Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
File: I50GV-qu8Ja-yUsR9NadDT7QTOY.mft (raw, json)
Hash identifier: V9YjVoC/fcza4oAcWnk+hTssv7N1HWYVfVMDOfeOMDk=
Subject key identifier: A2:BB:C4:38:76:68:0F:55:A8:3B:22:F3:D0:79:D1:E7:2C:B4:19:47
Authority key identifier: 23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
Certificate issuer: /CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Certificate serial: 0197B745B67539B1F96C9B855FD33D09EF11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
Manifest number: 12FA
Signing time: Sat 28 Jun 2025 16:01:28 +0000
Manifest this update: Sat 28 Jun 2025 16:01:28 +0000
Manifest next update: Sun 29 Jun 2025 16:01:28 +0000
Files and hashes: 1: FciKzBJuJmXxMHbhg7vtxvJaFpg.roa (hash: LJXoq9acQBnheF7twxm9ozyA/I0gm87jr1W8PivL0eA=)
2: I50GV-qu8Ja-yUsR9NadDT7QTOY.crl (hash: ZbbxACccZzZwzELotMZLoEg2o5ZvFP35CjVNxiR0zGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b6:75:39:b1:f9:6c:9b:85:5f:d3:3d:09:ef:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Validity
Not Before: Jun 28 16:01:28 2025 GMT
Not After : Jun 29 16:01:28 2025 GMT
Subject: CN=a2bbc43876680f55a83b22f3d079d1e72cb41947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c7:fe:6a:bb:4f:00:d4:3f:c4:9a:e4:8a:6a:
29:98:8e:8d:62:10:76:ad:93:f7:f1:60:c1:b8:2d:
13:9b:52:60:ee:b5:a4:d9:56:55:02:2a:8c:8f:6a:
ee:86:81:0e:70:6c:5b:e7:fb:ea:0b:78:79:37:14:
98:47:e1:54:5e:11:05:df:fe:5e:2b:cd:c6:1e:2b:
f4:d7:c9:ac:33:36:41:78:a1:8d:88:66:2b:22:94:
49:69:e1:d9:a1:00:18:31:7b:b5:3b:58:f0:4b:45:
25:f4:e4:8f:16:48:0c:f9:f8:8f:52:29:0b:f1:fb:
2f:9e:d6:fc:a1:5f:83:f8:b3:0c:ef:81:65:76:13:
e8:26:36:98:e4:f1:1a:49:3f:aa:59:6d:8e:f7:d9:
da:e5:8f:09:4a:2f:f0:80:0e:ba:ab:38:f9:be:9b:
a9:5c:92:78:4e:2c:ab:af:f7:7c:8e:82:4e:4b:6a:
f6:36:d1:fd:3d:9d:83:e1:e3:33:9d:c5:9c:24:fd:
c4:07:5b:5d:dd:3d:27:d1:1f:97:e7:ed:3c:12:0e:
67:c8:46:f2:3a:8f:5f:9a:ca:ed:1e:71:9c:e9:1c:
82:f8:3d:04:db:44:38:41:d4:6a:93:e9:c6:63:61:
d1:aa:95:4a:28:c2:be:fd:59:55:82:20:20:0c:06:
5b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BB:C4:38:76:68:0F:55:A8:3B:22:F3:D0:79:D1:E7:2C:B4:19:47
X509v3 Authority Key Identifier:
keyid:23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0b:dc:c1:bb:a0:bb:d1:f7:89:c0:05:2b:a2:2b:6c:7c:94:
40:08:82:7d:bd:75:c0:55:73:bf:66:9f:65:bb:e2:a2:58:fa:
93:71:96:a1:ce:07:f6:e4:66:11:8c:57:fe:3a:41:2a:23:0d:
5b:80:de:2c:e8:7a:d8:8b:8a:dd:00:34:ae:c2:91:dc:fd:be:
3d:4d:66:74:20:8e:8e:75:2a:ad:d1:d0:2a:85:02:e1:14:a9:
6c:42:7e:a1:d4:8a:f0:86:d3:e6:86:19:fc:ff:b1:21:e4:d7:
44:24:cc:30:c6:45:b8:90:e4:58:ac:a0:88:65:83:3e:8b:87:
4f:21:b4:e4:71:35:f3:92:8b:ee:dc:c1:a1:5a:ad:dc:1b:6a:
36:ce:1e:bf:2f:2c:91:39:9a:09:2e:c9:7f:91:ab:72:eb:b3:
14:e0:26:72:10:af:e5:28:0d:6f:db:9f:c3:0f:ba:92:63:6a:
25:f3:d6:bc:b2:6b:b9:bd:27:00:f7:10:50:61:80:66:6d:45:
56:f0:5b:40:66:be:df:dc:a3:36:04:2e:a1:39:99:1a:88:13:
ee:a0:e2:da:4a:ee:95:a0:32:8b:f2:40:2f:54:9d:ba:04:4f:
94:e7:f3:c5:9d:48:47:b9:74:d5:79:ba:71:1a:c9:df:49:6e:
e1:dc:22:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:05 2025 by rpki-client