Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
File: ICZNUaES0LwizqcxTLBs9aGuM-k.mft (raw, json)
Hash identifier: s7spR6A0k2QdgJjl69ZkX9wA/G2U8d0vhlAONlhGDO8=
Subject key identifier: 29:33:A1:01:0B:04:00:AE:06:C4:CA:97:D4:6C:51:D2:93:FC:7A:3B
Authority key identifier: 20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9
Certificate issuer: /CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9
Certificate serial: 0197B8FD97DDBB3D34674288C593E4ABCD63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
Manifest number: 1549
Signing time: Sun 29 Jun 2025 00:01:56 +0000
Manifest this update: Sun 29 Jun 2025 00:01:56 +0000
Manifest next update: Mon 30 Jun 2025 00:01:56 +0000
Files and hashes: 1: FXy87TSnS3zZKpD3cubdEzL9JTI.roa (hash: ev8YOzfcP94Okj6loLdeokLYKFfF9CSd4o8ZPprNj7U=)
2: ICZNUaES0LwizqcxTLBs9aGuM-k.crl (hash: lMCV4O5dRQUk3EPHiup8DbvkzU3wO+uRH72e+09GdvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:97:dd:bb:3d:34:67:42:88:c5:93:e4:ab:cd:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9
Validity
Not Before: Jun 29 00:01:56 2025 GMT
Not After : Jun 30 00:01:56 2025 GMT
Subject: CN=2933a1010b0400ae06c4ca97d46c51d293fc7a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a7:28:07:49:da:92:11:62:91:62:59:f4:95:
e8:c7:16:ec:4a:3f:42:8d:d0:2b:1b:f9:f5:77:ce:
b3:eb:f8:5b:73:da:fe:ad:2c:38:be:2f:d8:37:67:
20:0f:00:af:3d:75:7d:38:af:7a:31:ee:13:41:6b:
72:f4:1d:71:24:de:2e:96:03:7c:3d:66:03:5a:8a:
6f:0b:37:64:37:84:e8:ec:e3:db:bc:d5:14:06:1e:
c8:2d:d5:e7:4c:b0:b3:51:8b:46:8d:fd:e0:e6:e5:
fd:58:82:ae:94:d3:40:f6:70:6d:b9:6d:13:42:52:
c9:d1:de:b3:70:69:7f:07:c8:5c:f6:86:47:bd:c0:
58:5f:79:20:7a:b2:14:5d:3d:5f:44:3f:4e:d7:cf:
51:1c:64:65:dc:c9:4c:c1:41:79:7a:11:7a:32:dc:
e8:77:dc:7a:c3:10:a5:c0:9c:e4:a7:80:dc:b1:94:
19:a4:19:ea:91:9e:b7:ff:57:30:90:0a:a3:3a:1a:
6f:ac:5e:ba:49:62:ab:7a:11:b8:a8:b2:3b:ac:f8:
21:a4:e8:84:36:db:57:a8:88:c2:d4:69:62:57:45:
8e:4c:ff:de:61:e4:25:dd:02:53:9e:60:fe:6c:b0:
cd:04:4b:b9:dc:4b:be:68:e8:4f:74:1c:ab:82:8d:
56:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:33:A1:01:0B:04:00:AE:06:C4:CA:97:D4:6C:51:D2:93:FC:7A:3B
X509v3 Authority Key Identifier:
keyid:20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f5:08:a4:d0:47:6f:8a:62:81:d0:3d:32:ee:e9:2d:f1:92:
d7:ba:f5:7d:56:db:0a:16:4b:25:03:a3:cf:09:5c:4e:b5:db:
47:c5:f4:08:ba:ff:a3:27:7b:ce:6e:4f:5e:62:17:35:d8:e6:
d5:54:24:5a:6b:9f:03:46:e2:5e:da:0f:04:e7:72:24:9d:0a:
93:9a:db:06:c0:04:cd:b0:ce:15:a8:57:a8:80:d4:b4:f6:f2:
f2:b0:34:2c:ed:9e:60:11:ac:7c:1b:e8:57:c7:5f:f1:d6:19:
9e:a1:b7:8e:9f:84:3e:c5:41:01:db:d8:ff:ea:c9:36:7a:af:
34:64:ae:68:25:1e:97:17:25:11:48:52:73:e3:0f:c4:62:84:
bd:8c:e0:4c:cb:a2:67:ff:2c:56:4f:e7:e5:bd:5e:28:15:32:
12:74:de:b2:49:c0:ce:94:a1:ab:b8:5e:b0:23:60:39:81:68:
51:06:08:dd:08:14:65:b3:8c:c0:42:66:63:b5:2b:46:5d:a7:
18:56:2c:18:07:2b:57:d2:9d:7a:2b:1a:f8:d5:9f:30:a5:0d:
2b:43:16:b2:eb:c4:55:ba:99:71:8d:8e:cd:1f:42:eb:4f:1a:
07:e7:b6:f6:44:3e:f2:72:9e:38:ce:fa:28:10:72:f8:b1:86:
91:f4:df:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:21:44 2025 by rpki-client