Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
File: IjayuK-mA20sjoMXc2-qpy2AxPI.mft (raw, json)
Hash identifier: thkMQAK9eiWSQ4U+OmLG2+/DZ3jbqO0ANWXbaWpVo48=
Subject key identifier: 38:03:46:55:9C:8B:CC:F0:AF:9D:7D:6C:FD:CE:85:53:3A:F1:01:E8
Authority key identifier: 22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
Certificate issuer: /CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Certificate serial: 0197B5C4CE72F8720E91AE23850703F4E56C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 09:01:03 +0000
Manifest this update: Sat 28 Jun 2025 09:01:03 +0000
Manifest next update: Sun 29 Jun 2025 09:01:03 +0000
Files and hashes: 1: IjayuK-mA20sjoMXc2-qpy2AxPI.crl (hash: Q08s/y3EeKmJDoOoC8xPCfGnUl+KQPwoXP1FFQMNrLI=)
2: b2NrS79baNCWt7CG0X8Vv_sUMl8.roa (hash: Q1DMA/fao+0mavfnJZ9O2x4iQmJQmqUT84da1WRhc7E=)
3: spimqMKhC9PB1IAAapTxgzK4qRM.roa (hash: Uoz42yC9AHKp3g+1i18MCMkNcCBemOpgqQDvUXFhvIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:ce:72:f8:72:0e:91:ae:23:85:07:03:f4:e5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Validity
Not Before: Jun 28 09:01:03 2025 GMT
Not After : Jun 29 09:01:03 2025 GMT
Subject: CN=380346559c8bccf0af9d7d6cfdce85533af101e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:c7:2e:00:e5:41:7e:d4:25:b0:17:da:27:
66:73:48:30:5a:ec:21:6e:8d:1a:6c:17:c2:33:d7:
eb:dc:46:76:c5:82:c5:d0:f5:1c:a3:52:9b:7a:e6:
63:57:07:95:b2:c1:d8:d1:b0:b1:f1:84:30:44:23:
22:cb:4a:38:e2:91:9d:41:dd:e5:df:19:79:67:5e:
9c:69:fa:cd:a2:92:f5:65:86:2f:53:ef:45:af:a4:
fa:35:eb:b4:81:94:56:ca:d4:ec:2f:3e:16:fa:0f:
dd:87:8a:d3:f6:12:5c:09:95:a9:83:68:f8:08:8e:
75:e9:d4:f9:49:c6:6d:e2:7a:c5:8f:ad:73:ed:25:
8a:47:ff:9f:d6:22:db:cb:61:23:03:11:e2:10:ee:
12:d4:5e:97:a2:72:96:04:1d:b9:9c:ba:8d:ac:84:
b3:55:2a:58:44:ff:ed:86:e2:46:6c:9c:b5:dd:f4:
8d:aa:0c:76:4f:02:63:b6:4c:8e:d2:57:c3:4d:fa:
07:93:37:9d:fb:02:83:b4:51:82:d2:1d:bd:ae:84:
5c:dc:1f:96:cd:dd:bd:df:72:8f:a8:29:a3:28:2c:
5b:44:5e:a2:2f:25:7a:dd:f3:51:de:65:3f:77:cd:
5e:2f:bc:e2:76:98:4f:bb:7d:c3:be:48:1e:df:dd:
20:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:03:46:55:9C:8B:CC:F0:AF:9D:7D:6C:FD:CE:85:53:3A:F1:01:E8
X509v3 Authority Key Identifier:
keyid:22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f0:2c:0a:15:ce:76:c8:c3:16:8c:f1:2b:8d:16:9f:5e:31:
05:11:42:10:85:da:c4:d4:7e:15:1a:fb:e6:6d:b6:0b:cf:95:
b8:81:dc:cc:6e:b3:4a:23:1f:57:af:fd:eb:4b:9e:06:75:17:
51:ca:72:2d:be:9d:4a:fd:21:1a:72:ed:33:f5:f0:b5:12:26:
62:f7:c6:22:79:fe:24:20:88:7a:0b:20:26:4f:76:5c:b8:1b:
09:83:22:0b:a5:0e:71:42:34:dd:9a:75:bf:d0:9b:ba:a3:45:
d3:5e:6c:ce:11:b1:44:93:3c:3e:a2:29:fc:d8:69:19:a6:49:
db:47:ae:69:d5:7a:8e:b1:21:65:ca:2e:4b:74:de:d2:07:85:
46:f1:28:ed:5d:eb:4d:0d:31:f9:a9:57:f7:40:04:f4:a1:22:
05:53:6d:b2:43:64:68:4c:d7:95:22:1b:6b:a5:15:48:33:5d:
c5:93:da:6c:93:bd:72:70:9f:6e:f7:cb:33:c3:56:9a:9d:ff:
e3:a2:fd:38:a0:f7:3c:36:60:35:78:f6:68:95:11:93:e6:96:
80:ea:fc:55:64:49:a6:c3:30:26:1c:d3:2d:a1:ec:a8:9a:e1:
41:a0:16:b2:39:e9:0a:6c:06:77:7d:87:92:d7:50:5b:c7:38:
80:0e:38:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:47 2025 by rpki-client