Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
File: IxIMamyM8XJufUjjFKFszQXvhgc.mft (raw, json)
Hash identifier: BTCGQYzbgViHWzeQFveG7yKDuUBN7Ep5aASHv7URaLM=
Subject key identifier: E0:A6:BB:11:A8:8A:93:97:20:49:E2:D2:2E:38:ED:03:6D:9A:AC:F2
Authority key identifier: 23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
Certificate issuer: /CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Certificate serial: 0197C1C9553207CA72531634B5044C8499CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
Manifest number: 15BE
Signing time: Mon 30 Jun 2025 17:01:26 +0000
Manifest this update: Mon 30 Jun 2025 17:01:26 +0000
Manifest next update: Tue 01 Jul 2025 17:01:26 +0000
Files and hashes: 1: 3ljJaz1a5cIjZ8YC3COzHNt_p94.roa (hash: bMQghzShphucnVw2AcHoK8ZlibkBQSkRsxgVMSWXPUM=)
2: IxIMamyM8XJufUjjFKFszQXvhgc.crl (hash: f8zWhFAEdhE0PmGbcYOPnIAc03ifMAIyPTaJ+9EAO+4=)
3: PVPdjWfp5158kOXCBG02gGqvS2k.roa (hash: yHL6CrBTx/Lx7UNatKVR0PW+xHw8+FZidWVfHY4s2Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:c9:55:32:07:ca:72:53:16:34:b5:04:4c:84:99:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Validity
Not Before: Jun 30 17:01:26 2025 GMT
Not After : Jul 1 17:01:26 2025 GMT
Subject: CN=e0a6bb11a88a93972049e2d22e38ed036d9aacf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:55:84:a9:64:11:9f:91:27:59:4b:ba:95:e7:
37:d7:15:34:8a:8a:3e:13:ac:78:98:85:19:aa:39:
f7:cf:b7:65:2b:98:0b:ee:19:ea:b5:3b:0d:c4:59:
ff:84:bb:ad:18:c8:f1:17:47:4c:72:d4:ef:97:76:
f4:07:96:1b:50:5e:b1:ee:02:38:a0:76:be:bb:32:
56:4c:37:46:a5:4f:98:8a:76:64:af:6d:4a:31:93:
12:e5:7a:91:9f:46:20:3b:4a:40:cd:3b:5d:6b:3f:
59:5c:79:b5:cc:dd:a2:0e:d4:6c:4b:a7:56:7b:bc:
28:4a:d0:58:f1:9c:79:96:42:c4:ab:0b:25:16:58:
b8:ca:c2:43:a2:7c:4c:01:2f:aa:12:51:9b:ce:b7:
0f:11:3d:fb:dc:3b:bd:a7:a2:6b:a2:e9:d7:71:da:
d7:1b:f0:40:b7:90:77:04:e5:34:e7:66:9c:9d:f8:
c9:a7:e9:b4:18:51:4e:c9:51:f7:15:cd:14:20:9a:
2f:59:68:b9:87:56:b6:4c:65:ad:94:0a:54:1b:82:
0b:d6:4d:99:9a:e9:92:c8:cb:34:11:5f:8e:59:27:
6f:f0:c5:e5:d8:f9:d7:53:44:e5:f9:53:fa:dc:ed:
f5:cc:36:11:d0:84:a7:7e:e5:c3:7d:b5:40:50:69:
74:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A6:BB:11:A8:8A:93:97:20:49:E2:D2:2E:38:ED:03:6D:9A:AC:F2
X509v3 Authority Key Identifier:
keyid:23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:71:83:d3:1f:49:c4:54:7f:db:b2:15:66:55:19:40:51:67:
b7:f1:95:16:ae:90:5c:b2:28:dd:b2:8e:1e:e9:d4:6a:76:5b:
63:1d:f7:0b:70:b8:cb:9a:69:ef:03:fd:2c:7a:18:73:c2:6c:
58:9b:9c:5d:8a:df:02:0d:c2:dc:81:90:da:33:98:b2:73:ef:
80:e8:f6:71:d7:e8:c1:1b:6c:5f:1b:09:18:3f:96:c3:ec:3a:
4d:84:13:3f:00:5f:c6:82:ae:1a:25:8a:14:32:75:17:96:96:
f8:13:a5:a5:7b:c6:12:85:9f:6d:a9:7d:8f:83:41:41:7c:04:
20:7e:f7:e7:f3:42:5c:6e:7f:c9:cd:3e:ea:69:cf:fb:f9:05:
bc:b5:81:f4:d3:8e:52:ad:fc:22:73:3d:d8:c2:d3:24:f3:29:
0d:37:32:0c:2e:ea:41:eb:12:f6:f0:1a:6d:4e:98:ee:f0:b8:
f4:45:39:97:57:2f:8c:93:df:56:e5:b7:fc:a4:19:0f:4b:b1:
ab:c3:65:6c:08:43:8b:8a:2f:bf:34:a9:cc:75:14:b6:3b:e4:
b9:53:b2:26:94:19:66:e3:49:43:20:86:a3:5d:4d:bc:bd:e1:
e5:8e:4f:5d:31:11:43:80:73:29:0b:94:98:9f:b3:16:c1:61:
c1:10:0d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:46:32 2025 by rpki-client