Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
File: I6xIaAc5isHO7Akh0E1Amk9_R5s.mft (raw, json)
Hash identifier: X6Yd+wqnUCUjGWBlEzfajPlGj4f4oRCTB4ULunkEAZs=
Subject key identifier: BA:B0:9D:9B:37:31:35:9E:BC:19:58:79:8A:9D:F7:CE:54:C2:B4:88
Authority key identifier: 23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
Certificate issuer: /CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Certificate serial: 0196D852BE2C0F25AA25CCB5965598AC663D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
Manifest number: 1544
Signing time: Fri 16 May 2025 09:00:23 +0000
Manifest this update: Fri 16 May 2025 09:00:23 +0000
Manifest next update: Sat 17 May 2025 09:00:23 +0000
Files and hashes: 1: I6xIaAc5isHO7Akh0E1Amk9_R5s.crl (hash: ZSLddn2+I9zG+WKR3bjwn8LQvxoQovXqcKCYQvaeghg=)
2: bjCXA7rp-GRMTkdMkg_zXfKYrW0.roa (hash: FxnvNnw+IOeKtHJC0KTXpxkTr4pA05J6vavAi4HV2BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:52:be:2c:0f:25:aa:25:cc:b5:96:55:98:ac:66:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Validity
Not Before: May 16 09:00:23 2025 GMT
Not After : May 17 09:00:23 2025 GMT
Subject: CN=bab09d9b3731359ebc1958798a9df7ce54c2b488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:31:38:78:f4:d6:27:16:7c:93:9e:9e:54:b8:
9a:f5:6b:3e:b1:3b:2a:59:ad:5e:a1:f6:f0:e6:c8:
b8:fb:86:73:84:9b:55:89:05:0e:a6:35:7c:47:d1:
ae:f3:1a:20:4f:94:f9:b4:70:e9:94:f9:bd:40:8d:
db:2f:6d:ca:9c:23:a3:eb:0f:b7:b6:cd:5c:35:30:
b6:de:47:9e:0c:bb:80:c3:0d:21:d9:ba:39:d5:4a:
49:cc:48:5c:54:c6:54:83:54:18:41:c2:2b:59:00:
da:a5:a2:85:ec:80:98:1d:03:e7:22:9e:98:b6:40:
c1:c1:e0:21:6b:fa:f6:f8:b9:2a:77:0d:07:10:ad:
9a:3a:ae:af:2c:f4:e2:c6:40:38:78:d2:30:93:30:
8c:4f:1f:fd:4d:03:a6:13:e2:f6:76:e5:54:f3:fe:
4c:b9:fc:be:50:b4:2b:c2:a9:13:f5:5e:5b:bd:dd:
3a:da:ec:3c:0d:66:93:15:d9:10:a1:b6:86:6a:66:
70:ef:12:aa:73:69:a7:67:96:d7:a4:71:16:14:ca:
62:67:0a:ae:87:a5:30:c9:6a:fd:12:b6:82:56:2d:
84:7c:38:f8:67:19:a9:36:31:55:af:41:e8:e8:60:
b2:79:89:f3:27:ec:77:0a:44:c7:b3:2f:49:c0:58:
2a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B0:9D:9B:37:31:35:9E:BC:19:58:79:8A:9D:F7:CE:54:C2:B4:88
X509v3 Authority Key Identifier:
keyid:23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:fa:f7:92:99:e3:de:43:36:3f:f0:fa:88:a1:69:83:20:b7:
24:e3:18:7c:ed:61:17:0b:ce:ed:2c:c0:d8:26:39:7c:36:34:
a2:93:3d:60:4b:9b:41:07:e6:8c:3d:fa:d1:45:00:cf:f3:06:
05:58:63:7f:48:58:df:bc:0b:c0:4e:7d:1f:af:5f:40:c0:85:
1c:a1:9a:a8:9e:91:c0:ec:cd:34:cc:37:88:c8:2a:a3:ea:6d:
6a:df:b4:0c:cf:de:d9:13:bc:00:e0:c3:38:db:89:2a:61:36:
f3:21:95:4a:0a:0d:18:0c:46:c6:c9:01:82:b0:53:d4:3c:10:
03:0d:67:eb:36:9d:e7:53:e9:b9:b9:a8:87:08:99:06:9e:3f:
b0:56:60:52:f7:2a:58:b3:93:01:63:e1:eb:ed:a7:00:8c:5c:
36:bc:06:91:8b:00:52:b1:97:f1:6e:c2:43:e8:43:45:62:ea:
42:fb:93:e5:ce:22:d8:3e:e6:3e:7e:3f:29:04:eb:87:47:ab:
0f:93:d4:7d:b7:c8:c9:a2:9c:c4:74:e2:8c:75:38:5c:f0:21:
cf:a8:82:34:eb:a1:02:b0:84:4f:cd:4c:01:51:47:9b:27:15:
81:60:df:81:85:c8:58:52:a8:81:0d:89:f2:5d:5e:ed:25:e2:
93:5c:8d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:12:52 2025 by rpki-client