Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft
File: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft (raw, json)
Hash identifier: tFg+KzFEUyrp40v2AcdczR5IPbQUq3ZWu+QNQ+91I04=
Subject key identifier: BD:0D:99:8B:2A:84:AF:94:33:21:40:7C:8B:F6:63:16:B0:C8:58:3F
Authority key identifier: 23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62
Certificate issuer: /CN=23259da3b1b38ca0939f490fb9043fcd89cfd062
Certificate serial: 0197B6A0C91594CC6F6F7BBB29870D8238FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 13:01:19 +0000
Manifest this update: Sat 28 Jun 2025 13:01:19 +0000
Manifest next update: Sun 29 Jun 2025 13:01:19 +0000
Files and hashes: 1: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl (hash: 4GVK5oIZ6+Bo+LKRsy+9xIRRdLqI/HHnkVDNNUwyLtM=)
2: JqGjYzJUHlyPRNKT7Gdae1GdJUA.roa (hash: /ZlOeq2y9fIyqYcQI5TRRc+qHPMMjEQDsJbQfMP47Os=)
3: KP1-R8Ozo5sN8i5g7eaE07K0eTQ.roa (hash: mLvAtndHxWdPvRVZIiOq/nwf/VdytfBFv0z3meNar9k=)
4: W08HMn4p6kVqze5MDixmPqgVV3Q.roa (hash: jlOVPZJCuEAwn3iEzzJNLFkpo/PRQpHf+dW9CA2qsug=)
5: ZaM9jNyw62egtMMXYnGxszrNY3k.roa (hash: IjXCT+wQnlaMHMU5neUWgppwJ+IMB7wimw7ZMxVicdg=)
6: cf3WHfeWDYu7TWnELnXzycteCaY.roa (hash: TcxuwVKWwTiShtI0Unrv/gZ/YwHGK8T1H3ocBzBxMZk=)
7: fuo8dYdaswIRyEIz4oPsApWqGJc.roa (hash: TgHuzsK6LNwJZxHjJiXaEYIfR/pJeI5Px7YOwniHSmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:c9:15:94:cc:6f:6f:7b:bb:29:87:0d:82:38:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23259da3b1b38ca0939f490fb9043fcd89cfd062
Validity
Not Before: Jun 28 13:01:19 2025 GMT
Not After : Jun 29 13:01:19 2025 GMT
Subject: CN=bd0d998b2a84af943321407c8bf66316b0c8583f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f8:c4:01:36:c8:4c:55:4d:a2:e2:e8:c3:91:
f5:fc:30:94:17:17:9d:7a:fb:0c:53:b8:41:2a:2b:
ea:71:44:2c:fd:69:48:01:e5:f0:6c:4c:89:3f:6c:
b2:f7:c0:46:1d:f4:66:37:e4:41:d0:bc:34:d1:28:
4c:33:3e:ce:ae:f5:c4:ce:12:97:f9:2a:b4:d8:2e:
86:f2:c7:d2:36:15:ae:03:ad:51:e0:4b:98:69:a3:
e9:6f:a0:b7:92:93:b5:22:88:b0:95:32:df:1a:d4:
37:84:0d:0a:57:ae:8e:dc:9b:c7:25:76:37:0c:ba:
54:0a:a2:78:1d:94:72:26:38:f4:d6:a8:44:b7:b0:
e6:e6:88:58:83:2d:b8:24:fc:dd:c7:9b:2e:1e:49:
08:31:63:c9:a3:01:84:3e:28:15:79:3f:f2:3f:13:
ba:17:f4:86:e6:02:e8:65:85:ba:29:a0:67:46:cb:
69:ed:db:16:1c:32:3a:56:5d:79:50:5f:b8:2b:6f:
98:20:82:34:68:40:5e:bb:1c:19:03:d4:48:f2:44:
85:0c:ea:a5:86:4a:f3:ad:9c:21:f9:b8:96:6c:06:
6a:d4:d2:14:6b:9b:be:53:81:3e:90:30:3d:0e:78:
93:81:be:96:61:a8:85:7f:97:fa:ec:b2:a5:29:2b:
d8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0D:99:8B:2A:84:AF:94:33:21:40:7C:8B:F6:63:16:B0:C8:58:3F
X509v3 Authority Key Identifier:
keyid:23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:96:39:ec:70:4b:d7:cd:ac:b5:1d:ce:a2:a8:2e:2c:6f:75:
dc:5b:86:11:63:74:e6:fb:bb:52:e4:32:a0:a1:68:35:6f:74:
35:72:3b:62:28:31:6b:fb:ee:3c:1e:1d:24:b2:f0:ef:fc:27:
7f:9d:97:27:98:34:af:41:95:c9:3b:57:38:3e:4c:83:d0:b8:
2c:52:76:0d:10:bb:b9:45:23:16:1c:94:f1:a3:5d:9b:83:a1:
62:13:04:5e:82:7a:d6:97:85:7d:7b:59:4d:f7:ce:98:24:38:
09:ab:a0:b9:d7:de:5a:68:d8:05:6e:c3:bc:2a:5a:74:fc:bd:
27:1e:13:c6:0f:01:d1:a2:fa:4c:a4:c7:ca:47:9a:f0:b3:aa:
a7:5e:22:49:c4:37:57:bd:81:4e:7c:9e:43:67:b5:f5:f1:58:
03:7b:bb:a2:56:be:80:40:34:58:e4:cf:12:1c:cd:b1:4b:9a:
7d:2d:51:af:6a:95:8d:ea:12:9d:cf:b4:95:88:4b:55:87:97:
31:25:b9:80:14:53:87:dc:db:c3:c6:16:fb:a9:b9:8b:66:d2:
95:5f:7b:1e:1a:5f:f2:67:05:b5:8d:c3:f6:b2:85:30:87:13:
ab:3e:98:e0:1e:b9:ee:05:fe:e8:e6:9a:56:68:21:6b:0b:cd:
47:e1:c4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:39:05 2025 by rpki-client