Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
File: IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft (raw, json)
Hash identifier: PvM0/Tmd0Uz3wftQUqi024kpW3q+RRuJ5DQ/GOUE8wc=
Subject key identifier: 80:6F:20:74:2C:70:B7:41:5E:D5:7D:16:06:22:D0:C7:00:8E:4E:CE
Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
Certificate issuer: /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Certificate serial: 0197B6325B082151A40863C4074BFF697C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
Manifest number: 1326
Signing time: Sat 28 Jun 2025 11:00:42 +0000
Manifest this update: Sat 28 Jun 2025 11:00:42 +0000
Manifest next update: Sun 29 Jun 2025 11:00:42 +0000
Files and hashes: 1: IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl (hash: YRreZeTJqRDBpd/CXFA1RXl0Ft6D1A5PSdZ2LXCjr+M=)
2: Tj1VT7s8ilnWaRH5FDEx4ErgOfw.roa (hash: EAnVAxYXeZnLn3O7V7JRGZpaiw9YJLofd+adf3s7hWw=)
3: z8gJT3mWJvoCjNtGavez3w-sptI.roa (hash: rAtA37xRZ8BRiEnR3BviWDsE+vEFga17zSGIolCXdPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:5b:08:21:51:a4:08:63:c4:07:4b:ff:69:7c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Validity
Not Before: Jun 28 11:00:42 2025 GMT
Not After : Jun 29 11:00:42 2025 GMT
Subject: CN=806f20742c70b7415ed57d160622d0c7008e4ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:58:44:eb:7c:ab:3c:60:68:64:c1:83:93:cc:
f2:e1:8e:e7:70:84:e1:3c:f3:6b:1b:fc:ad:c9:f0:
4d:5c:20:12:54:b7:e5:f4:5b:31:20:32:9a:a9:92:
25:0f:00:46:cb:58:a6:63:72:26:c3:61:2f:34:82:
46:a5:1f:3a:77:bd:d8:35:61:00:c1:2a:f7:ee:63:
a5:3f:91:2f:02:32:91:3e:f8:c2:ca:82:b6:0f:eb:
5c:36:ce:d7:bc:7b:a7:d6:e9:3b:af:e0:42:c7:42:
51:d5:d0:b9:2a:6d:d9:f8:8a:a6:54:04:ab:40:a9:
f2:c1:f2:71:1f:1c:ef:a3:eb:44:79:09:c7:2a:51:
35:a9:14:d0:b3:a9:ca:b6:e5:2c:72:1a:91:da:61:
ce:90:59:5e:b1:fe:fc:66:f1:91:6e:b5:c9:ae:ba:
8d:fe:20:ff:13:6a:a5:9b:69:bc:15:d1:da:30:3a:
99:e5:dc:45:1e:06:9a:e6:58:9a:8f:32:39:c5:3e:
21:1a:2e:cf:7d:86:f3:d5:38:35:35:43:b2:ae:35:
a5:93:f2:80:58:35:7c:5c:e0:fa:77:4d:20:e9:03:
9c:46:0a:d7:1d:be:c3:10:b4:7e:35:e6:a9:21:a0:
9d:b4:e4:88:7a:6e:b1:dd:bc:62:b1:26:66:72:a1:
95:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6F:20:74:2C:70:B7:41:5E:D5:7D:16:06:22:D0:C7:00:8E:4E:CE
X509v3 Authority Key Identifier:
keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:47:19:de:8e:66:34:26:a8:33:3d:69:60:be:57:c3:eb:7e:
e0:23:43:f0:a3:fd:56:21:1b:02:a4:1d:f8:b8:f7:c1:af:1e:
25:dc:5b:ab:5c:4a:1a:34:78:3c:91:76:02:da:4d:39:31:80:
af:dc:f5:41:7a:f0:9f:a5:73:f1:ff:53:1a:4d:da:31:dd:83:
84:4c:43:7c:f7:37:1e:d5:fe:63:33:35:43:24:67:57:12:b4:
61:8f:b3:db:51:2d:8c:cc:78:f4:18:c0:15:8f:7b:1a:6e:2e:
af:10:1b:04:2d:93:19:8f:55:e3:9b:4b:cc:f8:b3:5e:f9:4f:
83:bf:43:eb:95:d4:d8:ad:f9:c4:93:64:ec:46:c4:c2:2b:4a:
f2:81:cd:e7:d4:77:a8:66:0e:76:09:e5:d5:cc:c0:35:82:38:
5b:6f:83:47:49:75:92:16:08:d8:46:b0:46:f5:c1:27:6b:a3:
1c:83:fd:45:de:d2:72:35:4b:6e:2a:63:01:cc:71:f9:b8:60:
0f:be:dc:7e:47:85:66:ca:37:e9:f7:b5:80:33:37:3c:ff:8b:
11:df:fe:15:51:a5:9e:44:9f:c5:e8:33:6c:73:74:04:5b:03:
38:d2:14:06:36:51:ed:9c:2e:84:c1:68:61:1d:4a:d1:8d:38:
93:6f:c5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:33:03 2025 by rpki-client