Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
File: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft (raw, json)
Hash identifier: ZJ/4jPcfHfUaqJ4tE2TxxBFvOHXI7bZsZbKS0Xo1/oE=
Subject key identifier: 2C:7D:3E:39:21:26:7B:5D:A3:63:13:6C:E4:7F:C8:64:6E:DF:E6:BD
Authority key identifier: 23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
Certificate issuer: /CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Certificate serial: 0197B7B325085CBD092221E1A4DE7ADBAEBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
Manifest number: 0B31
Signing time: Sat 28 Jun 2025 18:01:00 +0000
Manifest this update: Sat 28 Jun 2025 18:01:00 +0000
Manifest next update: Sun 29 Jun 2025 18:01:00 +0000
Files and hashes: 1: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl (hash: wBAnXnmhQj+t7JwNyaR2635eaQ/bkRbKXYJEJrUkD5Y=)
2: LCSxsz-FQ4GzwZw8Odnzg4_wz4s.roa (hash: cOtRnPje7E9WAoJFvY2RM5FM1p4R+PS2ZqyaTPw4hic=)
3: WWsWrGhHJPhxsXXJtUhA3vzECwE.roa (hash: LLPjYgAmQluoQLBe3s0wxjIyXNJ82uAq8ra1WEAoLDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:25:08:5c:bd:09:22:21:e1:a4:de:7a:db:ae:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Validity
Not Before: Jun 28 18:01:00 2025 GMT
Not After : Jun 29 18:01:00 2025 GMT
Subject: CN=2c7d3e3921267b5da363136ce47fc8646edfe6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fc:8d:29:28:07:47:01:62:0d:d3:fe:ec:a5:
93:15:e4:45:75:6f:81:93:c2:d2:58:73:8a:19:69:
f6:71:13:b5:ad:8e:b9:66:44:77:40:c4:46:7f:15:
6c:14:97:d9:77:00:2a:9a:f8:33:a0:b3:74:8c:bc:
9c:48:2b:4a:b8:97:f7:11:51:b0:3a:2a:e8:27:4c:
90:62:20:07:03:11:d4:71:d6:47:c0:81:1e:d6:de:
67:2f:62:d3:3e:1f:0a:b5:dd:01:58:17:f2:f5:f4:
60:35:01:79:b0:f9:c4:5d:b0:c5:a7:e8:15:8a:0b:
5e:4f:41:72:9f:e8:67:d0:51:d2:0e:32:aa:f4:58:
53:e0:80:22:35:f5:b8:fd:42:1a:c1:01:99:e0:11:
04:62:91:e6:33:16:f6:23:cf:26:9b:c1:09:30:d9:
f5:45:a2:9b:39:f5:39:49:6a:ef:39:cb:1a:8f:cf:
43:91:cc:c5:48:e6:e5:7a:ba:20:47:94:1d:7c:4c:
1a:45:79:f8:27:ff:56:7d:1c:c5:49:9e:e9:b6:8b:
aa:8d:92:55:53:0e:88:f8:9e:c2:89:58:80:4a:bd:
46:ea:23:c2:0b:47:36:48:cc:82:02:65:0d:b7:90:
97:4c:9c:0b:6f:49:2d:2c:7f:da:f2:10:8f:7a:99:
e5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7D:3E:39:21:26:7B:5D:A3:63:13:6C:E4:7F:C8:64:6E:DF:E6:BD
X509v3 Authority Key Identifier:
keyid:23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6f:e9:21:10:4e:90:9b:e2:bc:28:3e:d9:19:ef:bc:62:34:
09:2c:12:15:18:95:3f:a3:12:9a:25:d9:7d:5f:da:bd:71:86:
81:72:8d:e7:b4:01:c0:48:0f:58:f1:09:93:f1:3b:2d:c2:21:
0b:2c:7b:1f:df:19:a9:c2:38:c1:87:d3:21:10:b8:41:5a:c0:
24:a9:25:6d:66:65:cb:0c:4c:00:a7:4a:bb:8b:9b:cd:4f:f7:
19:ad:b7:ee:5f:6c:bc:a9:02:0f:79:47:0c:19:3e:86:79:2d:
47:8c:a8:fa:a7:77:38:44:0b:21:a5:90:3d:d2:11:f5:ea:e2:
aa:b6:53:95:6f:8e:dc:50:7e:32:be:86:6b:d7:af:25:b3:ed:
e7:e9:a1:9d:01:59:86:4e:22:4f:90:e2:34:89:af:4d:66:7b:
6d:fb:53:be:f0:0c:89:9c:3d:59:8d:dc:a5:63:48:4a:a2:0c:
ad:98:b6:06:98:90:47:31:a0:f8:8b:56:e2:1a:20:88:9a:c1:
0d:76:6c:db:f8:55:ca:58:85:72:4a:f1:70:91:98:cc:b6:61:
4f:7a:fb:f1:19:98:e4:8b:bd:ca:92:8a:a7:0a:2d:0f:d3:15:
6c:bd:2c:36:81:7c:e7:77:eb:51:c8:5c:88:40:e9:07:21:e2:
5e:c9:d5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:43 2025 by rpki-client