDQ3NmU0NzM1ODE1Njc0ZTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfLVKn/mH/e150KK2DWrgvwO+o+M
X+tjKIj9tZHCZHXGz20GoscAwni+6K2tvTWoLV6YwhDpxbj7VQT7ORj5yKnKeWjk
h28y6K+iTT9V+lcd5y5xUZsowOQsQXNpfxaQF+vhpuWdN9MmWXbGS9yxyWWCOj6+
ecK72OuvxIJPxobxQ0uoCx+ojm3XWlrhvgL1DvfHpeAATDVeXDzITsvuHcxkwf7Q
2X3liJizGmbf2HAHP15Rzo6w/sgpbVzaSnMyFSfRv7rjH+xdc7jc8dAOOIRPEIZV
UpKmzihljIOF4OPl1zaImllZQSjkv8U/aZ2bosCPg9+g6jbAoFx6Vk3BJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMpyxC9FW0CDd0A1Hbkc1gVZ04CMB8GA1UdIwQY
MBaAFCMynLOr5OlAz8YqIOKm4sKPwoMpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXpLY3M2dms2VURQeGlvZzRxYml3b19DZ3lrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kZDM5NGItNmJjNC00ZTQ3LWIwMTIt
NTE4ZjJjOGY4NDZiLzEvSXpLY3M2dms2VURQeGlvZzRxYml3b19DZ3lrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9kZDM5NGItNmJjNC00ZTQ3LWIwMTItNTE4ZjJjOGY4NDZi
LzEvSXpLY3M2dms2VURQeGlvZzRxYml3b19DZ3lrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyNfafs1u
r1xFbh1nSvz0phwB8Zrr+Zv5tKXkSP6iedrKB0VcHpE+9GhCqTZ+W+6kl99o/KIa
0N88402MmiLX940PdtWZMhr6SAN1tOJ205xC2d71G6B22UFahnD+4MINMZp3ivFY
Av8Uc35E5ahc0y094LdrWKWQV/3DMUiUwxMXpw7iLuHAc+YlSWQFlHYZe+uK5lVO
MvCnITiA43TM+PIpUNRqaz6MekS5+0FincdHdZZ5oJKhkd64IHw5cvsLy39GcWqo
RMxUv63ILzZ8xUrJeD95wmp6J3Y9+pUbePnaHzaNjQ10NTK3l6unzI11sz8U2kSd
wVu0Vh3WgbHWrQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:30 2025 by rpki-client