Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
File: I9SAsHlWF-Libm4YJkN356lsePM.mft (raw, json)
Hash identifier: FtKZkZnwMopt/OY78zFvTMLRT9Rjqr2wSf8Vus6DD+0=
Subject key identifier: 68:75:8A:3D:04:E3:40:48:EE:DF:0B:BD:A0:06:85:79:4E:9D:D4:1E
Authority key identifier: 23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
Certificate issuer: /CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Certificate serial: 0197B8C5EE0B94B38F49C1540B7E65922DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
Manifest number: 143F
Signing time: Sat 28 Jun 2025 23:01:08 +0000
Manifest this update: Sat 28 Jun 2025 23:01:08 +0000
Manifest next update: Sun 29 Jun 2025 23:01:08 +0000
Files and hashes: 1: I9SAsHlWF-Libm4YJkN356lsePM.crl (hash: LzbfKKQcCSH93cWKO3PsvIRMD3DMaH23HkTtjs3vNPo=)
2: aLLfQWJh4e8MWIBxW7MrVPCtfI0.roa (hash: b2SmcSH4KOG2Jvamzo/dYIoESNg2kaU1WJmva5O/UBE=)
3: i2GfKnioIrK4DFco2liFl7JEt9U.roa (hash: Ib8ibm5kzCYxk8mp5/206nEi8+cY3/XjnCkQAxAJBU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c5:ee:0b:94:b3:8f:49:c1:54:0b:7e:65:92:2d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Validity
Not Before: Jun 28 23:01:08 2025 GMT
Not After : Jun 29 23:01:08 2025 GMT
Subject: CN=68758a3d04e34048eedf0bbda00685794e9dd41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:80:e5:1f:ff:73:14:b4:6a:10:d1:7f:f9:67:
e3:b1:47:93:b5:b1:5c:4f:6e:b9:0d:95:24:67:ef:
7b:74:8b:dd:5e:a2:67:0a:d6:70:eb:0a:d9:6b:66:
c5:66:a2:52:a8:13:03:e5:cc:d0:dd:57:97:7e:94:
21:88:bf:f0:60:85:af:71:03:53:c4:ac:34:f6:9a:
35:2b:7f:56:62:a2:e8:bf:58:94:f5:61:c2:ad:9c:
47:3e:a2:6d:b8:19:d0:e0:e9:ba:04:d5:b9:d1:89:
44:6b:8a:bc:c1:2e:69:2c:f4:a8:b3:c6:f9:fe:78:
46:8a:0f:ce:5c:ff:54:30:b4:fe:ac:99:f2:27:7d:
e2:1c:54:45:40:26:4d:93:d5:a8:4d:a1:db:6f:90:
02:5b:27:e7:39:79:52:f9:32:53:46:5a:b1:56:39:
ae:c4:1e:95:68:1a:77:f5:15:27:45:57:59:5d:f1:
f6:05:a3:d6:01:21:b8:c5:26:74:25:da:fa:07:de:
d8:16:94:8d:e1:c2:4a:86:39:b1:a8:4f:90:60:72:
12:40:40:f1:1c:4d:42:82:d0:4f:9c:1a:42:ba:11:
2e:22:1f:fd:f4:d7:80:31:82:b0:23:4e:c5:e9:58:
cf:51:eb:d3:11:52:95:50:e7:f5:29:06:87:b6:1f:
8c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:75:8A:3D:04:E3:40:48:EE:DF:0B:BD:A0:06:85:79:4E:9D:D4:1E
X509v3 Authority Key Identifier:
keyid:23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:48:2e:31:95:6a:77:38:d2:ce:7f:86:18:f5:9d:aa:01:e6:
d6:10:7d:9e:46:79:7b:c5:b6:f4:e9:4d:f3:4a:f5:f6:80:36:
59:f0:f1:27:4c:28:55:41:42:77:74:36:fc:fe:8c:3c:c0:18:
e4:6a:21:4d:bf:1f:40:c5:62:b7:a2:f6:3c:ba:7e:81:f3:6b:
ef:a0:6a:55:1c:93:09:a4:61:1e:17:4a:cb:32:07:0a:41:c1:
0f:5e:40:2d:4b:eb:7a:0a:74:80:3f:48:69:e3:05:88:50:cf:
7f:c4:3f:a4:9e:4b:d5:da:df:6f:7b:04:a6:ed:d7:3d:05:2d:
c7:31:60:91:20:15:a6:90:51:4c:b5:99:e7:96:6c:d5:a1:b8:
63:19:4a:a9:15:80:37:5a:df:48:b1:bf:ba:4a:83:0c:7e:79:
ea:a5:27:6c:85:51:d4:c0:e4:18:78:ce:81:58:b6:fa:77:8b:
04:11:e5:b7:94:2b:ce:85:d1:84:25:38:e9:ce:98:54:4d:cf:
7b:cb:af:3e:5c:e9:0a:f6:65:d4:6a:40:b3:19:3a:2a:a2:7a:
64:1e:24:9c:2a:7d:57:63:89:8a:ac:46:f3:b3:9d:1e:98:94:
d5:da:82:30:36:7f:15:5b:65:ea:49:f2:a0:ec:10:51:54:44:
5d:cd:96:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:34:26 2025 by rpki-client