Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
File: Iv9bz3ObBzL7G823F-xxf28csOI.mft (raw, json)
Hash identifier: 55vSUWmgbzhkZIwT9aKbHdDddcvHLnf+7+yyw0aCuXs=
Subject key identifier: 06:6C:8E:89:88:98:DF:B7:A6:D3:D3:22:4A:DC:59:D8:66:3B:09:44
Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
Certificate issuer: /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Certificate serial: 0198D5BC218E80E5A579816AE921FAA47915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
Manifest number: 144A
Signing time: Sat 23 Aug 2025 07:02:12 +0000
Manifest this update: Sat 23 Aug 2025 07:02:12 +0000
Manifest next update: Sun 24 Aug 2025 07:02:12 +0000
Files and hashes: 1: Dbw0YKXPol3saHGjQJtz9o_YK0E.roa (hash: SxzLeQKHeNdqB63pBhgkGBN/CeBMjvrLZxTWY/WlAKg=)
2: Iv9bz3ObBzL7G823F-xxf28csOI.crl (hash: 2PKOUBN8trBO+6cZzuz5yRy5R2Rl1OhVF03GXMHLcTE=)
3: UAWIgik98ovvIJWv4yjj5lBqzOo.roa (hash: jrAxhhr23FpKpzjy0AGBEFjJeK035eZKHkroGqfSgNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:21:8e:80:e5:a5:79:81:6a:e9:21:fa:a4:79:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Validity
Not Before: Aug 23 07:02:12 2025 GMT
Not After : Aug 24 07:02:12 2025 GMT
Subject: CN=066c8e898898dfb7a6d3d3224adc59d8663b0944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:26:4a:65:ee:15:2b:f8:70:75:65:2a:3d:b0:
5d:a4:40:d3:45:59:1e:42:8b:65:a0:a8:c4:8a:ab:
03:3c:89:78:ba:18:36:b2:a4:62:ef:09:7e:f9:0f:
d9:9e:78:d4:a2:b2:78:c7:b3:03:e6:fb:81:a4:c2:
4c:03:df:37:99:85:58:75:7b:66:da:d6:2a:6c:03:
3d:2d:12:99:2e:96:7e:2b:df:3e:3f:39:4f:13:5a:
1a:f1:7f:b2:1f:df:76:08:4f:36:77:95:74:ee:07:
df:31:f4:a4:20:06:c6:49:b3:81:22:ae:4f:62:8a:
f8:3b:f9:de:1f:71:22:d4:da:a3:82:c4:a1:f9:f5:
b3:ee:77:97:e9:a0:9f:1a:af:e1:72:f0:29:4e:e0:
61:cf:1a:fb:07:57:e7:cc:65:cf:1a:3e:8d:37:d7:
d2:c7:da:e0:f3:b8:86:b3:3d:16:0b:bf:5a:dc:60:
bd:53:62:e3:1a:60:02:0c:1f:bd:4e:a3:35:08:29:
1d:8a:e9:6a:76:20:33:e6:7b:a5:59:b6:49:a8:a0:
9f:98:f8:2a:6e:86:8e:ce:5d:62:55:72:dd:43:0b:
53:2c:2e:ed:54:cf:d2:36:f9:b1:4f:1a:bc:81:f4:
ef:06:f8:21:1c:28:d2:71:f4:b2:88:39:c2:a5:f9:
2b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6C:8E:89:88:98:DF:B7:A6:D3:D3:22:4A:DC:59:D8:66:3B:09:44
X509v3 Authority Key Identifier:
keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:66:32:8e:5f:05:26:9e:a6:7a:bb:be:06:9e:ee:08:cb:fd:
09:d1:f4:ab:b7:13:b5:ab:da:bf:9e:48:05:87:f7:04:07:b2:
0f:0f:59:e6:0d:1b:e7:21:c8:f9:02:97:15:95:aa:4c:cd:f4:
b7:59:0c:cc:af:62:d7:86:47:24:e9:42:c3:d8:71:4f:63:62:
79:19:d0:2d:87:68:75:d5:b2:45:d2:42:a4:67:a2:1d:5c:02:
f2:21:21:a9:c6:fd:f2:d9:c6:e3:e0:a3:e0:70:09:83:46:bb:
62:37:f5:57:74:6f:3b:28:5e:f0:8a:4b:92:1f:ff:53:aa:19:
45:f4:a8:4c:b9:15:49:76:ae:9c:80:f7:df:a9:5a:69:aa:0f:
f0:9a:c7:e9:2a:f5:cd:f6:c6:93:a2:32:c4:e3:64:d6:f8:e6:
c4:40:04:66:63:29:4b:49:2c:7c:f2:fe:c3:cc:52:a4:e3:66:
ff:25:2a:a0:3e:f6:ad:bf:b8:2b:d4:2f:31:d6:2b:8b:b9:3a:
4a:0f:b1:31:d0:96:61:37:c2:20:88:70:40:15:d6:c7:90:cf:
fa:1b:13:17:09:36:56:a2:a4:1d:1f:83:70:ff:5e:8c:a5:f6:
b9:99:b7:ce:0a:4d:3e:5d:96:3d:36:41:79:a8:ff:5b:b4:0b:
b5:cb:5d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:21 2025 by rpki-client