Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
File: Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft (raw, json)
Hash identifier: XI3han8dyD1ly1yH5JMcnh3acPBd6+FSmxYDVNe6XJE=
Subject key identifier: C9:71:B1:F0:75:62:93:F7:BF:51:CF:AC:53:34:45:C0:2F:17:34:07
Authority key identifier: 23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
Certificate issuer: /CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Certificate serial: 0197CDCD45475E9FBB707F6789EBAD2EF429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
Manifest number: 15C1
Signing time: Thu 03 Jul 2025 01:01:11 +0000
Manifest this update: Thu 03 Jul 2025 01:01:11 +0000
Manifest next update: Fri 04 Jul 2025 01:01:11 +0000
Files and hashes: 1: 1--lfY911D4o-n0x13kTzxgPAa1c.roa (hash: 7jYLrsmco67v6YLtE1rUNiJwEOZGyK+AZuLqYtKHcu0=)
2: 1-PLlhObhI2KvU31PH_oGB4eDG5U.roa (hash: h2JQLRGR8RDG0rSKaLT0jUCHodG0PW/TX0LlgI0i4Qc=)
3: Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl (hash: w+/e4Rp5gUvdhf+DsD7wzqKHZIIoPD2efEC/NRMcAuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:cd:45:47:5e:9f:bb:70:7f:67:89:eb:ad:2e:f4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Validity
Not Before: Jul 3 01:01:11 2025 GMT
Not After : Jul 4 01:01:11 2025 GMT
Subject: CN=c971b1f0756293f7bf51cfac533445c02f173407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:bb:eb:b7:78:28:ee:e3:70:79:ae:19:37:2a:
0b:73:26:2f:b6:cc:86:88:8f:ec:da:ff:40:4e:92:
9f:de:92:9b:ca:61:93:93:6a:62:04:8c:c6:33:b4:
66:49:99:e4:41:e2:6d:bd:fa:1b:88:36:8e:9b:2a:
a1:87:a0:72:60:fc:24:92:98:e5:91:bd:49:dc:17:
3c:88:f2:b5:6a:a1:9d:db:e6:79:db:18:64:18:91:
30:44:7f:cd:07:de:ad:b3:aa:bd:f4:6a:5b:75:a1:
f4:2c:59:67:5c:c0:11:13:8b:d2:66:32:69:ce:7f:
ee:6b:4d:60:92:c3:b7:64:e0:82:2c:7b:bc:84:70:
34:81:50:29:63:6e:63:fa:8e:76:a7:35:de:63:25:
fe:c9:0b:aa:41:07:a0:0e:44:d9:47:29:7c:33:a9:
9a:b3:29:bb:d9:18:67:50:e9:2c:ca:75:20:55:a2:
4f:16:68:8e:70:c1:8b:e8:aa:60:c1:ca:f7:67:3b:
47:bc:94:65:76:7f:18:5e:24:9f:99:0e:54:c0:f1:
1e:a0:94:ab:57:fc:80:0c:63:82:05:46:60:2e:da:
f5:0f:1f:90:4f:61:e1:4b:73:3f:48:19:91:1b:57:
c7:3a:b3:46:52:b1:c5:ee:a4:0a:89:5b:c6:7a:99:
3f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:71:B1:F0:75:62:93:F7:BF:51:CF:AC:53:34:45:C0:2F:17:34:07
X509v3 Authority Key Identifier:
keyid:23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:9e:e2:7b:2a:be:7f:ff:0b:d0:29:aa:08:a3:49:31:c4:c0:
89:46:62:55:fa:8e:3f:a8:2e:a7:cb:20:7b:73:6c:4e:98:1d:
de:3c:04:f8:44:da:bd:00:56:e1:2b:d7:cd:3e:97:3f:8f:63:
5e:0a:b3:59:90:8f:d9:a4:af:33:e5:6c:de:b0:4d:24:86:9b:
82:63:52:5c:4c:f9:42:70:1c:a2:c8:b6:98:0f:6b:85:34:83:
86:44:b9:65:33:23:8a:87:ef:5b:4f:7e:4e:46:bd:67:36:d7:
d1:ec:6b:fa:f4:ba:c5:09:de:16:8c:f8:42:16:9b:0e:e5:ab:
2b:0c:38:db:18:3d:15:91:4a:49:1e:4d:31:79:4f:c1:80:da:
84:9e:8f:36:85:c0:81:a2:54:d2:f0:f5:c3:01:4e:16:6d:63:
ef:53:ef:0c:af:22:4a:29:4d:89:a2:bc:ba:d7:0c:cf:d8:0c:
a3:0b:bb:66:e8:90:5e:10:fe:13:52:59:fc:27:45:40:4f:1b:
99:d8:eb:11:01:1d:bf:4f:16:27:3f:0e:cc:bc:5e:3b:41:7e:
24:ae:c0:e4:68:26:2f:50:56:b2:ea:85:1c:bc:d3:29:a0:4e:
35:d4:11:fe:5a:46:f1:90:a4:75:ef:60:31:86:d6:e8:63:40:
a3:1c:2b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 11:25:40 2025 by rpki-client