Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
File: IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft (raw, json)
Hash identifier: VLQ0rsfzvASpAUrh68DiBj9gKiwDfIi5ihU/NqPJTE8=
Subject key identifier: A2:D0:E1:00:DA:8B:91:70:E6:AF:07:E0:28:C8:D0:FD:31:EC:6B:F3
Authority key identifier: 20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E
Certificate issuer: /CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e
Certificate serial: 0197B7459C9F9047B460A86C0B891D7EE910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
Manifest number: 153D
Signing time: Sat 28 Jun 2025 16:01:21 +0000
Manifest this update: Sat 28 Jun 2025 16:01:21 +0000
Manifest next update: Sun 29 Jun 2025 16:01:21 +0000
Files and hashes: 1: 5TmF660osVLf2yedLZYIouqKzCQ.roa (hash: svEuw+A3XrP85kyKwdSMhC87V3nCBDwlLWE+iKrkH+s=)
2: IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl (hash: oqTHdsVTwy/XoPBMyhXtaCE81RpRWRW1SuhdST+02aI=)
3: QbfQw6PQWXMnUYTcNMeoW813ttw.roa (hash: g9TBhQ7bZYV+JTfg685xMP7NzWGbPIajKmZ/OPgHv/k=)
4: SqW3-Pav388bYoCFb9onFjXDUEM.roa (hash: rQ+0p4O5Q843ntXsLKc+VAqP1ejZ7AJIeWPPGt1vzco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:9c:9f:90:47:b4:60:a8:6c:0b:89:1d:7e:e9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e
Validity
Not Before: Jun 28 16:01:21 2025 GMT
Not After : Jun 29 16:01:21 2025 GMT
Subject: CN=a2d0e100da8b9170e6af07e028c8d0fd31ec6bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0c:fd:7d:2f:be:fb:e0:2b:86:04:c0:92:24:
1a:71:52:2a:62:81:c3:2d:6b:ed:63:e9:6d:bb:ac:
1b:ed:42:fa:56:dc:7d:f6:2a:11:63:b2:c3:3a:f6:
01:6f:5d:b1:5d:2c:80:92:fe:7f:82:77:77:2c:b1:
9b:f2:5d:0e:42:f0:22:65:8e:bc:07:7a:ba:94:d0:
db:36:3f:e7:87:16:c2:7a:b7:02:13:9c:5c:16:44:
8b:00:fc:48:86:7c:c2:ac:39:ad:09:02:d0:14:9b:
31:4c:f1:88:7a:38:1b:39:50:96:b8:29:c9:5a:21:
17:09:5e:a7:6b:4c:50:b1:dd:72:48:ea:f5:d3:db:
27:2d:6c:0b:1c:ea:c4:fd:5f:2e:55:74:e2:1f:33:
d3:15:12:6b:0d:78:05:cc:4d:59:86:86:96:b6:35:
bc:15:79:8f:7e:68:42:0d:d5:07:9d:89:82:59:c1:
71:57:61:2e:2c:a3:cd:be:b7:9b:8c:b0:47:a5:11:
de:80:a1:23:cf:9a:fc:cd:85:f7:11:8e:a2:94:cc:
05:f4:7a:52:f9:c0:d8:4a:7d:49:66:05:74:ac:a1:
5b:de:3b:aa:d9:5a:b1:04:ab:cb:03:a0:fa:c1:9f:
d0:35:99:72:a5:37:a8:1e:3d:f5:4a:cc:8f:6c:95:
14:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D0:E1:00:DA:8B:91:70:E6:AF:07:E0:28:C8:D0:FD:31:EC:6B:F3
X509v3 Authority Key Identifier:
keyid:20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ac:16:11:33:b9:c9:ea:d8:aa:17:67:89:05:85:92:d6:20:
d6:fe:04:1e:72:61:c4:e7:df:8a:84:58:c1:2e:a3:c4:1c:69:
b5:4a:10:9e:c8:ed:25:68:41:08:20:5d:8d:2b:04:68:13:b9:
17:95:86:df:f4:0d:fe:80:b3:88:72:de:8b:9f:19:2b:a9:c3:
6b:ab:f1:24:a5:3f:4b:f7:05:cb:41:c6:49:76:ef:9d:52:05:
4c:80:57:ea:87:4e:2f:da:57:67:80:b4:75:09:54:78:6c:96:
a9:29:94:20:08:4c:32:2a:09:9b:1a:cb:31:fb:fa:15:6f:23:
a9:61:6c:8c:ac:0f:94:91:af:8d:05:98:18:3f:bd:ae:17:35:
30:6e:48:53:fc:e8:f2:a8:bb:ee:04:ac:29:2e:cc:f6:60:ff:
3e:3a:a5:e9:fe:66:3f:8f:23:85:f8:f7:6d:61:83:c6:be:82:
4d:65:ee:5b:a7:94:2f:95:69:53:4a:ee:6f:87:69:26:6b:6d:
7f:ec:01:76:b6:07:d2:12:c9:99:d8:fc:cf:d1:a0:a0:a4:17:
25:c1:e3:01:36:28:d9:0f:5b:b9:d2:5a:db:99:65:90:23:7f:
c9:64:ad:df:ee:5e:c2:34:01:6d:b3:9e:da:7d:0e:a8:c0:71:
0d:91:3b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:17 2025 by rpki-client