Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
File: iiQuCntgz9644OA_-a7DPlq30sg.mft (raw, json)
Hash identifier: L7nVmh06/58lp3F76YbGEVXjh9BK1SAwZbXdQo7vHgc=
Subject key identifier: 4C:68:B9:A2:97:BB:C4:E8:47:9F:EB:78:D6:0B:6E:7D:83:6D:97:EC
Authority key identifier: 8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
Certificate issuer: /CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Certificate serial: 0197B77CBE4503AFB5151AADE632E1C9ABC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
Manifest number: 09C3
Signing time: Sat 28 Jun 2025 17:01:35 +0000
Manifest this update: Sat 28 Jun 2025 17:01:35 +0000
Manifest next update: Sun 29 Jun 2025 17:01:35 +0000
Files and hashes: 1: iiQuCntgz9644OA_-a7DPlq30sg.crl (hash: TfKaXY6hEARBRXBiuywbTn8uyTDztp/7gU88A1K70e8=)
2: siJjmLBZP9diFC7BYX9p7SQAfZw.roa (hash: Gsh0pNObMeNVow5ebFzkqw16IE2NyBLNNUC8IDCqBag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:be:45:03:af:b5:15:1a:ad:e6:32:e1:c9:ab:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Validity
Not Before: Jun 28 17:01:35 2025 GMT
Not After : Jun 29 17:01:35 2025 GMT
Subject: CN=4c68b9a297bbc4e8479feb78d60b6e7d836d97ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8b:d8:83:fe:63:54:a0:b0:03:f1:e1:42:aa:
22:95:07:38:ed:06:63:f4:07:75:01:af:bb:00:4d:
ad:fb:08:5c:e7:45:7d:ad:a3:9f:14:58:23:90:a1:
b7:40:47:a0:04:b4:23:62:58:04:3b:b2:8a:08:ed:
48:22:54:35:60:55:21:e1:21:78:3c:ba:f0:14:f8:
c6:ba:a4:ff:57:69:4f:9b:5b:3b:00:6e:fe:94:e2:
3f:8b:a6:47:f8:6b:fc:c8:8e:25:f2:35:52:57:15:
9a:3b:ae:82:e7:55:ee:4b:1f:dc:66:19:38:a1:24:
06:be:e2:39:fb:49:5c:bc:27:f1:31:f9:64:7a:57:
22:fd:01:03:13:83:ae:b0:9d:2b:41:ec:9f:d8:5d:
0f:3d:67:4d:5a:e2:2e:64:6d:76:e2:f4:74:fa:78:
dc:90:db:4f:8a:f3:ab:ef:91:e9:53:c5:fe:c1:80:
b3:3d:94:3c:11:45:2c:65:a9:7d:cb:d6:7d:04:8a:
1d:98:95:f7:53:43:f1:10:cc:ae:8a:dc:d9:12:18:
bf:44:db:bf:ad:f1:d1:ad:36:68:91:d5:29:1f:4a:
96:1a:27:e8:3b:9a:b3:22:61:81:34:3c:3c:a8:b3:
52:59:22:a9:1c:ed:3e:20:13:2b:ad:5b:1e:4f:3f:
5d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:68:B9:A2:97:BB:C4:E8:47:9F:EB:78:D6:0B:6E:7D:83:6D:97:EC
X509v3 Authority Key Identifier:
keyid:8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:9c:7f:15:46:1e:4c:cf:8e:a3:62:8b:bf:d4:1f:66:bc:af:
1e:5e:e7:e5:25:a8:d9:a4:fe:f6:c1:5c:e5:07:2a:2b:bd:6e:
81:29:c0:02:a8:95:99:2e:9e:13:e1:f3:57:5d:b6:c9:c8:2c:
5f:fd:e4:0b:58:bf:63:d9:c0:77:2a:f6:f2:82:fc:8e:e0:f6:
8c:e6:f3:e9:66:2c:6f:44:62:e0:e1:4b:8a:4b:90:d3:d0:4e:
a8:3a:75:03:54:64:51:9a:45:3a:00:cd:96:33:0d:80:c9:de:
8c:0f:81:24:f0:05:1b:9e:99:5d:13:93:34:ca:f9:da:bb:25:
32:4a:25:a8:91:a7:54:39:94:73:3a:5a:44:f7:39:28:01:17:
8b:7c:8e:9b:0b:d5:9b:e4:b1:81:ff:e7:2b:2e:d1:1f:7f:79:
ec:ad:0d:6a:b9:3c:b0:e4:6a:3a:a9:74:6f:dc:43:08:45:a8:
8f:6b:2c:7c:60:96:14:79:ac:ef:e2:24:cd:49:bf:40:19:ff:
e9:a5:6d:88:eb:e6:ff:0e:b2:61:1a:a8:83:a9:d5:e1:7b:9e:
93:96:b7:83:06:65:77:89:62:36:b1:4d:09:50:4b:56:c1:4c:
a7:7e:36:c7:05:b4:04:02:46:77:16:4e:a3:da:78:7f:e9:2e:
07:e8:e1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:32:59 2025 by rpki-client