Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
File: IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft (raw, json)
Hash identifier: pQRtRM2FzZSOTzqKuoQcwWRoLgyDcOupTb6PUQzlOBw=
Subject key identifier: 36:DA:7C:B7:AA:2C:C2:7A:A4:3F:3F:D5:ED:4B:90:5F:4F:1F:83:EF
Authority key identifier: 20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54
Certificate issuer: /CN=2046367390224a07684d7977f9165a0950f03d54
Certificate serial: 0197B5FBB9E9445360BDED3B7220CECAC9E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
Manifest number: 12C1
Signing time: Sat 28 Jun 2025 10:01:02 +0000
Manifest this update: Sat 28 Jun 2025 10:01:02 +0000
Manifest next update: Sun 29 Jun 2025 10:01:02 +0000
Files and hashes: 1: ICVbUtHfbHYJwV7ucXI2K_14ylU.roa (hash: d0or5/9y3dY5/PzUShTK41fVXw4MjWFCN4HTk7PqBCg=)
2: IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl (hash: XcJKPMy2VbkpHsEXyyyQZq9YiG4Wlg+gXAzSUy/Z6is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:b9:e9:44:53:60:bd:ed:3b:72:20:ce:ca:c9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2046367390224a07684d7977f9165a0950f03d54
Validity
Not Before: Jun 28 10:01:02 2025 GMT
Not After : Jun 29 10:01:02 2025 GMT
Subject: CN=36da7cb7aa2cc27aa43f3fd5ed4b905f4f1f83ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a8:91:01:34:cb:2c:12:23:f0:4e:a1:df:75:
15:9d:73:d9:95:ac:90:d2:fd:c0:59:bd:ec:23:dd:
82:5f:0c:bb:bb:1f:e1:e6:a0:79:38:19:61:22:a0:
73:96:00:3d:50:18:3a:af:e1:5b:e2:6e:7e:1d:07:
08:e5:95:22:9a:27:8b:a5:31:88:11:90:1d:b2:0b:
35:e9:55:42:7e:0d:0d:19:ca:b8:80:ad:69:93:f0:
34:2f:ff:9c:25:89:60:cf:a8:39:40:5c:50:77:de:
98:ca:d0:77:70:ec:51:e0:5d:29:2f:f1:ba:67:08:
6c:f1:66:9c:82:f3:d2:f2:87:8e:67:79:6b:ca:f6:
63:f7:55:97:9e:87:ef:ec:3e:c2:e1:fa:d1:44:32:
66:55:e5:25:c0:cd:50:83:a5:a4:7e:30:a8:88:d1:
dc:ae:c9:71:a4:8b:75:60:76:01:d7:7f:1c:66:03:
a2:73:bb:fb:15:0a:f7:e2:b2:7e:d2:26:c3:d0:f7:
67:89:03:dc:fa:41:99:61:f7:28:6b:b4:7c:d6:db:
ea:4f:62:0c:22:81:5f:be:3c:ca:32:00:0e:24:87:
6b:0a:1b:35:8f:e2:79:4a:d9:80:3e:30:43:1e:2d:
f3:89:5b:ad:50:ca:d9:ec:2d:18:de:7b:ba:8f:8c:
72:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DA:7C:B7:AA:2C:C2:7A:A4:3F:3F:D5:ED:4B:90:5F:4F:1F:83:EF
X509v3 Authority Key Identifier:
keyid:20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d4:71:71:be:c4:07:fe:d4:ff:a1:61:e2:68:48:56:82:ec:
df:7a:13:2c:8f:4b:99:46:a0:22:c4:fe:87:7f:f1:e5:d8:57:
74:17:23:7b:b9:22:2b:8c:a7:bb:25:66:eb:d4:ec:3b:1b:36:
4f:c1:bd:c1:a1:f9:e7:f7:ac:bb:55:95:3e:52:04:21:5f:d8:
08:f2:8e:10:6d:f1:6f:e4:e5:4b:e3:80:25:ff:ba:eb:3a:13:
4c:13:9e:6d:57:da:bc:0e:3d:26:3d:07:3a:d7:85:24:6a:49:
11:8d:98:4e:fe:05:92:20:64:9d:4c:db:6e:85:15:64:7a:73:
14:6f:d3:ff:4f:3e:97:51:6d:85:21:cc:67:ef:32:94:f2:8a:
66:e5:f3:fb:76:d7:28:d0:c5:fd:d8:f2:84:b6:e4:1b:77:38:
50:12:97:4d:d7:09:b8:0b:5f:d1:1c:f4:36:1a:93:cb:23:4b:
ef:90:20:f7:97:38:15:28:99:3f:9d:76:bb:f3:32:dd:1e:fd:
00:04:ed:54:08:dd:b5:06:0a:83:4a:5a:5b:7e:23:f0:e4:29:
82:d9:06:1b:a8:8c:c0:8f:ea:5b:ec:9d:97:ee:2c:f4:4e:d1:
ff:46:08:80:38:d6:36:90:ff:12:cc:07:44:69:5d:af:b2:05:
ba:c1:c8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:23 2025 by rpki-client