Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
File: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft (raw, json)
Hash identifier: gB8m+Wqg9bnj/gVG1rV+0KO+ahrMAEod80rYkM05L4E=
Subject key identifier: ED:B0:66:1F:5E:69:39:08:E2:DC:2D:A4:28:F2:AC:EF:9C:03:7A:B9
Authority key identifier: 23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
Certificate issuer: /CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Certificate serial: 0197D4E217BB64E958FC99506F458A92D356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
Manifest number: 15C5
Signing time: Fri 04 Jul 2025 10:01:16 +0000
Manifest this update: Fri 04 Jul 2025 10:01:16 +0000
Manifest next update: Sat 05 Jul 2025 10:01:16 +0000
Files and hashes: 1: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl (hash: tovJitlUPcoLRnUyw34mguPl5GCwS7Xm3CWyHrXbCQk=)
2: Tp4BAItGYlXYP71Yl1jvkjdBkns.roa (hash: BUC2R1hzU4lwEDEogKCUTPLUZZa/Hz8pj9j9ce25uwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:e2:17:bb:64:e9:58:fc:99:50:6f:45:8a:92:d3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Validity
Not Before: Jul 4 10:01:16 2025 GMT
Not After : Jul 5 10:01:16 2025 GMT
Subject: CN=edb0661f5e693908e2dc2da428f2acef9c037ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:05:04:40:22:81:c3:4d:54:67:70:ae:5d:17:
cc:3b:7f:73:b4:cc:73:fa:3a:47:06:e3:ec:c7:6c:
51:f7:23:b8:00:10:8c:1b:10:d0:22:c3:75:46:eb:
45:95:27:d1:fd:5b:7c:6d:5d:f8:9f:76:69:01:51:
ca:22:40:b7:87:88:6b:7f:b7:5e:ec:f5:29:94:78:
d3:23:1c:87:16:b2:bd:a3:60:6d:42:e4:10:f7:06:
5a:0d:01:30:20:60:7f:26:59:50:e9:82:27:f1:24:
99:e9:bc:d7:9f:e3:92:1d:25:03:fc:56:ed:72:89:
39:e9:c4:c1:d2:4f:bc:e2:31:b1:52:86:e3:17:2e:
a5:6f:70:f2:d8:c1:94:08:34:70:ad:7c:88:3b:7c:
a1:11:78:ac:2c:66:03:f3:6a:4f:20:16:d2:1a:88:
1e:cf:bd:38:2f:25:48:69:85:c2:0d:ad:1b:08:e7:
0d:2e:77:ee:7c:4e:8a:56:05:f7:bf:9b:40:2d:3f:
d7:2b:f6:80:ce:59:d8:56:e6:d3:a8:ce:ce:2b:cf:
de:20:45:ad:66:d9:97:48:80:87:db:19:75:54:b8:
5b:46:7d:4a:32:83:cc:0c:b5:d2:0b:d5:73:6d:44:
e6:03:bf:f1:e5:81:43:d4:9a:35:a7:1a:af:98:f6:
19:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B0:66:1F:5E:69:39:08:E2:DC:2D:A4:28:F2:AC:EF:9C:03:7A:B9
X509v3 Authority Key Identifier:
keyid:23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b0:f3:4c:d4:dd:07:62:33:b4:42:e4:0d:0d:7b:56:82:da:
3b:a8:68:d9:55:6e:05:45:1e:b2:c7:74:4b:9a:ff:a4:55:9c:
16:cd:21:2f:a1:20:c6:fd:32:7f:e9:91:72:b1:5a:f8:74:3d:
dc:04:12:f0:57:cb:d7:0b:3b:b2:48:dc:f8:df:24:f2:89:6a:
dd:46:9d:08:6e:bf:28:8a:61:83:41:87:a0:5a:3d:fb:99:60:
a7:40:17:eb:5c:1a:cc:00:49:63:ad:8c:fb:fd:3b:f3:26:42:
86:75:06:d3:dd:eb:1f:df:79:c6:80:0c:f9:0b:70:27:38:a8:
c0:cc:d2:d9:8a:77:68:5f:89:89:e3:cb:d6:37:10:a7:32:00:
72:d6:9c:e8:ec:5b:c6:5b:24:2d:14:44:99:0b:8f:e5:ee:05:
a3:56:70:c7:57:71:ec:9d:bf:e1:ca:db:75:bd:5b:66:77:6f:
95:51:64:e5:5d:5f:09:eb:a3:71:13:4d:9f:2e:67:cb:f9:b1:
0e:a9:ef:aa:6c:2e:5d:e1:f1:73:97:fb:cf:7c:77:3f:8b:b5:
12:4d:2b:e4:b1:1c:1b:3e:ce:01:bd:a6:1a:65:e6:51:c7:16:
00:4b:df:6c:2f:62:61:e2:bd:24:ff:ec:c5:d6:21:2e:23:b3:
54:a2:c2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:51:42 2025 by rpki-client