Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
File: ifnCFo0tgt39inBjfUQBivMLH5c.mft (raw, json)
Hash identifier: fU1z/I6pE5FkfGNHlWPd4ZyrOb18SyDIKlyEcDI2SUk=
Subject key identifier: 43:38:7B:E0:9E:6E:F3:2F:8B:1D:50:EF:35:DB:41:20:75:04:8C:C4
Authority key identifier: 89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
Certificate issuer: /CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Certificate serial: 0197B70E7FB1BC11F9443D3CD7182945C284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
Manifest number: ED
Signing time: Sat 28 Jun 2025 15:01:10 +0000
Manifest this update: Sat 28 Jun 2025 15:01:10 +0000
Manifest next update: Sun 29 Jun 2025 15:01:10 +0000
Files and hashes: 1: ifnCFo0tgt39inBjfUQBivMLH5c.crl (hash: 9Q3kTwHyMCeQXLgAyWwvKEcj6o2hITh/rcHLdkAk7Ag=)
2: spqKrZZlSshpL2qYZip0d0WaBBs.roa (hash: nNDCN5SzdqIQPR24IlLa7l1TyfR2hVXqn06sMz/jemo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:7f:b1:bc:11:f9:44:3d:3c:d7:18:29:45:c2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Validity
Not Before: Jun 28 15:01:10 2025 GMT
Not After : Jun 29 15:01:10 2025 GMT
Subject: CN=43387be09e6ef32f8b1d50ef35db412075048cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0c:9c:f8:db:43:8a:85:3d:da:0f:f0:84:26:
ba:c8:83:cf:8b:85:34:18:cc:73:a5:b1:83:ad:db:
77:6f:c5:ff:b3:03:2a:de:7b:e2:2a:7a:94:db:ed:
91:64:16:83:0d:19:29:26:4e:71:b0:a3:be:f5:5e:
2f:10:01:12:5b:ba:a9:da:28:0d:85:49:fc:28:3e:
c8:63:c7:25:25:81:ae:bd:8f:dd:4c:c8:40:66:c1:
59:b8:2d:a1:c6:61:99:35:17:e6:d0:bf:4c:91:dc:
79:41:a8:ca:f8:06:ac:0d:1b:95:fb:7e:4c:7b:de:
c3:ef:fe:9a:20:0d:f4:57:e6:01:3b:9f:de:94:2a:
f3:51:aa:14:ce:89:52:dd:de:e4:7b:cd:ee:fe:a9:
85:c4:ec:e0:d9:f3:30:bc:cf:e7:61:0c:27:2e:58:
f0:05:c6:b3:99:79:3e:2d:67:36:f4:59:63:29:07:
dc:5c:11:b5:10:6e:7a:c2:bc:e5:1b:57:73:e7:69:
95:86:3e:c8:57:a7:65:70:6f:4f:3f:d1:e4:1c:76:
92:7a:63:af:7a:97:72:6d:59:f6:d1:6e:bc:64:ae:
04:58:5a:32:49:9d:60:e0:b6:13:98:75:f2:0c:f0:
b5:6d:e2:39:de:ca:54:37:b5:57:2c:4d:83:19:88:
9e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:38:7B:E0:9E:6E:F3:2F:8B:1D:50:EF:35:DB:41:20:75:04:8C:C4
X509v3 Authority Key Identifier:
keyid:89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:69:7f:a1:9a:44:81:36:9a:1a:d0:30:fe:27:5e:e8:24:9f:
99:fc:72:92:34:94:e3:80:0d:08:33:c6:83:f2:74:8b:cc:64:
d2:0d:51:83:1b:bd:e8:27:f2:4f:80:a9:6d:a0:e7:76:4b:8c:
14:e8:9c:71:34:41:9f:b8:14:e6:50:ab:cb:2f:3f:72:f6:0a:
dc:40:ae:8e:bc:b7:17:88:5d:8a:3d:97:33:1f:b5:c6:d2:16:
c0:e4:3e:d4:ce:dd:88:fd:8e:e9:47:1d:89:00:16:5c:47:1b:
33:3c:46:51:39:7e:e0:26:b6:7e:27:63:fd:1b:1c:36:a9:5a:
9e:a6:8a:f1:22:fe:9b:c9:6d:ef:14:28:62:0c:b3:f6:28:ee:
90:62:bc:38:f9:9d:29:ce:d1:d9:75:e3:30:fc:bc:06:fe:e5:
fe:19:c9:c4:dd:c4:32:79:6d:38:4c:05:88:36:da:62:50:c3:
b5:d8:46:ff:6d:09:0b:e7:94:99:be:94:7d:6e:a5:f9:8d:2b:
63:bc:81:37:34:8c:26:c9:8a:05:fe:ab:1c:48:5d:07:8e:81:
65:17:8f:cc:ab:47:57:d8:da:cd:56:c9:01:30:03:26:8b:fd:
00:7c:5f:03:12:32:d2:02:d1:1d:cf:52:63:de:48:80:70:14:
d5:99:e2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:25 2025 by rpki-client