Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
File: Iqs7vLPNUyaosST8ld7RRFN1L6I.mft (raw, json)
Hash identifier: Y1uwOpnawGsQGzfbCTrmYukMT+tMsURiiocyiPJKyGI=
Subject key identifier: 7B:BF:18:CA:F5:34:62:1C:0B:69:82:1A:97:0C:A2:0E:92:C5:6D:BD
Authority key identifier: 22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2
Certificate issuer: /CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2
Certificate serial: 0198D47320A5B37D90A3D50B428F7209CA12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
Manifest number: 10B9
Signing time: Sat 23 Aug 2025 01:02:51 +0000
Manifest this update: Sat 23 Aug 2025 01:02:51 +0000
Manifest next update: Sun 24 Aug 2025 01:02:51 +0000
Files and hashes: 1: Iqs7vLPNUyaosST8ld7RRFN1L6I.crl (hash: uIzTBiWzzS1qXEsYYfZbbOuNScUQaBeOmNwQ7a4E8rk=)
2: uDx7Z1tuokndeydIySa8WuoqYoI.roa (hash: V+Jlh82Z7YVpAlrJMiPWI0QRjW3a+dx4x4YSGHlfjZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:20:a5:b3:7d:90:a3:d5:0b:42:8f:72:09:ca:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ab3bbcb3cd5326a8b124fc95ded14453752fa2
Validity
Not Before: Aug 23 01:02:51 2025 GMT
Not After : Aug 24 01:02:51 2025 GMT
Subject: CN=7bbf18caf534621c0b69821a970ca20e92c56dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c5:46:06:11:bd:e3:aa:3d:d2:f8:60:b5:1f:
65:65:c4:29:c9:32:86:81:77:43:cc:29:aa:22:7d:
1e:08:7a:83:a6:ed:b0:a6:e8:9e:da:a2:33:04:d0:
33:4d:5d:35:e6:74:d3:e3:5c:f9:82:25:ef:2a:d4:
eb:06:a1:fa:18:91:c3:0a:97:55:c9:c8:6c:19:8d:
76:f3:75:ea:31:c6:02:76:a0:64:f2:6e:07:08:b7:
bc:09:66:6c:1b:2e:c4:0e:a3:d2:cb:f4:3e:d7:ad:
5d:9f:e3:da:0f:70:cd:68:01:72:36:0b:22:12:a5:
06:ee:02:fd:87:a0:22:75:ad:4e:cd:47:36:2f:9c:
63:fe:49:79:db:20:23:01:8a:e9:31:af:c4:d6:54:
a1:44:47:08:92:1c:dd:50:e9:78:98:da:94:ae:64:
f3:f0:28:54:0e:d2:ca:b4:2f:40:aa:47:b9:75:a3:
2d:00:52:37:e4:26:4a:09:30:70:53:80:cc:ab:70:
e3:a1:4a:b7:f8:9c:35:57:09:ef:ea:26:a6:57:76:
d0:dd:6a:ac:b7:9d:90:e6:c1:57:5b:99:9a:03:fe:
62:a1:40:71:78:58:3c:ad:26:2b:55:fb:e6:bc:eb:
1a:3c:1c:fa:e1:11:53:ea:0d:4e:c4:25:4a:12:e5:
ed:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BF:18:CA:F5:34:62:1C:0B:69:82:1A:97:0C:A2:0E:92:C5:6D:BD
X509v3 Authority Key Identifier:
keyid:22:AB:3B:BC:B3:CD:53:26:A8:B1:24:FC:95:DE:D1:44:53:75:2F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqs7vLPNUyaosST8ld7RRFN1L6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/392489-7337-4bd7-95ae-fa8a5e86b348/1/Iqs7vLPNUyaosST8ld7RRFN1L6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:46:df:6c:1d:37:24:59:a0:05:95:15:2e:6f:9d:c5:90:35:
b3:8e:bf:ed:4a:0c:ce:5f:45:ea:b1:79:3f:23:69:39:59:4b:
14:04:c5:80:66:10:15:f6:80:d4:a7:52:15:19:8e:3d:cf:36:
ff:27:c1:a9:75:d5:28:88:bd:5e:df:fc:8e:9a:04:d8:5b:63:
58:94:bf:0c:69:70:15:b6:19:dd:23:23:0f:e5:f1:57:83:f3:
1d:95:15:67:7c:16:9d:40:1c:28:71:b9:44:3d:ce:fa:2d:b4:
b0:d2:0c:4c:24:60:58:ef:c0:6f:e1:39:77:a6:17:47:1a:38:
2a:20:55:eb:a4:f3:3b:34:03:93:15:ba:b5:cc:0e:e4:4c:73:
10:a6:96:37:d6:70:6b:53:ea:8a:62:ad:89:4c:cc:9f:18:79:
50:51:57:bb:ee:7b:03:bf:07:6f:42:11:25:8c:b4:ad:c6:17:
64:71:b0:5b:fc:ba:ed:07:5f:b4:de:c6:43:84:17:88:35:0d:
b2:14:df:91:02:c6:61:76:71:31:3d:d6:2a:55:88:67:63:e6:
38:5a:7c:0c:9b:29:78:1b:6d:c4:c5:0d:9f:52:0d:07:0e:e9:
80:43:f9:0e:f1:d4:97:43:81:fc:e2:37:55:3e:c8:33:5a:a0:
73:1f:08:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:56 2025 by rpki-client