Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
File: ixtym3XF-LLp0ViqKWOW1oC-cK0.mft (raw, json)
Hash identifier: A6oseDISQDgUmqsGcSYWxhM4FbotFKnVD47WDZq7F8U=
Subject key identifier: CD:97:73:42:85:77:CD:A3:12:FE:1D:2A:C1:5A:D7:5E:EC:E1:5B:8E
Authority key identifier: 8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
Certificate issuer: /CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Certificate serial: 0197B77C63A654C8A19EA172A25C496448BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
Manifest number: 0CDD
Signing time: Sat 28 Jun 2025 17:01:11 +0000
Manifest this update: Sat 28 Jun 2025 17:01:11 +0000
Manifest next update: Sun 29 Jun 2025 17:01:11 +0000
Files and hashes: 1: VD1pOY6vP5TwIHzsVFu_IinabUU.roa (hash: cVzGsu9mooBFFczgcbG8J8W2oDgnSi/7QeWcMNjjuWQ=)
2: ixtym3XF-LLp0ViqKWOW1oC-cK0.crl (hash: 4jVbV7VjUTmQfo3zZ7loWPKb2Es/kJSkgoZGntDpDCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:63:a6:54:c8:a1:9e:a1:72:a2:5c:49:64:48:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Validity
Not Before: Jun 28 17:01:11 2025 GMT
Not After : Jun 29 17:01:11 2025 GMT
Subject: CN=cd9773428577cda312fe1d2ac15ad75eece15b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c8:14:36:2f:37:79:7d:18:d3:f3:ce:3f:19:
f4:b9:d7:3d:e2:65:a5:a9:99:ac:d6:01:14:a9:50:
58:a3:68:d1:8e:4b:b0:6c:d1:b0:36:a7:bf:2b:1d:
f3:f0:e5:42:6b:5f:ba:e1:d8:81:8b:fa:85:95:eb:
90:d4:6f:ec:ff:25:ef:3d:12:20:ff:f5:7b:e1:17:
13:e3:5a:ef:cc:8a:4c:01:81:e7:c5:33:fb:e6:cc:
1a:93:22:ef:15:28:ed:37:b6:30:8e:e8:60:97:68:
34:ce:68:7d:83:92:84:7f:22:1c:b6:2e:22:ca:1d:
b8:75:c9:52:ce:1f:5e:51:cb:6c:c8:58:fa:fb:5c:
05:04:de:fa:6a:6f:09:31:fd:a9:4a:ac:7d:26:de:
d0:cc:ca:f8:f8:6e:62:2d:1d:46:7c:5f:9f:f3:a8:
d5:b3:9a:a6:a9:f0:5d:3d:37:4d:95:4b:d2:7e:96:
14:e2:13:93:36:0c:b8:d0:88:d0:37:4c:4a:88:01:
36:48:e2:26:6c:7d:2f:83:10:58:5e:ec:25:d9:3d:
ad:8d:aa:5d:10:25:e7:d9:0c:97:70:f9:aa:71:ff:
8a:a4:4a:b5:35:38:a0:95:f5:4f:14:a7:21:97:da:
21:fd:0e:e0:16:25:25:ad:42:05:26:be:cb:31:d6:
73:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:97:73:42:85:77:CD:A3:12:FE:1D:2A:C1:5A:D7:5E:EC:E1:5B:8E
X509v3 Authority Key Identifier:
keyid:8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:4a:f4:3d:85:46:96:f0:c6:27:4e:b6:c6:a9:46:a2:da:5b:
59:4e:0c:ab:7c:8e:74:43:76:b3:98:48:17:6a:35:f0:51:b8:
63:92:5a:0d:c5:35:da:04:0c:94:66:f4:ef:a9:d1:50:7a:ad:
08:78:bc:ab:4c:bf:05:e7:4a:66:5d:c6:aa:2f:2e:92:ad:eb:
90:de:8d:c8:b4:6e:75:c3:3b:82:d4:c1:f9:a5:fb:12:7b:cc:
a8:22:a8:b3:78:de:d8:89:ad:8c:ea:cf:67:31:9d:97:fb:ef:
f3:57:a1:7a:70:82:d4:ec:c0:2f:fd:36:f6:a0:f9:e4:c2:05:
8a:88:57:99:9f:33:93:ae:b3:af:c9:11:b2:26:07:44:1b:dc:
e0:d6:cb:00:6b:b2:96:92:0f:aa:36:be:a3:37:40:12:b3:0f:
b9:cb:9f:01:92:d0:54:ef:94:a4:40:8c:cb:bd:40:1e:c4:9e:
1c:02:80:ae:9c:7c:04:67:24:c6:bb:b7:bc:1f:98:81:3d:6c:
0d:15:0f:f4:3e:d1:83:71:d6:b8:09:cf:47:28:92:9d:44:6f:
b5:9d:cd:6e:3a:88:e4:88:29:4f:cf:d5:40:3f:22:d9:7e:0d:
ad:ad:f4:89:b7:ab:0e:ad:94:e1:a6:bd:7f:a0:cb:5b:85:80:
e2:2e:3b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:33:26 2025 by rpki-client