Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.mft
File: IYOyVqIVtNb-JhfRJitji_p9bUA.mft (raw, json)
Hash identifier: dJ/HDnDMscbbHHaCoj5YpB0i9+BgrlAGu//Z34bCxKw=
Subject key identifier: 6E:17:CF:67:C2:CC:E2:B8:29:72:54:BC:2F:D7:AA:0A:2D:DF:66:8E
Authority key identifier: 21:83:B2:56:A2:15:B4:D6:FE:26:17:D1:26:2B:63:8B:FA:7D:6D:40
Certificate issuer: /CN=2183b256a215b4d6fe2617d1262b638bfa7d6d40
Certificate serial: 0198D4A8206B8EA298FF8EC25CA08F0CECE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYOyVqIVtNb-JhfRJitji_p9bUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.mft
Manifest number: 35
Signing time: Sat 23 Aug 2025 02:00:44 +0000
Manifest this update: Sat 23 Aug 2025 02:00:44 +0000
Manifest next update: Sun 24 Aug 2025 02:00:44 +0000
Files and hashes: 1: 44WqLxBoNN2QK30ATokBgtKLkeI.roa (hash: r1vcmWXJ0IlZk5aHbff1XD3Hg2Mieqe53U03waIk5x4=)
2: IYOyVqIVtNb-JhfRJitji_p9bUA.crl (hash: MMfw6cD0WD/Lgr0OhcTvX4mWctvoEkRUgXswMdXVyfw=)
3: RQGn1IVlE_4Qq709uXK_6OsLiXk.roa (hash: P0lwWTGt3C2Kl+U7DDbrCt9t+ME/jcoeCzRbUtSo834=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYOyVqIVtNb-JhfRJitji_p9bUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:20:6b:8e:a2:98:ff:8e:c2:5c:a0:8f:0c:ec:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2183b256a215b4d6fe2617d1262b638bfa7d6d40
Validity
Not Before: Aug 23 02:00:44 2025 GMT
Not After : Aug 24 02:00:44 2025 GMT
Subject: CN=6e17cf67c2cce2b8297254bc2fd7aa0a2ddf668e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d8:6e:05:0d:58:74:a6:48:74:15:3d:f5:da:
89:c2:fd:8c:5b:4c:fa:3d:2f:7f:9a:0e:bf:86:22:
05:84:2e:84:5e:cc:9d:15:8d:a5:95:4d:b0:9a:de:
24:68:98:d4:98:7b:46:36:b0:b8:19:9e:03:a1:5e:
41:08:60:68:93:59:83:c5:7a:c9:b1:85:46:62:62:
d2:29:93:43:72:b2:05:da:04:89:37:df:71:15:4f:
a9:0b:f8:59:78:cb:28:64:76:4e:2e:a1:4a:71:73:
dd:10:45:7d:74:e6:18:16:68:32:4d:c3:c8:b0:7e:
4a:cd:6d:d2:3c:b0:51:ea:28:f9:02:af:00:af:53:
b8:75:26:48:cb:f2:cd:b8:b8:b1:8e:03:e8:4f:88:
53:2c:27:1e:8f:f6:77:1a:19:d6:cc:fe:a5:ff:96:
17:fb:94:1d:2a:28:44:17:f0:31:52:f2:d7:8a:5a:
a6:76:6c:6b:1c:77:57:8e:04:da:26:3e:b4:87:b7:
ee:ed:aa:21:45:39:cd:86:c7:98:10:fc:13:81:4f:
bd:52:82:d8:d3:0e:84:e5:d7:c8:a4:6b:23:6c:19:
c2:ce:aa:42:0e:a7:b7:26:8f:38:50:4e:2e:a2:a5:
7d:c9:d1:fb:fb:73:82:cf:48:29:4f:e1:56:36:8c:
e4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:17:CF:67:C2:CC:E2:B8:29:72:54:BC:2F:D7:AA:0A:2D:DF:66:8E
X509v3 Authority Key Identifier:
keyid:21:83:B2:56:A2:15:B4:D6:FE:26:17:D1:26:2B:63:8B:FA:7D:6D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYOyVqIVtNb-JhfRJitji_p9bUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9173a0-2884-4a79-8b3e-69a245095ab4/1/IYOyVqIVtNb-JhfRJitji_p9bUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:bd:5a:db:41:8b:3e:d2:6b:cf:ce:d6:ee:be:47:41:a9:8a:
42:eb:97:58:7b:d5:8e:48:2c:93:d0:50:23:05:59:df:b8:8d:
13:29:e4:43:11:8e:14:6b:66:68:ba:dc:60:57:9a:f9:80:ca:
a2:bd:24:c7:5f:c2:97:28:14:e4:11:70:03:41:91:91:b6:7c:
b4:12:e8:bd:c2:44:68:02:17:08:04:ff:33:34:e2:cf:ca:f9:
f8:24:a5:d4:5f:b1:c6:28:f4:31:ea:41:23:6c:cb:b8:42:cb:
04:3a:23:23:01:0c:b6:da:63:12:86:5b:86:6d:d2:f9:c7:82:
31:39:08:52:d5:70:5d:1e:4c:50:68:c6:fa:e1:67:6f:ae:33:
30:93:e9:f5:55:19:8f:1a:9f:f7:42:50:7f:59:34:6b:a2:11:
5f:ae:3b:4b:8e:ce:a5:b2:b6:da:51:7d:3f:01:db:38:f4:d9:
f4:5a:57:27:e5:3c:45:c2:43:5c:ee:27:51:b0:ff:69:65:38:
f6:dc:12:9c:b6:57:5a:0d:b2:51:d0:2d:b5:c8:62:63:f3:34:
4c:ec:b1:2e:d6:f9:74:ff:13:db:c9:3c:cc:a8:ac:6d:25:59:
76:40:44:42:2e:bc:c2:0b:d5:b4:d2:7a:a6:b0:d6:30:80:2e:
15:9a:5e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:22 2025 by rpki-client