Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
File: I0AYtVE7d50uHjrBqGpZO92XTKc.mft (raw, json)
Hash identifier: Jvs3VyULGQuRCQbybEQTOdG/lmvxVwQ9+0hIO157uqI=
Subject key identifier: 9E:3A:F9:35:6A:FE:16:C9:E5:5F:C2:E8:F9:F5:36:A2:E6:21:7D:62
Authority key identifier: 23:40:18:B5:51:3B:77:9D:2E:1E:3A:C1:A8:6A:59:3B:DD:97:4C:A7
Certificate issuer: /CN=234018b5513b779d2e1e3ac1a86a593bdd974ca7
Certificate serial: 0197B8FCFF57FBDA6156CC5510F928DCB445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0AYtVE7d50uHjrBqGpZO92XTKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
Manifest number: 0197
Signing time: Sun 29 Jun 2025 00:01:17 +0000
Manifest this update: Sun 29 Jun 2025 00:01:17 +0000
Manifest next update: Mon 30 Jun 2025 00:01:17 +0000
Files and hashes: 1: I0AYtVE7d50uHjrBqGpZO92XTKc.crl (hash: 7fq9bGW5J7QEeROvldRCYUGxE/+oMZP0is4vx8e/lQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0AYtVE7d50uHjrBqGpZO92XTKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:ff:57:fb:da:61:56:cc:55:10:f9:28:dc:b4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234018b5513b779d2e1e3ac1a86a593bdd974ca7
Validity
Not Before: Jun 29 00:01:17 2025 GMT
Not After : Jun 30 00:01:17 2025 GMT
Subject: CN=9e3af9356afe16c9e55fc2e8f9f536a2e6217d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d2:ad:e3:b7:75:f8:ce:8e:bc:2b:c3:3c:cd:
09:a1:e8:41:56:53:76:76:12:40:16:86:72:5e:dd:
c8:02:18:93:8c:0b:f8:18:33:96:6d:03:4b:eb:c2:
09:fd:35:e5:4a:30:30:32:88:d1:c8:f3:fe:89:68:
b1:bd:2d:16:95:de:ae:49:74:c2:f1:43:5f:ce:6e:
39:b2:57:b5:2f:a5:ab:e1:55:97:64:6c:ff:c6:04:
40:ec:9b:bf:37:e1:ae:32:25:34:cd:11:50:0b:2c:
ee:28:61:34:59:a8:17:f1:93:fa:b8:12:f8:54:82:
80:fc:e9:c1:1e:56:24:47:62:4c:82:70:76:b5:80:
a2:6d:3a:1b:44:fe:fc:f7:62:e1:bd:3f:82:1e:5a:
69:73:92:cf:00:5c:bf:24:50:19:cb:54:40:a9:0e:
ae:a1:06:85:b8:9a:93:94:6f:7b:6c:da:1a:a4:10:
ec:2d:e4:4b:55:36:17:48:de:cd:19:7f:23:81:7b:
c4:34:61:58:da:57:cc:e4:5e:3a:36:06:75:28:13:
0d:9c:1f:dc:e9:0d:14:b8:c7:c5:f1:fe:c0:5b:74:
1b:eb:3e:49:d6:dd:4a:3e:64:58:4e:0f:30:b8:37:
08:c4:0f:d0:c7:1b:46:2e:cf:2e:16:e8:e3:75:e9:
fc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3A:F9:35:6A:FE:16:C9:E5:5F:C2:E8:F9:F5:36:A2:E6:21:7D:62
X509v3 Authority Key Identifier:
keyid:23:40:18:B5:51:3B:77:9D:2E:1E:3A:C1:A8:6A:59:3B:DD:97:4C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0AYtVE7d50uHjrBqGpZO92XTKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b18080-e3c9-4114-a174-c3d6c7c8ba8a/1/I0AYtVE7d50uHjrBqGpZO92XTKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:32:be:83:7a:3a:59:a4:89:aa:24:65:13:0b:4d:55:2a:d3:
b2:a9:cb:6e:36:e7:93:16:9c:0e:81:d8:dd:49:f6:aa:22:39:
cb:a6:04:98:55:ad:11:1e:96:b6:10:13:56:4b:90:dd:9f:6c:
d6:0d:a3:68:e5:4c:79:cf:ef:fd:ff:3c:0c:e1:a7:7d:87:a0:
f1:16:c8:fe:2b:f8:36:71:48:ff:98:c4:46:ac:eb:4f:d8:64:
a7:30:ef:a1:91:34:8d:8a:a6:2f:ad:a2:1e:11:54:63:f3:86:
ac:f9:3b:84:43:98:be:84:74:0d:db:ce:10:05:84:38:9b:a4:
33:af:73:77:da:76:12:d1:1e:e1:1f:06:3c:f5:7c:8f:52:51:
4f:30:89:97:1c:d5:95:32:76:29:6b:76:df:2a:a7:c7:6b:cb:
21:3c:05:72:63:ec:69:ad:f3:ca:81:fb:df:09:f8:38:e6:a7:
81:fb:dd:36:3f:5c:55:e0:26:28:ca:ce:aa:a7:73:e5:51:e3:
f8:e4:4e:69:e2:ee:0f:b9:16:02:4d:81:0c:1a:e1:2a:4a:c7:
7e:b9:a6:be:c1:fa:f9:b3:bb:30:58:1e:c1:74:d8:71:a8:7b:
da:db:0e:fd:33:a6:d8:9f:4d:73:0a:ba:ad:12:66:91:fc:83:
47:47:a8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:41:17 2025 by rpki-client