Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
File: IC9MGjfpMTzdLup3UK4CjRjNWq4.mft (raw, json)
Hash identifier: jGENmxICJNs/z98k3q8Ehp17Q+kHTQRcwEp2l5B4aNk=
Subject key identifier: 00:D4:8E:10:F2:3A:66:FF:51:A6:E5:EC:93:88:6D:9B:A9:51:5B:AF
Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
Certificate issuer: /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Certificate serial: 0197B88FE8D1A22704CD5DF43C5E017248AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 22:02:08 +0000
Manifest this update: Sat 28 Jun 2025 22:02:08 +0000
Manifest next update: Sun 29 Jun 2025 22:02:08 +0000
Files and hashes: 1: IC9MGjfpMTzdLup3UK4CjRjNWq4.crl (hash: UyTL/7l7DDPN+dxqIeEqPkd2fRZrlvw8ajoZIqocMHc=)
2: IpCJGLN8WNm4ASMIxNnGZPuEtp4.roa (hash: nrrSBtVL1+LxQy+ccPed0KobnXytQAq3RiSJBLbBVIg=)
3: NfNd6pjqYOF2P-1csZDDcYiiQ28.roa (hash: iQWQfc6lD74rDEabgsCAVeBcixywrixRVP1KpMFN48o=)
4: PJBAejzPvEvF3ZoupzGWVEj1Og0.roa (hash: BFJtqcfNldj6Jrfn0Y0+mOBk6xT0n483gTjn5ogYiu8=)
5: aCUjIUK5OOSaycrn7_ksP5SjmPw.roa (hash: O1lgV6htb/Z9+mSwOsrU/V0sb4jZo6xRqeghVOqs13I=)
6: dSYYIsgqOPsPCWRb8n6bjaKooRw.roa (hash: Pvqr/OOkaqypvOSknbbOn2J0oHNnn5WhmVz2GaH3aXU=)
7: quZyu716dxS9mdBeGNCJZ1sGIZM.roa (hash: MPvLxa0c+riXjzyelLJV18hBBvFNCarL2WtEM/bk6Os=)
8: sx8Ag2ZkbPORNb5IpKGaIu2_Dqo.roa (hash: ZFFpoBJ2SvC/bg4XtAEwmcSclBY/i+xRWcdnLVCOAss=)
9: wUsJ3Y8bKRlwOlXMA6Qttd1Brps.roa (hash: zuU1UQuoYfDo2IQVUCO8dMMln85NIWVqpAhKwg/ayj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:e8:d1:a2:27:04:cd:5d:f4:3c:5e:01:72:48:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Validity
Not Before: Jun 28 22:02:08 2025 GMT
Not After : Jun 29 22:02:08 2025 GMT
Subject: CN=00d48e10f23a66ff51a6e5ec93886d9ba9515baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:3f:98:b4:0c:e5:18:15:3a:21:67:88:7c:
b1:d5:f1:44:af:ef:71:27:2a:ec:56:c5:34:a9:c2:
4f:e8:95:f7:eb:52:8d:53:33:0c:a1:cd:50:aa:95:
bf:3d:d5:b7:1d:23:ae:ce:ec:f1:eb:74:d5:c9:44:
3b:31:e5:f4:95:04:ac:6a:32:be:76:57:ba:fa:52:
50:04:99:98:2b:d2:87:c7:48:a7:61:f0:95:c8:54:
15:9d:54:17:35:9f:5e:a8:c7:bd:02:5e:35:6c:08:
3a:c1:cb:ec:c6:bb:92:8d:25:60:45:e2:7b:c0:47:
ad:8c:74:04:da:fc:fd:8c:8e:97:ae:cf:a7:88:78:
74:01:37:49:1f:3f:75:4c:7d:44:17:39:29:1a:4d:
83:74:d8:b0:28:ce:d5:7b:5c:d7:5a:42:52:e7:06:
9d:ae:52:f1:c2:3a:b2:9f:73:9e:70:2e:55:db:a9:
06:e8:f4:fe:d5:96:fe:52:23:53:1c:93:07:16:33:
29:3b:72:17:87:f5:e8:81:30:09:e6:73:87:f3:f9:
5c:92:12:14:3c:e9:7e:a6:f0:cf:16:2f:5b:9d:9f:
e4:6a:c6:65:5f:b6:3a:61:25:d5:16:32:f0:d7:44:
dc:03:7e:51:3f:e3:a9:ea:de:07:4e:99:c3:0a:33:
d5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D4:8E:10:F2:3A:66:FF:51:A6:E5:EC:93:88:6D:9B:A9:51:5B:AF
X509v3 Authority Key Identifier:
keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:85:99:fc:fd:a4:31:50:b6:ab:ec:07:94:ac:4a:e5:68:56:
85:c6:ff:8d:b9:4d:aa:96:a3:0d:29:ae:0c:c9:5b:6b:b0:a3:
e3:19:1e:26:b1:cd:fa:ce:11:d3:c1:6b:98:c8:47:5d:24:55:
e1:84:a5:23:ea:66:76:7e:ab:67:06:df:f4:62:cd:21:ff:c7:
4b:4e:04:6b:a1:65:0a:3d:d0:0e:32:1c:0b:72:9d:8f:dd:c3:
21:ad:0c:91:76:18:a0:04:2e:bc:ec:fe:5a:86:66:fa:ac:15:
97:f1:12:a8:91:ee:f9:c7:bc:81:ea:c8:7a:9d:44:ea:68:02:
49:55:7a:7a:19:0a:60:c4:71:1a:08:da:82:b0:cd:cc:f6:72:
72:a3:bd:95:0c:38:63:22:65:29:b6:62:e5:ba:af:7a:e8:3d:
d8:17:f0:f0:4d:ba:a3:67:ca:26:c2:30:f4:0e:cb:82:e6:99:
f8:db:e8:3f:54:d2:b9:eb:5c:80:a8:21:f8:6d:d5:22:19:af:
58:b8:c7:16:db:f5:c5:fd:62:f6:2d:61:f9:51:cb:f8:40:50:
9d:58:23:a8:62:c5:48:57:ea:c1:13:87:28:c7:5e:49:85:f8:
6d:e7:a1:1b:10:d3:60:5d:00:8f:f7:67:42:ab:58:a0:8d:d1:
2b:36:09:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:37 2025 by rpki-client