Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
File: hI2YANad664Rt_gWHDzogYH957Q.mft (raw, json)
Hash identifier: Sj/7h2U9ExUVGm8y7tmHH3nyMFgmZz4VBrJD2F61mGk=
Subject key identifier: D3:85:02:48:86:85:C2:94:5F:2A:D5:BD:79:6F:CE:E7:04:A8:DA:F2
Authority key identifier: 84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
Certificate issuer: /CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Certificate serial: 0197B77C01E644A76D45A10761FF6B82EC85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
Manifest number: 09AE
Signing time: Sat 28 Jun 2025 17:00:46 +0000
Manifest this update: Sat 28 Jun 2025 17:00:46 +0000
Manifest next update: Sun 29 Jun 2025 17:00:46 +0000
Files and hashes: 1: Pi13Jn_f8QNwlYweA6cENA4uaSs.roa (hash: UZD7c+7NUs2opXS6uWJEcxhLpAXCSZYdWwe68q1uABI=)
2: hI2YANad664Rt_gWHDzogYH957Q.crl (hash: aAXkKn6mpYEuFsBogWLljEsxFrLxc4O8icgBIZ4D5xY=)
3: kSeV1NXuoW2kMAhRuEJXNL0G3J8.roa (hash: BCpFIjkEeCfOQHY9iAYyAPzCmQqEp82NEt+xGk7yxzQ=)
4: sXoE76O0g9HbvTQdsrTuLQ6BEGY.roa (hash: 2c9XhIaXdBcwGvuorQuJKcEG+b0v5OcuRLvlracJLGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:01:e6:44:a7:6d:45:a1:07:61:ff:6b:82:ec:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Validity
Not Before: Jun 28 17:00:46 2025 GMT
Not After : Jun 29 17:00:46 2025 GMT
Subject: CN=d38502488685c2945f2ad5bd796fcee704a8daf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c0:bf:10:96:90:90:58:10:ea:16:a0:d4:4f:
1b:98:dc:7d:8c:46:e5:68:84:84:a5:11:8b:a8:5e:
8f:ff:7e:52:47:94:34:86:99:b3:53:85:2e:eb:f0:
ff:09:2a:d9:5d:3e:0c:a8:a2:ac:c4:8d:3d:1c:ae:
d7:df:40:0c:27:93:f3:5f:92:c9:97:36:a9:19:6b:
0c:d7:1a:b4:53:09:0f:e8:2e:40:64:16:97:09:38:
4c:c8:97:bf:6a:10:53:8e:d4:80:e0:80:46:2d:f7:
d9:f6:a2:f2:62:cb:33:f7:2d:6f:17:aa:18:9a:11:
4b:8a:6e:b3:7a:15:1a:97:0c:5d:93:77:1a:a3:b3:
92:4e:37:49:5b:95:7e:f2:bb:40:dd:d8:2f:47:09:
04:02:4d:18:1e:35:87:ba:74:67:87:c7:5a:f2:c9:
ba:2b:45:08:b6:68:4c:88:12:a5:7f:84:15:42:d8:
ec:e5:02:c0:45:26:16:23:2a:47:03:15:9b:75:6c:
75:91:d3:5a:8f:45:1e:51:7b:0f:4e:2d:64:50:ce:
9f:c7:5e:16:53:54:59:4d:7d:e3:f3:68:4b:8d:a4:
58:ba:8d:32:a7:ab:84:35:ad:55:49:f7:6f:ec:23:
71:5e:d4:3e:10:57:b9:67:eb:fa:80:6e:a7:00:44:
4c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:85:02:48:86:85:C2:94:5F:2A:D5:BD:79:6F:CE:E7:04:A8:DA:F2
X509v3 Authority Key Identifier:
keyid:84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:fc:e9:e7:b1:9e:0c:a5:79:6a:68:f7:65:bb:61:d7:1f:47:
0e:6e:5f:b5:1b:b8:44:8a:77:97:19:41:26:51:27:7e:c3:f0:
22:e7:67:7c:94:da:6c:1b:bf:18:b7:39:c7:c9:9e:fd:0d:66:
cc:da:a3:24:3d:f1:91:f6:43:e0:d7:83:7f:58:7b:ba:26:85:
e5:8b:a6:a9:ed:ef:f4:49:fe:04:27:2b:37:48:cc:cf:d8:85:
24:64:69:2a:42:b3:0f:1e:fc:97:2c:17:94:c8:9a:14:46:d1:
e8:95:b7:98:a2:31:c2:0c:01:b8:16:a4:41:ed:de:a1:93:59:
21:db:54:df:7a:7b:c6:fc:3d:2c:2a:e8:2e:3e:c1:1f:76:f3:
e0:f4:8d:83:8f:f2:f5:d6:08:68:d6:9a:7e:b9:bc:8c:58:f8:
ed:de:e8:c0:11:2b:9c:7b:17:0b:5c:98:1a:f4:fc:8d:76:83:
52:53:0a:70:53:5e:ce:ba:4d:27:d5:f5:96:c1:f0:ad:94:22:
3d:c5:27:ee:8e:ce:01:6b:4e:06:a4:16:97:0d:db:f0:74:06:
a0:78:c2:44:4f:1d:67:61:3c:d4:6f:39:de:6f:3d:5e:96:41:
a4:29:92:39:64:ce:1f:d2:e8:af:48:7a:aa:e2:77:bc:93:65:
69:b7:1c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:07 2025 by rpki-client