Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft
File: Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft (raw, json)
Hash identifier: O1bdUss243E8fjP35YbfQq+CJUMLeaxazPWo43R8A90=
Subject key identifier: B6:8F:08:49:A7:04:BC:B5:A0:12:22:18:73:E9:5C:A2:A4:01:C3:F1
Authority key identifier: 23:28:72:F4:31:AD:A9:B6:82:6C:5F:08:97:EC:4E:53:42:09:2E:98
Certificate issuer: /CN=232872f431ada9b6826c5f0897ec4e5342092e98
Certificate serial: 0198D515D547778846049F0F97ECF6A736D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft
Manifest number: 03A9
Signing time: Sat 23 Aug 2025 04:00:34 +0000
Manifest this update: Sat 23 Aug 2025 04:00:34 +0000
Manifest next update: Sun 24 Aug 2025 04:00:34 +0000
Files and hashes: 1: 48SAL-XLUksWWK1voy4rKInz7oY.roa (hash: gFJO835mNcJuKRXk34iwBhwCN0pZ40KaHdrECvT9LmA=)
2: Iyhy9DGtqbaCbF8Il-xOU0IJLpg.crl (hash: ywafG/GtY3X9BqhTkxemKcMWhnizOlTEdEnMWuBXANY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d5:47:77:88:46:04:9f:0f:97:ec:f6:a7:36:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232872f431ada9b6826c5f0897ec4e5342092e98
Validity
Not Before: Aug 23 04:00:34 2025 GMT
Not After : Aug 24 04:00:34 2025 GMT
Subject: CN=b68f0849a704bcb5a012221873e95ca2a401c3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5f:9c:7d:da:8f:87:e8:83:c8:64:18:57:3a:
25:2e:d3:5a:da:aa:a8:af:78:5e:77:75:0d:e1:b1:
fe:86:1a:c8:51:fb:6e:cb:73:a4:f9:53:6c:36:68:
0b:7c:e9:fe:d0:3b:7c:dd:0f:b0:bc:2f:76:31:7b:
0c:71:f2:d3:84:16:db:26:03:d0:64:53:c0:76:28:
28:78:68:97:a5:cb:8a:c2:17:aa:ae:19:60:ff:54:
68:c4:27:55:46:e9:9a:21:20:60:af:ec:20:51:07:
5d:2a:35:e0:31:d9:8f:38:e1:b8:a3:c8:11:93:3c:
54:c1:a5:8e:b2:a7:6b:56:0d:e7:c3:2a:33:b6:ab:
0e:b5:83:ea:35:62:5d:d9:25:50:8e:ae:d6:ae:68:
40:c4:1b:d6:e5:50:12:67:8d:37:0a:7f:36:02:01:
30:4c:bf:ef:75:01:b8:39:16:79:79:eb:ac:e3:53:
1c:91:0d:fc:1a:bc:15:3f:13:2c:ff:25:1c:32:7a:
c1:b5:b0:4e:f5:43:29:89:13:ea:c5:54:7b:c9:46:
35:ad:4f:6f:52:c8:e4:9e:3b:fa:0f:c9:53:25:e0:
f8:f9:0f:35:7d:d3:0b:b0:33:e7:c4:c5:47:51:a9:
be:2d:d8:24:be:95:82:3a:09:8c:fd:fa:cb:e3:96:
9f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8F:08:49:A7:04:BC:B5:A0:12:22:18:73:E9:5C:A2:A4:01:C3:F1
X509v3 Authority Key Identifier:
keyid:23:28:72:F4:31:AD:A9:B6:82:6C:5F:08:97:EC:4E:53:42:09:2E:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b0:e1:62:67:74:b7:3c:37:5a:3e:20:9d:6b:3f:41:20:75:
fb:d4:16:a4:9e:1e:62:a7:f5:71:e4:27:11:3a:ba:ab:7f:01:
f4:9d:86:76:de:c0:64:15:23:5f:d5:38:e9:4a:4a:45:27:29:
8c:8d:81:36:42:7e:f1:50:76:e3:b2:60:28:4a:73:28:93:4a:
1c:37:47:04:9e:04:10:0f:72:1a:d7:4b:d6:d4:bc:99:ed:9e:
a4:61:c9:52:bd:48:8f:46:f3:3b:71:54:5a:2c:cb:9b:25:f3:
97:d8:d4:80:d4:ae:bc:34:2f:75:12:bc:f4:2c:8d:0c:ad:2d:
0e:53:33:d5:9c:73:8f:4e:59:d9:a2:08:c7:e8:ea:51:b9:cf:
1d:c8:56:7f:3e:db:4c:1d:9c:c9:ef:45:b2:15:8c:13:50:18:
4d:4a:23:e3:65:07:bb:d7:33:28:13:b9:a7:cb:f1:71:bb:88:
a1:2b:e1:6b:d6:d1:d1:b5:4b:c7:e0:e9:97:5f:e9:96:24:20:
91:db:0c:86:43:50:00:e3:5a:4c:b6:06:cb:74:db:4b:39:76:
bc:d7:67:e9:88:c8:b6:04:90:02:a9:60:55:ea:4c:76:81:0a:
29:ff:f8:84:1b:ce:ee:46:38:b0:3e:78:18:3d:08:1d:b9:3b:
09:5a:37:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:42 2025 by rpki-client