Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
File: I2YsmpgK11hGUKuqNUW56pHT414.mft (raw, json)
Hash identifier: MY0GC4sLEBYNcpCmmM2+MM64bResjsJgm7VkN7VrIAc=
Subject key identifier: E7:5F:9D:D7:B3:C1:6F:87:81:FC:11:0C:49:25:F1:90:CA:1B:2B:54
Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
Certificate issuer: /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Certificate serial: 0197B8211CA6110AD63817150625CDF869D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 20:01:07 +0000
Manifest this update: Sat 28 Jun 2025 20:01:07 +0000
Manifest next update: Sun 29 Jun 2025 20:01:07 +0000
Files and hashes: 1: C3a8w3EA0yZf6c0xKrOAJTxFR18.roa (hash: LNpEHJw7nSfysWTvnjy399UaYBj+VVtM2qrA/gSp1Ss=)
2: I2YsmpgK11hGUKuqNUW56pHT414.crl (hash: jcdOv5V65qY1uARkHmhAuOvHTMAwT2SpJIU93mL2YJI=)
3: ODeZnWNl5WX6QJG7docdS6N0Lh0.roa (hash: /UPoSxqJgEbJd9A+t+po1hpjOf0Zwwvb5Sbep9uGpqM=)
4: sWPuB2_JaQ5IbfWV6TRjwzAEtmo.roa (hash: 2MwXerlOGNKciqFr23+HmocPZA4iLoGvibtwd5TaAxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:1c:a6:11:0a:d6:38:17:15:06:25:cd:f8:69:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Validity
Not Before: Jun 28 20:01:07 2025 GMT
Not After : Jun 29 20:01:07 2025 GMT
Subject: CN=e75f9dd7b3c16f8781fc110c4925f190ca1b2b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fe:fe:b6:12:32:67:fe:b6:fc:8d:af:d6:37:
c4:81:43:ef:a3:b1:31:42:ab:c0:f7:9b:ce:2d:47:
8a:cf:c6:91:3f:9f:27:f3:ba:f1:3a:1e:34:d2:fb:
b8:9d:28:fa:6e:d6:3d:9b:41:00:26:0f:dc:15:89:
62:d5:d8:2a:8c:87:e2:dd:e4:ca:9c:17:55:0a:b2:
f0:b4:03:49:0b:02:67:5f:19:68:88:88:35:b7:ed:
47:7d:d1:3b:52:46:e8:c7:73:87:15:97:3f:0b:9b:
bf:c5:d2:e4:4d:fa:f8:a2:3d:21:a9:ec:dc:0c:27:
d4:a0:3e:54:44:e1:96:b6:23:bb:21:3e:ef:59:6a:
68:3f:f6:c5:05:7a:01:99:29:d0:62:8d:b1:74:b7:
48:c0:31:a9:61:4d:17:51:9a:93:24:e7:a9:fd:dc:
a4:cd:fc:ff:a3:b7:8b:28:dd:a6:36:6f:6b:12:11:
6c:b4:58:52:27:03:f8:9b:ae:28:d2:c8:0a:93:4f:
bc:99:02:df:70:ef:8e:68:a1:23:27:15:a8:cc:1c:
01:1c:bb:ba:11:22:d4:10:16:3d:b3:31:e7:41:ef:
29:bc:21:46:07:d9:68:e8:60:8f:ce:56:a7:ff:01:
fd:48:ff:9e:9c:64:64:00:2c:b7:ac:fd:70:41:e3:
d0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5F:9D:D7:B3:C1:6F:87:81:FC:11:0C:49:25:F1:90:CA:1B:2B:54
X509v3 Authority Key Identifier:
keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e5:d0:ad:1d:66:20:96:75:7b:9f:c8:b1:8f:97:49:2d:f7:
bb:ea:e5:e6:4a:b9:5d:40:cb:31:de:75:28:1a:86:fb:c8:e8:
d0:ff:b0:a3:a2:ed:85:a1:12:73:f6:6a:91:98:32:fc:18:0c:
99:a8:ef:82:24:d8:56:6a:4c:a8:4f:e3:16:31:24:02:f9:9c:
02:11:a9:cb:8e:c8:f7:ce:f3:de:7b:a0:8c:a9:43:67:d5:fd:
5d:1b:6f:c3:0a:c1:3e:5a:dd:3c:8a:13:51:d2:77:d7:30:ef:
2b:9c:c5:41:74:e6:9b:b6:49:9a:b3:99:25:4d:d5:ef:02:29:
f4:99:15:40:ae:51:3e:99:7f:de:51:3f:9e:ae:a2:36:10:58:
cc:30:30:b3:e3:21:62:f2:42:18:c8:09:8c:ae:88:48:a5:4c:
b4:d6:20:f3:43:c2:db:12:a4:db:2c:85:94:77:a0:78:8f:b2:
64:c9:7e:90:57:20:f7:64:86:4b:b1:c7:37:a2:37:11:ea:f5:
91:98:3c:f1:ec:99:6c:45:04:5d:9e:d5:32:bc:b1:29:48:29:
04:c0:f9:91:2f:83:c3:a7:92:15:aa:25:1c:12:c4:d7:e5:41:
a2:68:71:e0:4e:03:0e:fe:89:c4:ed:6b:e5:f9:0e:67:b7:bf:
46:c9:ad:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:32:28 2025 by rpki-client