Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
File: Iv9bz3ObBzL7G823F-xxf28csOI.mft (raw, json)
Hash identifier: 83yt1yPEd/L3fEa1BkWL0K/mgc5C72ok9twtMBRq7TQ=
Subject key identifier: 9C:1F:6F:1D:4C:05:97:6C:D3:D1:F1:AA:42:17:41:77:E6:3C:0D:39
Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
Certificate issuer: /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Certificate serial: 0197B5FC12039989913852ABE9E140A5A51F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
Manifest number: 13B5
Signing time: Sat 28 Jun 2025 10:01:25 +0000
Manifest this update: Sat 28 Jun 2025 10:01:25 +0000
Manifest next update: Sun 29 Jun 2025 10:01:25 +0000
Files and hashes: 1: Dbw0YKXPol3saHGjQJtz9o_YK0E.roa (hash: SxzLeQKHeNdqB63pBhgkGBN/CeBMjvrLZxTWY/WlAKg=)
2: Iv9bz3ObBzL7G823F-xxf28csOI.crl (hash: neRx4SegeKZZ1YzXFJ/F38ULv8nXuFCA41t7KEJUHQ4=)
3: UAWIgik98ovvIJWv4yjj5lBqzOo.roa (hash: jrAxhhr23FpKpzjy0AGBEFjJeK035eZKHkroGqfSgNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:12:03:99:89:91:38:52:ab:e9:e1:40:a5:a5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Validity
Not Before: Jun 28 10:01:25 2025 GMT
Not After : Jun 29 10:01:25 2025 GMT
Subject: CN=9c1f6f1d4c05976cd3d1f1aa42174177e63c0d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:56:ff:77:e2:c2:bc:e8:c5:7c:11:44:20:d4:
c8:2e:9d:6f:b9:cd:64:0d:90:03:17:14:d2:b2:1b:
1d:20:f2:b8:3c:aa:4b:5f:55:52:92:29:54:e4:c2:
5a:4b:73:9b:e4:7e:d0:a5:84:2c:d1:a3:1c:44:64:
d6:6d:03:11:ed:9f:6e:bd:b0:4d:4c:97:4f:11:77:
bf:31:be:e7:e3:80:2e:d3:c8:54:10:08:3b:55:76:
79:96:47:5a:3f:5e:43:31:55:0e:9c:08:f3:29:db:
98:65:ae:b9:7c:ad:2e:0a:8a:b6:ed:da:ac:76:09:
f1:e0:81:59:74:23:c7:91:2f:ac:43:bb:61:ba:82:
d3:80:27:ba:24:b5:d5:4d:0c:81:f7:07:da:c3:d7:
bf:81:e8:9b:9f:89:d8:7c:ca:47:ff:9b:e7:2d:08:
7e:64:72:37:05:0c:c9:51:7d:90:77:0e:e0:f2:e0:
97:59:f9:36:37:06:b9:7f:e8:fe:72:73:5a:a4:c1:
8c:88:e4:53:45:23:cb:ce:e6:b9:76:9e:6b:4c:62:
b3:ec:c7:60:71:e9:92:41:e3:d2:3f:43:f0:59:0f:
64:2c:dc:68:c3:f0:5e:fe:5f:83:6a:98:6c:8b:58:
1f:f0:29:a6:dc:db:45:00:5e:03:2f:47:98:22:a1:
1e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1F:6F:1D:4C:05:97:6C:D3:D1:F1:AA:42:17:41:77:E6:3C:0D:39
X509v3 Authority Key Identifier:
keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:af:a2:15:02:c8:ff:5a:89:08:c9:b7:f0:17:48:19:9f:58:
2e:5f:5c:3d:cb:4f:68:af:cd:9b:63:d4:b6:c2:70:10:b2:e8:
af:cf:46:fc:1c:34:54:34:bb:e0:ba:52:a8:3b:06:56:0e:d5:
d8:ad:1f:17:14:e3:ed:2a:c3:e0:e2:b4:00:b0:67:a7:46:a4:
9b:9b:a0:b8:be:a3:fc:07:2b:05:5f:da:bb:65:fc:31:50:a6:
ad:3d:cc:72:4e:25:fe:75:b8:bd:99:52:4a:d4:2f:f3:33:ad:
53:f7:46:c2:58:d5:bb:bd:a3:0b:a8:a2:88:eb:92:43:84:31:
d9:10:7e:fe:ef:ca:80:32:3a:87:6d:45:40:c5:19:34:c9:2d:
3b:96:75:27:0f:75:a3:ff:3c:63:ed:0d:63:71:09:32:2d:63:
3e:1b:5e:b0:4f:85:dd:11:9e:0c:fc:0d:c4:3f:9c:f9:94:2d:
e0:f7:6b:3a:13:7d:9c:72:0b:cd:b3:2c:66:08:da:87:4d:11:
51:e8:b1:4a:9a:a5:5e:67:c7:b2:59:e3:81:e9:36:fd:05:a3:
23:a5:af:70:18:80:0d:ea:70:dd:b2:9d:1a:39:b8:a2:df:7b:
50:2d:f2:0b:65:cc:b3:41:c6:7d:64:48:a9:ec:4b:e6:0f:d7:
82:9b:4e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:45 2025 by rpki-client