Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
File: ioNVXKoizpubFoNQOhTjzdg24Bs.mft (raw, json)
Hash identifier: +IZJrqpsjLTltwMjxx4Gcx+ELQDIywOxa1T8mjzwKYs=
Subject key identifier: 80:DC:E5:26:A2:F3:08:D8:BC:7F:66:89:3D:09:FC:1C:2E:FC:B2:77
Authority key identifier: 8A:83:55:5C:AA:22:CE:9B:9B:16:83:50:3A:14:E3:CD:D8:36:E0:1B
Certificate issuer: /CN=8a83555caa22ce9b9b1683503a14e3cdd836e01b
Certificate serial: 0197C2A46CBF118663E96708440724CC11A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
Manifest number: 0E29
Signing time: Mon 30 Jun 2025 21:00:44 +0000
Manifest this update: Mon 30 Jun 2025 21:00:44 +0000
Manifest next update: Tue 01 Jul 2025 21:00:44 +0000
Files and hashes: 1: 8ltVewMht9tkkoh6ikhHpmbvP28.roa (hash: qZH42qz06gavyuSaiRbHo+yLoZK1W5iI0G1jpEdB8DA=)
2: ioNVXKoizpubFoNQOhTjzdg24Bs.crl (hash: AklKtDDnEdLy84WTUovNsAXSCWuXpkQTqbNmxrv4kIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:a4:6c:bf:11:86:63:e9:67:08:44:07:24:cc:11:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a83555caa22ce9b9b1683503a14e3cdd836e01b
Validity
Not Before: Jun 30 21:00:44 2025 GMT
Not After : Jul 1 21:00:44 2025 GMT
Subject: CN=80dce526a2f308d8bc7f66893d09fc1c2efcb277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:a3:2c:8a:c4:b8:c2:d8:a3:d1:33:88:5a:
34:2e:c5:b5:5f:5f:b1:86:20:4d:40:4a:67:5b:90:
25:ef:0b:ec:9d:9c:e0:6f:20:94:c2:76:af:8d:2b:
79:18:b1:3f:83:3f:e7:c5:31:65:2f:8f:89:df:64:
9f:01:3a:58:c2:6d:ab:41:da:40:4e:e1:20:43:d8:
8c:ed:47:6d:07:10:69:e4:e5:9a:39:8e:b5:63:b9:
52:bc:8d:f4:c8:d8:16:92:48:75:85:15:49:2b:d3:
fc:33:ec:2b:e9:53:5e:cb:4c:cc:78:08:fa:4d:33:
d3:5e:96:d3:74:be:08:76:91:89:de:13:b4:53:ac:
b0:b3:f0:cd:48:a9:24:ec:9d:b3:2f:b4:c9:3c:f3:
21:cc:2a:a2:4c:07:96:51:47:91:59:82:d9:57:62:
94:e8:f3:60:25:c6:cb:28:5d:8b:83:9e:86:76:5e:
72:dd:58:d2:d9:77:6a:e1:f3:6e:97:e6:c7:64:63:
85:c1:2c:32:7b:d4:31:f6:0e:0d:c7:30:2c:66:58:
d6:00:9c:6f:9c:e2:52:54:dc:92:a6:34:21:1d:52:
fa:cf:5b:08:65:d7:64:8b:7a:5f:77:31:ec:d2:a1:
e0:a9:20:a5:e7:53:99:50:31:77:c3:b7:24:65:28:
1d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DC:E5:26:A2:F3:08:D8:BC:7F:66:89:3D:09:FC:1C:2E:FC:B2:77
X509v3 Authority Key Identifier:
keyid:8A:83:55:5C:AA:22:CE:9B:9B:16:83:50:3A:14:E3:CD:D8:36:E0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:9a:45:18:b4:6f:aa:63:d3:88:2d:e1:30:30:ab:5b:9e:95:
1e:90:ba:9f:75:da:f6:e9:9e:e8:8f:9b:45:57:e0:11:c6:b0:
2a:37:e0:b1:e7:66:f9:ec:84:d9:1c:71:a8:ea:8a:e2:14:8d:
a1:9b:ab:f7:a2:29:aa:74:3e:f6:98:b6:80:19:a5:3d:be:a0:
cd:d3:71:b9:36:d0:ce:aa:e8:90:71:ce:f5:1d:2b:b0:bf:cb:
82:35:d7:1a:0e:fd:02:34:80:ca:0f:2e:ef:45:49:73:7b:b5:
29:c8:d9:cf:2c:62:92:cf:21:15:b7:7e:31:a2:1b:19:4a:0d:
92:86:e6:f9:4b:48:2a:53:c4:e9:e8:65:05:35:85:3d:5a:d4:
4c:76:42:15:14:78:75:6b:0e:a1:46:cc:c7:65:b7:9b:ad:57:
a2:4c:7f:bb:01:41:95:b2:5c:ae:08:f0:53:2e:47:e1:0d:b4:
32:e7:79:48:a0:46:e0:8b:ea:10:ee:0b:a7:ab:cc:28:5a:90:
87:b5:b9:0c:a3:e0:79:79:3c:3f:09:00:b6:43:b3:75:39:03:
05:51:ed:9d:92:8e:e0:7c:2e:6f:01:4c:db:1d:d8:2f:f8:66:
12:c3:dc:66:ba:4c:a5:dc:db:4e:3f:93:c5:e8:84:38:a6:7f:
cb:88:70:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:46:31 2025 by rpki-client