Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
File: I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft (raw, json)
Hash identifier: 8zvHovDCt/nLPzSWMXLPPKOhpq6VezIp2c32frKtQTs=
Subject key identifier: 56:C6:E5:16:34:54:41:21:51:8B:90:5A:4F:60:AC:84:EE:68:D3:EB
Authority key identifier: 23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
Certificate issuer: /CN=238857660dc7fa60846f765b94cb69576255adb6
Certificate serial: 0197B8FD58855C013ED136D5E5D26B677E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
Manifest number: 15BA
Signing time: Sun 29 Jun 2025 00:01:40 +0000
Manifest this update: Sun 29 Jun 2025 00:01:40 +0000
Manifest next update: Mon 30 Jun 2025 00:01:40 +0000
Files and hashes: 1: I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl (hash: E2j5BVYYS+S/FF001n5PT9/NpBuE5uD41+gD1W4K/Ds=)
2: XHfhEGwfsHA5Cy6rVzKyCX0VS7I.roa (hash: r0CY6B9tn8PTb3kJeN+vQ/cBCfQUrTHL37aoDlJepRA=)
3: tcPEvHuX8bqS2YKyM4C5K4tHwxk.roa (hash: rKNoYxngd5L4bRt06ua2/XaA1SqXHMSPI/cKc0JvWoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:58:85:5c:01:3e:d1:36:d5:e5:d2:6b:67:7e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238857660dc7fa60846f765b94cb69576255adb6
Validity
Not Before: Jun 29 00:01:40 2025 GMT
Not After : Jun 30 00:01:40 2025 GMT
Subject: CN=56c6e51634544121518b905a4f60ac84ee68d3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:27:6b:2f:88:ab:dd:b2:b9:d5:d5:a1:07:75:
d9:65:c3:f4:a6:8b:4f:57:65:f8:df:97:c6:bb:81:
fc:f5:2b:a7:1a:fc:62:a4:f3:31:ad:d9:10:46:a6:
db:17:89:9e:36:02:ca:7a:b4:f1:99:14:f4:6a:0d:
c8:bb:5d:86:98:f0:73:70:18:3a:1b:d1:bd:f1:47:
2b:7c:c7:2d:b1:07:c5:04:a5:ed:eb:f9:f0:08:8f:
4e:12:08:24:54:6e:ac:2a:13:d4:a8:fc:3b:37:52:
01:31:49:cb:d8:d6:60:92:10:a4:3f:8c:6b:7d:a1:
fc:2f:45:ee:87:3e:e0:61:58:f7:2f:dc:d7:55:e6:
8c:24:16:e2:66:5d:ab:54:ad:0b:2a:ff:0c:49:00:
9c:aa:4b:b5:8c:e6:83:3f:e0:23:e9:22:89:f9:2c:
f8:75:b6:02:20:c7:fa:94:39:d2:f0:c1:f2:94:53:
63:6b:bb:da:65:64:ef:4d:56:b7:a0:9b:0b:3c:6f:
07:e3:99:ea:ff:c0:ae:08:7f:9b:c6:be:a3:33:5f:
23:03:f3:ce:4a:08:a0:d9:9f:e5:b8:bc:35:82:98:
1a:3e:f6:b2:a1:91:61:45:8c:b7:7a:52:b5:27:3a:
2d:00:b2:01:9d:75:e7:70:62:b3:d2:de:94:c9:d3:
57:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C6:E5:16:34:54:41:21:51:8B:90:5A:4F:60:AC:84:EE:68:D3:EB
X509v3 Authority Key Identifier:
keyid:23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:12:64:a8:60:69:35:c4:5b:55:d7:0c:b9:89:f3:24:d1:b6:
a4:4c:ca:1c:09:7a:25:50:e3:dc:fa:0c:e4:12:da:ba:76:43:
70:dc:20:71:15:76:c0:19:89:90:6c:c7:0b:b4:6e:fb:6b:e2:
72:39:a5:83:87:09:1e:e9:f5:e1:99:60:f8:10:d4:e6:06:a2:
bd:dd:ce:7d:7d:59:b5:9d:a0:b4:ad:19:da:d5:b5:ce:ee:1d:
9f:cb:1c:de:23:49:89:b1:42:dc:3a:ee:7e:91:40:2b:3a:2b:
64:33:c2:b6:84:c3:0d:b1:64:61:31:f9:64:9e:ca:00:90:a8:
52:0d:37:23:67:0e:dc:28:e6:29:1f:c0:8c:8d:6d:1c:b3:d0:
8e:f5:81:2a:e4:34:3c:3e:c4:8e:f3:9f:9a:8d:ec:87:3c:1d:
83:f0:7c:bf:71:64:1f:76:df:10:ee:09:ac:72:a3:a2:86:b8:
09:6b:f4:e8:9e:e2:2a:bb:f0:31:6c:db:12:ef:90:10:1e:bd:
d2:6d:3f:70:88:45:8f:ee:32:f8:9b:bd:5d:dc:b3:a6:24:e4:
89:a1:62:94:a4:14:7d:dc:c2:cb:72:50:fa:ba:76:48:de:ec:
01:0f:a3:b5:13:1e:db:f3:5d:9f:96:fc:21:ad:2f:55:38:be:
82:86:ee:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:22:04 2025 by rpki-client