Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
File: IURHLRaXNp2DK6Em5eFyMqzV9fM.mft (raw, json)
Hash identifier: wnZ5t9y96OJcBvlEEb2fWZpStimIz3m99eNY/n/yl9Q=
Subject key identifier: 1C:72:20:CF:1D:BF:F3:75:59:6C:15:80:A8:A6:C1:49:5A:A0:E9:8B
Authority key identifier: 21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
Certificate issuer: /CN=2144472d1697369d832ba126e5e17232acd5f5f3
Certificate serial: 0197B632AF2DB0CE401F52855995576AEF17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 11:01:04 +0000
Manifest this update: Sat 28 Jun 2025 11:01:04 +0000
Manifest next update: Sun 29 Jun 2025 11:01:04 +0000
Files and hashes: 1: IURHLRaXNp2DK6Em5eFyMqzV9fM.crl (hash: YEfzUmhK0mkFz2aTBO4swS/9z75t5pYpxoFJEiM3qkM=)
2: jxP3zWsY1gZpCGxBiysaY7EpSc4.roa (hash: 8YozH8Bcb75tXVAEGcttViIiDw3bZdzWBPyjFnX3Zdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:af:2d:b0:ce:40:1f:52:85:59:95:57:6a:ef:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2144472d1697369d832ba126e5e17232acd5f5f3
Validity
Not Before: Jun 28 11:01:04 2025 GMT
Not After : Jun 29 11:01:04 2025 GMT
Subject: CN=1c7220cf1dbff375596c1580a8a6c1495aa0e98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:75:ca:17:a7:8e:6c:dc:ec:30:d1:3a:93:62:
ed:59:33:30:f1:a2:6a:85:3b:ee:57:9c:fb:68:8c:
9e:54:43:26:f9:fb:5a:88:1b:bd:4f:f2:8e:d2:2b:
49:0b:f6:8d:17:a9:35:3f:7a:fc:b2:1c:cf:25:a6:
24:e8:df:38:d6:dd:23:14:a5:68:52:69:67:b2:e3:
e0:7f:68:7c:2b:71:46:b5:4a:3f:34:c7:85:d6:b5:
2b:11:06:94:c3:91:fd:9c:7c:4a:c2:38:b9:7f:a6:
45:e7:63:55:d3:ab:c5:67:a0:27:9e:2a:72:8a:f5:
2c:3f:05:4d:c2:4a:32:62:45:7c:78:ff:85:1d:0c:
78:33:d0:05:5f:bc:84:26:92:3d:c2:5a:a8:6b:8a:
52:8e:27:91:90:cd:cd:1d:c0:fa:20:6d:36:1f:a5:
80:16:a9:ee:bf:4b:5b:28:78:b3:3a:53:99:1a:2d:
f6:63:b9:b3:09:a2:94:91:97:cf:f0:72:0a:43:ce:
fe:73:94:e0:30:5f:00:f5:a8:71:ce:3b:49:32:96:
18:92:ee:5a:75:80:1c:fb:69:d6:ec:bf:cb:4d:09:
74:61:48:d6:25:1a:5d:7c:2e:5c:40:65:75:eb:fd:
71:9f:b9:0a:5f:e7:48:4f:f8:0b:e0:e1:00:30:29:
ed:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:72:20:CF:1D:BF:F3:75:59:6C:15:80:A8:A6:C1:49:5A:A0:E9:8B
X509v3 Authority Key Identifier:
keyid:21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a8:04:74:a0:9c:0b:69:2a:c9:77:59:8f:4b:01:b9:94:a6:
65:59:8f:df:44:ba:04:6c:d7:95:e3:6e:e8:ff:c9:41:36:6c:
d6:42:dc:5e:01:7f:61:54:bc:78:aa:2c:46:81:b1:38:52:2b:
0c:f3:2b:c3:8f:bd:26:0d:58:6b:34:50:07:33:ac:81:0e:34:
78:b3:ab:6d:ac:3b:0b:6d:70:b0:50:f9:dd:d7:6c:71:cb:4a:
e2:b6:bf:b2:f1:51:2a:7f:66:20:c9:dd:4e:d5:25:fc:91:e7:
01:25:08:22:b6:41:88:ff:94:a7:8a:ed:b3:16:c6:a2:43:45:
96:95:f5:6a:a8:4a:f4:32:af:cf:d5:63:1a:56:f1:3a:1d:64:
f1:1d:db:ca:8a:88:61:b5:29:a6:eb:0c:6c:d5:a0:d1:9b:89:
b4:74:2e:09:7d:94:54:b7:1d:b5:92:41:5b:34:c4:fb:cb:2c:
60:2c:b5:76:43:b7:7e:6c:f5:1a:bb:bb:02:3f:eb:70:f5:9a:
a8:f8:31:40:45:8a:73:3d:3a:cb:ff:29:0a:c9:4c:80:13:62:
66:3a:82:ff:28:1d:e5:35:34:92:a5:b7:2f:df:fa:d4:e0:05:
31:28:f0:0b:f4:12:e0:cf:78:06:55:49:2a:17:c0:19:3a:30:
0d:47:45:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:35:55 2025 by rpki-client