Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
File: ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft (raw, json)
Hash identifier: A/e0f2YEXzuZUW4t14Nb1iEM3Z1m1niHKZqKrQoFO1g=
Subject key identifier: 14:16:0F:8D:97:A6:28:28:0B:C9:06:BC:57:80:F4:19:B4:98:03:A4
Authority key identifier: 8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
Certificate issuer: /CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Certificate serial: 0197B77CB126AEDB11AF239C18D26EE34CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:01:31 +0000
Manifest this update: Sat 28 Jun 2025 17:01:31 +0000
Manifest next update: Sun 29 Jun 2025 17:01:31 +0000
Files and hashes: 1: SZpd9qPeF2_UcZ0BFTiD1uQx6CE.roa (hash: 4d7c/yFsOUlnwxOih4L4b458874C6mb5/7y63/As6E0=)
2: e6NTQMQbAc2rRpYIgSE0b5QlitQ.roa (hash: AW2JD/AMZP/3NkMYPVumCDsjg07AD98EjBhRoynRE5I=)
3: ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl (hash: dGcz9A2medALZ6Qa3Vnkg2SZhc0P+IrK1JkF4Kvnr9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 17:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b1:26:ae:db:11:af:23:9c:18:d2:6e:e3:4c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Validity
Not Before: Jun 28 17:01:31 2025 GMT
Not After : Jun 29 17:01:31 2025 GMT
Subject: CN=14160f8d97a628280bc906bc5780f419b49803a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:b6:75:f9:04:ef:4d:3b:ee:a0:d2:68:58:
75:18:0d:c2:22:fd:a1:52:6d:2c:6e:79:94:eb:2d:
ed:ec:44:6e:4d:56:ef:02:36:da:91:ba:92:ec:66:
71:da:e1:bd:2c:ec:a7:7c:fe:43:98:45:2d:82:69:
c1:06:f7:04:e5:44:9e:9e:ba:db:43:f7:fd:23:ed:
88:20:ea:e1:3b:29:72:55:09:05:e7:e7:db:f5:29:
6e:83:9d:ff:3b:31:83:d9:66:dd:b0:f6:22:59:31:
8a:ba:cb:ad:42:7d:28:f1:6f:4c:54:97:59:3e:71:
a7:c5:29:49:01:39:c6:90:85:48:8a:8e:a5:65:8d:
89:27:e9:19:0d:16:71:41:34:75:2b:68:58:de:20:
e3:c8:09:e7:9f:9a:c4:e0:99:8c:ca:eb:98:75:c6:
f3:96:46:dc:39:5c:c4:1b:77:cc:49:79:9a:70:db:
60:3d:da:ae:ac:97:8e:ab:51:9b:e2:12:fa:b7:a1:
f6:cf:55:d5:88:18:2b:95:65:71:6f:d4:7d:5b:22:
6c:9d:d3:31:54:23:af:38:08:76:22:b0:91:50:5c:
2e:1b:00:ec:59:97:1b:6d:54:9c:da:cc:21:d9:7f:
d2:ac:2b:b6:23:9b:d2:b3:8e:8f:83:c1:84:ea:d7:
7c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:16:0F:8D:97:A6:28:28:0B:C9:06:BC:57:80:F4:19:B4:98:03:A4
X509v3 Authority Key Identifier:
keyid:8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:97:8d:71:68:18:80:a6:79:1c:c2:40:f5:13:55:4e:83:a5:
fa:3e:51:5b:00:8e:58:7d:30:d1:54:6d:09:3c:2f:d4:42:7f:
c5:e2:88:65:cb:14:35:92:c4:fb:ef:1b:2a:2e:19:a9:3b:4e:
fd:4b:0b:96:c9:b7:6d:92:b7:17:5d:d7:ef:0e:fc:58:4d:73:
b2:76:ae:68:0f:e3:d9:ba:d0:be:d7:f1:58:ac:71:fc:d8:45:
73:a1:47:48:50:fb:2b:14:f1:15:6d:3d:c0:2e:30:5a:01:b4:
36:68:91:16:03:10:42:c8:ff:72:e6:05:d7:14:df:32:d8:12:
3c:a3:17:a4:8e:02:3c:5c:ad:e8:30:c7:94:26:47:e3:dc:28:
8e:63:70:4b:48:1a:a6:bc:8b:8d:b6:54:eb:d1:c6:29:42:86:
c7:af:a4:4a:4d:6c:f1:a1:cc:37:99:f8:47:54:cd:40:25:60:
e4:a3:cd:8d:0a:d2:4f:c9:cf:15:04:0b:17:3e:7e:d5:bc:b1:
19:5b:3c:9b:bf:6e:e8:f7:3d:30:ad:e4:c8:af:05:d1:bb:9d:
f4:cc:bc:85:6f:fe:45:60:d0:ae:e6:9c:30:8c:6c:90:04:43:
a4:eb:8c:62:07:55:a0:1a:e6:1c:47:cf:b2:a6:31:73:aa:56:
d8:93:09:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:47:28 2025 by rpki-client