Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
File: I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft (raw, json)
Hash identifier: vSPFEdYBEYy4YrYBC7Tts12dlN5e4N8YXSdcaPSXugg=
Subject key identifier: 00:69:6D:1E:3B:57:D5:02:7F:62:A0:D7:63:0A:91:70:2F:2D:AE:D9
Authority key identifier: 23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
Certificate issuer: /CN=234cd34911cfce946a22ea84663738cdcc076d45
Certificate serial: 0197B70E77C88D14724C66E129BCA71A00EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 15:01:08 +0000
Manifest this update: Sat 28 Jun 2025 15:01:08 +0000
Manifest next update: Sun 29 Jun 2025 15:01:08 +0000
Files and hashes: 1: I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl (hash: Z8wZ2CxmllAGpobpDODfyI4FfoKKst0uZkbJ8Jo2sXY=)
2: h4MNBNIqF_ThX6XaH2WdhshuJOA.roa (hash: rTGzgorMfX1eun7k8wcYtv0yi00PmZQby+9ZEZuIh7g=)
3: nJekGUdzLnW-TjQjig7_IehTMxo.roa (hash: 7EP+L4VTl9fIN/VTMWiTcp215tfBsK8IFYr8aaBuzJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:77:c8:8d:14:72:4c:66:e1:29:bc:a7:1a:00:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234cd34911cfce946a22ea84663738cdcc076d45
Validity
Not Before: Jun 28 15:01:08 2025 GMT
Not After : Jun 29 15:01:08 2025 GMT
Subject: CN=00696d1e3b57d5027f62a0d7630a91702f2daed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5b:28:b4:65:5d:97:4a:3e:51:08:1a:4d:43:
4d:cd:c5:fe:5b:e6:cf:ec:a2:da:ab:6a:60:aa:92:
36:27:81:48:22:e7:98:a5:27:47:34:92:84:7e:45:
e7:dd:7e:57:75:15:d0:54:ac:91:97:97:f0:fa:9e:
d7:ec:7a:59:40:b2:5d:2d:9b:ef:a4:98:56:99:f1:
11:7d:33:02:9d:61:60:59:57:d9:13:11:9a:95:27:
2a:0c:a4:71:73:65:50:80:dc:62:08:39:06:b8:44:
21:e8:24:b6:1f:c9:93:43:c7:13:ec:5f:7e:9e:a5:
55:05:3d:76:99:50:54:e9:71:14:77:72:50:9a:ae:
ca:44:37:ae:6a:44:98:17:cf:0a:53:a3:75:35:b2:
1e:f7:9b:70:95:df:dc:f0:03:f6:fa:5a:4c:8f:4b:
d4:8e:96:3a:14:9a:31:ee:61:13:da:44:b7:69:05:
0d:5b:86:ba:46:30:89:a8:e9:bb:ed:b1:6a:2a:31:
b0:ba:32:ca:e0:f1:6c:ed:00:46:9c:57:99:5c:a1:
7c:33:7e:05:18:41:4b:88:b0:ae:03:ea:a4:db:2c:
81:30:d4:ea:57:50:ea:0e:f0:ac:42:b3:86:ff:d6:
a4:2f:35:da:00:fb:11:90:58:88:27:b5:24:dc:20:
0e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:69:6D:1E:3B:57:D5:02:7F:62:A0:D7:63:0A:91:70:2F:2D:AE:D9
X509v3 Authority Key Identifier:
keyid:23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:2b:0e:dc:67:c2:0f:1e:9c:20:be:3c:48:ea:ee:64:14:7d:
8a:92:3e:5a:af:d7:47:7b:10:f5:4e:c6:31:59:aa:f4:ef:f8:
4b:1d:25:04:c1:0d:95:6c:ae:5a:0e:0c:74:d3:fd:a6:fe:dc:
89:7a:09:b1:1c:bb:04:c1:73:75:29:a3:15:2f:5a:33:b0:fb:
31:dd:b8:04:ba:c6:b4:d5:d9:f0:38:5e:66:b5:5a:76:6b:c3:
5a:f2:9c:cd:f2:a1:cd:3f:8f:a6:01:d8:ff:bd:0d:04:86:ae:
f7:1b:6b:e0:6e:bf:2b:60:ab:0d:59:00:90:dc:7f:fe:46:73:
37:45:49:db:62:9e:a1:45:15:2d:50:76:9e:07:36:23:e3:b8:
b5:aa:0a:90:6e:a8:db:95:cb:9c:b6:c1:74:c4:8e:04:c9:00:
98:2f:94:82:81:3f:3b:fb:20:db:09:d3:c6:3c:63:80:a3:13:
0d:76:4a:ca:c6:d4:c6:d8:ca:6e:e1:2a:b2:e7:8a:61:28:44:
4b:fb:ce:c1:ea:1a:1f:f5:24:1a:cb:d7:30:2f:4e:90:02:13:
21:1a:2e:0a:ba:62:e0:d5:15:80:86:d7:ae:a9:d1:eb:bb:65:
60:20:79:8e:b6:48:da:62:80:ac:dd:3d:3f:4e:df:6b:a1:ab:
f4:79:5b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:23 2025 by rpki-client