Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
File: I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft (raw, json)
Hash identifier: ykM/H/m+hhRQNYkQN1Y9zBsNHs84GAVKhWkKzmwsiug=
Subject key identifier: 36:9B:29:59:6C:43:76:CB:CB:9E:BB:56:D3:B0:4E:A3:05:8E:3A:69
Authority key identifier: 23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
Certificate issuer: /CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Certificate serial: 0197B77C560506E63274254C10FCBF33CD94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
Manifest number: 12FD
Signing time: Sat 28 Jun 2025 17:01:08 +0000
Manifest this update: Sat 28 Jun 2025 17:01:08 +0000
Manifest next update: Sun 29 Jun 2025 17:01:08 +0000
Files and hashes: 1: I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl (hash: NHk/mB58RLhG2XnphUMylARH6LL+8wInYP3K+jxNGS0=)
2: i8Q4g4VsliGNNp87vd6oYtqJ_zk.roa (hash: O+cLxQgdSxj9HwSnDkkvV/wDo/+EE05gj69lFrqob6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:56:05:06:e6:32:74:25:4c:10:fc:bf:33:cd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Validity
Not Before: Jun 28 17:01:08 2025 GMT
Not After : Jun 29 17:01:08 2025 GMT
Subject: CN=369b29596c4376cbcb9ebb56d3b04ea3058e3a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:20:38:19:f8:d2:6f:2f:16:03:d5:48:2d:0f:
73:81:4f:0d:d8:ee:46:05:f9:19:64:03:31:e4:1e:
e9:91:0c:88:e9:33:be:e2:d6:de:c6:2a:3f:eb:77:
71:8d:f4:22:06:37:9c:fd:06:ac:0a:18:33:84:21:
65:0a:d3:ea:24:1a:ac:45:7d:78:7f:e8:64:a2:b5:
58:42:b2:ef:01:9f:0b:c1:6b:04:65:7c:21:c2:c0:
d1:84:bc:da:05:06:f0:49:0e:77:cc:57:e7:82:7a:
0f:11:b4:ef:94:6d:29:98:f4:db:1f:09:82:07:c8:
d9:f1:ae:7c:87:d1:39:b8:ad:6b:25:7c:cf:fe:a6:
1b:c6:9c:86:69:36:f2:a9:83:07:b5:b1:b5:a0:e0:
06:88:83:43:83:a7:4e:51:97:f0:18:8b:ae:7c:cd:
c6:b1:bf:3c:96:25:b6:66:29:82:ed:72:0b:47:2e:
03:34:39:b7:65:27:9d:15:70:3c:33:5d:15:2d:5b:
e3:55:52:52:8e:92:0e:03:54:fc:09:a4:80:3e:c6:
a1:67:d5:49:12:af:ae:9d:2c:5f:4b:f2:e0:0e:26:
46:99:81:7c:ee:14:04:fb:a1:51:f0:20:e3:eb:de:
3b:a7:71:14:9c:2b:0e:05:6f:ab:f7:f1:8e:12:f6:
45:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9B:29:59:6C:43:76:CB:CB:9E:BB:56:D3:B0:4E:A3:05:8E:3A:69
X509v3 Authority Key Identifier:
keyid:23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:bd:44:13:65:d1:47:1b:7c:59:56:03:60:55:1d:bf:ab:fb:
29:c8:11:04:fa:84:06:26:32:3f:b3:f1:4f:0a:29:36:cc:45:
2d:cf:02:1a:79:b6:6e:e2:7b:c0:43:fc:05:0a:3d:c0:60:e6:
79:28:bb:3d:25:67:8d:f5:f2:db:2f:1a:11:4c:82:ab:67:85:
54:d2:c3:46:a0:6e:f9:0c:11:b8:0b:e9:d3:55:b1:3a:c1:3b:
81:35:9a:6b:65:71:e9:1f:45:58:9e:ca:1e:70:34:84:3a:46:
a7:44:6a:59:df:63:6a:d2:2f:51:ca:2c:db:49:7e:c7:fd:3c:
42:de:b4:0e:61:bf:42:db:26:42:8b:5d:95:f6:5f:06:9e:bf:
27:f5:81:dc:fb:a0:81:03:ca:45:71:a7:86:cb:84:c6:ab:18:
4c:8e:dc:21:b1:45:de:50:27:64:22:66:36:41:52:32:c5:d3:
f1:5a:1d:79:12:ae:fc:83:7b:e9:4a:9c:be:9e:fa:3f:56:af:
30:b7:08:5b:dc:8d:e4:37:77:37:fb:72:89:77:11:0d:a8:7e:
63:61:6a:19:ab:fc:5a:46:b0:01:c8:14:fa:a9:13:3d:dc:b9:
96:ba:4d:65:7d:9c:d0:28:b1:8b:86:8d:cd:54:8a:25:9a:40:
bb:dc:0b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:04 2025 by rpki-client