Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
File: IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft (raw, json)
Hash identifier: lmNcgj2aYNH/nLVEu6OfzlvUY5v0rH0rVzPgkiJBtvI=
Subject key identifier: 66:11:3F:89:14:5C:02:29:C0:DE:BB:91:8F:09:90:D9:92:30:4D:83
Authority key identifier: 23:16:2B:BF:02:46:CD:A2:28:0A:29:34:32:AE:6F:0B:D6:82:61:31
Certificate issuer: /CN=23162bbf0246cda2280a293432ae6f0bd6826131
Certificate serial: 0197B632C6D44872110B17E74A115ABA229F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
Manifest number: 0878
Signing time: Sat 28 Jun 2025 11:01:10 +0000
Manifest this update: Sat 28 Jun 2025 11:01:10 +0000
Manifest next update: Sun 29 Jun 2025 11:01:10 +0000
Files and hashes: 1: IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl (hash: iIAxk7xiByTJ0ayrpoRPtEvPtde+FN+zz+Qh0VaT9wM=)
2: _Ya9SawdjIbplJ2DDMKFuiItpWw.roa (hash: D98XW56rnTmNC9SFO3Lu162y4j8aooITvkhCs2VUjc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:c6:d4:48:72:11:0b:17:e7:4a:11:5a:ba:22:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23162bbf0246cda2280a293432ae6f0bd6826131
Validity
Not Before: Jun 28 11:01:10 2025 GMT
Not After : Jun 29 11:01:10 2025 GMT
Subject: CN=66113f89145c0229c0debb918f0990d992304d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8e:53:f9:64:6b:42:0d:6a:0b:d9:6b:ab:79:
1c:41:6d:2b:a6:f4:9b:0c:ba:a3:f5:9c:93:04:86:
32:d4:05:1e:cd:29:66:f7:be:50:e0:d1:00:0b:45:
50:f2:e5:32:fb:bc:28:a8:69:04:a5:60:50:dd:8d:
87:71:67:54:ee:01:f6:a7:5f:55:20:61:a7:ff:28:
d6:1b:58:01:fd:14:53:8f:ee:b0:47:6c:e1:e0:86:
c8:8b:95:3d:18:af:a0:d0:01:aa:35:7e:7b:dd:62:
1f:83:86:e2:78:8c:58:47:82:df:63:de:f0:e7:ef:
d8:f4:d1:7e:ac:c7:67:0d:97:cb:13:a3:9b:0e:2d:
de:d4:91:eb:e7:8f:8d:2f:55:f9:95:3f:ba:cb:6d:
b2:c6:a5:60:1a:b8:09:07:30:1a:57:ac:b3:14:96:
a7:d4:6b:60:02:6b:57:ca:8a:1a:2b:47:f1:ce:b7:
8f:a9:f9:8b:7d:fe:9f:ab:47:55:8c:8b:63:c9:27:
b1:07:77:4c:99:94:9b:44:d7:a8:2f:5a:4c:4c:bc:
82:25:89:fd:af:79:88:95:11:a6:46:6e:a2:e0:71:
8b:45:1c:07:b3:74:d5:b5:59:57:1c:b4:17:43:06:
35:d9:5a:f5:24:60:e0:40:f0:f9:68:aa:68:86:05:
3a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:11:3F:89:14:5C:02:29:C0:DE:BB:91:8F:09:90:D9:92:30:4D:83
X509v3 Authority Key Identifier:
keyid:23:16:2B:BF:02:46:CD:A2:28:0A:29:34:32:AE:6F:0B:D6:82:61:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:de:bd:95:94:82:50:11:d2:4f:67:df:89:7c:5a:fc:6c:52:
28:c0:40:3d:be:29:05:c7:fb:2b:d6:4a:05:c7:3e:ad:3b:35:
15:b3:81:49:8d:28:1a:ea:75:69:11:e1:f0:7d:bb:d3:44:c2:
9c:f7:9f:e1:51:c6:be:dc:78:ea:71:da:ab:47:82:40:d1:68:
09:61:e4:77:d8:28:30:20:5e:3a:3e:64:31:26:12:23:e0:51:
e7:8a:20:da:d9:e1:eb:b7:11:b1:f9:5f:29:11:eb:ce:c9:eb:
4e:13:5c:90:8c:95:18:f4:25:21:a7:46:d8:8e:42:f5:98:c6:
a8:55:56:cf:7f:6e:9a:ad:21:e3:54:43:f3:4f:fc:2a:38:5c:
b6:01:4c:cc:cf:17:07:be:8a:d8:31:32:95:80:40:51:5c:fe:
4e:2a:f3:b5:2c:18:df:f3:b0:e6:45:3a:93:a3:6d:45:0a:b8:
b9:2c:53:7e:bc:b8:15:c1:b1:c1:b5:03:08:b6:cc:b6:1c:41:
48:9b:3e:d3:03:d4:71:71:5b:0a:e5:f9:be:a5:7d:16:96:12:
f7:b1:34:f7:af:f0:ac:41:01:1d:e3:7c:93:2e:52:18:ab:19:
d2:67:4b:4b:c3:e7:e2:3f:98:cf:09:a9:3a:7b:e9:d9:fd:91:
b2:3c:cb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:18:21 2025 by rpki-client