Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
File: ie36QUlE0BCsae5b-yJ3OySyfvs.mft (raw, json)
Hash identifier: 6V2odNOoYmPFl4a0jaY4TpCcQ24L2UBYRh3u+ve8hJU=
Subject key identifier: C9:63:AE:22:6E:32:7E:02:DA:CB:9C:E3:3B:0E:1D:67:EC:9E:5D:CC
Authority key identifier: 89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
Certificate issuer: /CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Certificate serial: 0197B8210D56DB89F1D19DD9D3A4F1E95F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
Manifest number: 0A25
Signing time: Sat 28 Jun 2025 20:01:03 +0000
Manifest this update: Sat 28 Jun 2025 20:01:03 +0000
Manifest next update: Sun 29 Jun 2025 20:01:03 +0000
Files and hashes: 1: 9WfLA6QHajuACG9zKGXgXI_fnBU.roa (hash: aTvWSmVYrhk52fn4L1rzEuUOw3+xRp2a5jHVVtBFY4o=)
2: JY9LzlIgT9I57_KE7zrrGS7E8Qk.roa (hash: pG1i5yA4B+HIYkYc64ggfa0dVvkWYyImVKQY1Fkl/ng=)
3: ie36QUlE0BCsae5b-yJ3OySyfvs.crl (hash: 32Fwjzk4pgVW8thTfCGHcTdv8T3aiqyTQCBEf/bLv9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:0d:56:db:89:f1:d1:9d:d9:d3:a4:f1:e9:5f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89edfa414944d010ac69ee5bfb22773b24b27efb
Validity
Not Before: Jun 28 20:01:03 2025 GMT
Not After : Jun 29 20:01:03 2025 GMT
Subject: CN=c963ae226e327e02dacb9ce33b0e1d67ec9e5dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:6e:fd:a6:f8:89:21:8a:fb:a0:31:37:39:
a8:dc:9e:bd:be:c2:87:d5:3b:25:b8:01:9e:fc:9b:
55:a4:e3:db:d1:1b:32:07:23:dd:46:95:a3:ac:cc:
a0:6c:8f:89:1a:7d:a4:18:9c:78:eb:4f:eb:d0:2f:
ee:1b:9b:6a:78:60:f6:0a:33:02:3e:e3:00:00:12:
e3:8b:f2:2b:82:73:e6:94:9e:bc:14:45:74:c9:90:
6d:5e:90:33:de:cb:8b:f3:af:17:cb:ca:e8:7b:09:
13:9a:26:2b:8d:a8:8b:fd:61:c4:d3:0f:cb:15:97:
32:a8:49:8a:5e:bb:ff:cb:0d:fd:9a:31:d3:34:5a:
6f:2e:4d:4d:dc:d4:bf:a4:ef:0e:c9:66:85:13:f9:
74:b2:6b:6f:e3:6b:7f:f9:0a:4f:c8:17:d3:46:55:
72:3b:9a:b5:01:21:1e:d6:b1:09:c5:59:56:cb:94:
d4:ff:22:7d:5c:b0:2a:81:8a:18:80:89:21:96:da:
2e:42:55:08:74:d9:08:45:34:cb:8f:e2:bc:f6:9e:
87:1f:ed:5a:f8:f6:65:ec:b4:89:c0:5a:5b:bd:b8:
18:55:10:55:1c:24:4b:2c:d6:cc:45:71:aa:cf:22:
19:99:eb:44:a4:a9:5f:e5:1a:6d:86:88:c9:f5:0a:
da:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:63:AE:22:6E:32:7E:02:DA:CB:9C:E3:3B:0E:1D:67:EC:9E:5D:CC
X509v3 Authority Key Identifier:
keyid:89:ED:FA:41:49:44:D0:10:AC:69:EE:5B:FB:22:77:3B:24:B2:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ie36QUlE0BCsae5b-yJ3OySyfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/936cbb-bac4-4fde-8def-febc1ed3ceba/1/ie36QUlE0BCsae5b-yJ3OySyfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:75:fc:c5:93:8a:41:b4:f4:d5:d0:18:78:03:f7:e6:0f:74:
0e:9f:8e:5a:cf:33:13:38:22:b9:dd:c8:5c:61:55:9f:7c:63:
b6:ac:4a:14:f7:f4:78:3e:5f:46:d4:09:c5:c7:5b:b3:60:4d:
58:6c:21:b7:bc:5a:cb:14:e6:2b:8c:f8:19:a4:7c:ce:01:b5:
dc:4a:cb:c6:a4:15:2c:c9:2b:ff:1b:b0:81:ac:82:23:e4:21:
5b:9a:04:13:9a:eb:e8:7d:a8:18:fc:59:4d:52:65:2e:29:06:
5d:2c:4a:75:60:00:5f:c6:8e:c8:f4:8c:2d:cd:a3:dd:96:2b:
e7:bf:e3:a1:2c:e2:65:8f:54:73:78:e0:32:d1:25:eb:db:43:
40:07:49:f7:eb:9a:b4:33:e4:a8:8f:b8:02:27:10:94:92:b9:
5d:38:20:77:73:5b:1a:22:ef:d5:26:5c:f4:09:1a:fe:44:f1:
60:a7:7b:6c:1b:cf:13:a1:90:72:6c:ca:4e:71:a5:3d:cd:09:
82:db:9b:b6:c3:76:59:09:1a:9a:0b:30:ae:7a:06:da:c5:4a:
aa:f3:ac:57:f5:5a:5c:e2:e3:b9:33:3c:b7:55:4e:6b:43:41:
d6:54:39:94:f5:71:6e:57:77:b0:4c:b3:98:cd:9a:17:ea:47:
f0:60:8b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:16 2025 by rpki-client