Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
File: ITUYZbdn3XucIjFL_IBVvVfbAGU.mft (raw, json)
Hash identifier: THFChiFfBodYgqL/7l/n+9P99CGj1jzPlE37itBz97w=
Subject key identifier: 94:85:12:1E:33:26:72:15:30:84:C6:38:69:38:D1:FA:E7:74:27:6F
Authority key identifier: 21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
Certificate issuer: /CN=21351865b767dd7b9c22314bfc8055bd57db0065
Certificate serial: 0197B77C0214003877FB72BA6C3BABDFDC64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
Manifest number: 15BE
Signing time: Sat 28 Jun 2025 17:00:46 +0000
Manifest this update: Sat 28 Jun 2025 17:00:46 +0000
Manifest next update: Sun 29 Jun 2025 17:00:46 +0000
Files and hashes: 1: 2xSdynJrR2lrRXow3DheycMEzkg.roa (hash: nooA7vWCWimGNoVynR8X8CPFNFkK8X4dvNkM9491OGY=)
2: 4ivYTJwHbxlEFGw6yHQUPiIrnLk.roa (hash: c/5BSogehebsaJujE8GYhFFEuezzSIs2u3N/ALM/jkY=)
3: ITUYZbdn3XucIjFL_IBVvVfbAGU.crl (hash: IYW5KwME6zP/3bQLuqPejK8jvxIPUh5ujZkUTBNVTMM=)
4: JFVsgFbYrjh5C77tg48FZqxd4J4.roa (hash: ff5cSciKjRToO8iXbplHVL2WQA8ta+cT3q72ycgeqdw=)
5: cFyLz0464YCDv1_wlpt751wWjv0.roa (hash: 6oL3kHvs8+fXiSDYlf2hI6gNwQZ8WHh03nzI53rd4Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:02:14:00:38:77:fb:72:ba:6c:3b:ab:df:dc:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21351865b767dd7b9c22314bfc8055bd57db0065
Validity
Not Before: Jun 28 17:00:46 2025 GMT
Not After : Jun 29 17:00:46 2025 GMT
Subject: CN=9485121e332672153084c6386938d1fae774276f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a9:f0:b6:87:d7:3a:76:01:c3:73:2e:47:a1:
68:a4:a3:75:5c:6c:90:4e:22:72:78:9d:df:3d:20:
4a:ff:7a:e9:29:1c:37:95:44:bf:64:93:cc:42:e6:
cc:2c:8d:db:a8:1a:07:2f:e7:16:fc:14:c3:4a:2c:
e7:44:0b:da:48:b0:81:b0:84:ce:2e:01:7b:5f:32:
19:46:42:2f:79:e9:65:17:dd:6d:98:43:ff:02:47:
23:84:28:7d:f4:37:8d:9f:9a:ca:8c:fb:97:fe:35:
33:4f:da:fa:13:91:3d:27:d7:34:fa:a9:59:46:a5:
ee:84:fd:2d:98:3d:51:cd:76:71:0a:71:aa:38:c0:
3e:fe:6c:9b:4d:85:de:30:ed:4e:a5:1c:5c:ca:ca:
a8:dd:d6:18:1d:8f:31:c6:71:1a:66:f7:0e:51:d8:
1e:ea:2d:40:5a:4a:5c:f6:ad:68:da:8b:70:78:bf:
ca:b2:e5:17:35:c4:25:dd:36:4d:88:ca:c7:ad:91:
59:7d:0e:aa:32:4e:5d:63:76:6f:1d:f7:86:23:62:
88:30:80:85:0e:64:8c:8c:58:f0:1b:c2:e2:26:7e:
b2:43:41:ca:fc:2d:93:4f:92:8c:8d:58:e0:86:a8:
b5:a8:62:97:f1:7d:43:5e:fd:d9:37:96:bd:57:48:
6b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:85:12:1E:33:26:72:15:30:84:C6:38:69:38:D1:FA:E7:74:27:6F
X509v3 Authority Key Identifier:
keyid:21:35:18:65:B7:67:DD:7B:9C:22:31:4B:FC:80:55:BD:57:DB:00:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITUYZbdn3XucIjFL_IBVvVfbAGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e52b07-f2a4-47c1-9460-1e4e0400844b/1/ITUYZbdn3XucIjFL_IBVvVfbAGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:70:22:55:45:9b:d9:22:b5:89:11:4f:75:15:98:22:f4:84:
f5:be:0a:48:c0:f9:79:ae:11:e2:cf:fb:46:77:9b:fa:66:b3:
8a:df:54:61:c6:e4:f5:dc:16:16:b3:8b:4a:c4:83:97:b1:f1:
e2:6a:50:5a:92:4c:ce:4f:7c:76:17:a7:1b:46:83:d9:3f:c7:
d1:2b:ba:ee:48:db:dc:d4:f4:87:51:1a:8c:50:e3:de:a3:b5:
ba:8f:47:6b:d3:21:77:62:c3:65:f4:58:a7:ff:98:28:cb:c7:
c2:36:f8:0e:6e:2f:f0:5d:73:d3:34:1a:de:9e:d5:47:e4:f9:
70:67:fd:10:72:23:aa:dd:9a:c8:d0:a4:66:54:85:6c:ed:5e:
ee:c6:46:e5:6d:e4:de:c6:69:67:14:ac:27:60:81:3e:5e:65:
52:f9:cc:70:2b:8b:4a:f5:07:79:62:d8:32:cf:56:d8:43:85:
87:7b:e5:82:f5:a0:79:06:c7:80:f8:37:6a:e5:78:ea:9a:4b:
c9:ff:01:fb:6b:b0:cb:2c:57:ce:9c:01:35:e2:10:2c:8f:b4:
f4:42:79:a2:5a:33:5a:10:54:97:71:58:8e:ee:9f:90:54:7b:
18:02:88:ab:4a:e6:d9:03:a9:49:bc:0f:9a:13:14:be:65:51:
fc:9a:19:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:56:56 2025 by rpki-client