Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
File: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft (raw, json)
Hash identifier: 3vgCX5umnXxtOXeGAOtTbfHW0pMOcOrROjQ8Ns26fgQ=
Subject key identifier: E0:E9:42:99:48:D8:72:31:8A:68:62:80:03:E5:50:00:EA:F1:18:3A
Authority key identifier: 22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
Certificate issuer: /CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Certificate serial: 0198D6CD69BF67011C042E2EC8319719EFD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
Manifest number: 112D
Signing time: Sat 23 Aug 2025 12:00:42 +0000
Manifest this update: Sat 23 Aug 2025 12:00:42 +0000
Manifest next update: Sun 24 Aug 2025 12:00:42 +0000
Files and hashes: 1: 0qW5Y4yA32z4Dny6mIJ-qLW2XWk.roa (hash: q9HOhDrTziiN8dHNBG3tLes1wQlniZAzuxjJOEin3Rw=)
2: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl (hash: ENtgGaj9NHqrGHQVLbDEP/+A+PpI0xteLJs0mXbPDkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:69:bf:67:01:1c:04:2e:2e:c8:31:97:19:ef:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Validity
Not Before: Aug 23 12:00:42 2025 GMT
Not After : Aug 24 12:00:42 2025 GMT
Subject: CN=e0e9429948d872318a68628003e55000eaf1183a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ca:42:35:dc:32:92:df:b2:6d:0d:4b:9f:a9:
61:d9:db:3c:9f:e6:5a:f6:7e:83:85:e7:63:a7:93:
7b:50:37:c6:3e:77:8e:56:89:09:81:77:c5:71:cc:
de:84:1f:82:5b:70:8e:6f:3b:a6:2b:20:15:b9:db:
5e:0c:d2:19:72:21:74:60:46:a4:5a:26:9b:d4:44:
96:5f:c5:ad:58:5a:fd:97:18:94:c9:c3:fd:ef:39:
11:90:5d:88:34:90:46:dd:24:92:a4:f8:81:4d:4f:
0e:e8:40:40:a5:5f:43:41:34:ea:19:c1:be:44:d2:
58:96:98:24:65:9c:a9:01:d4:50:cd:17:ec:ab:3a:
b0:e7:2f:6a:3a:e7:0a:71:40:64:76:8d:a6:98:6d:
0a:c6:24:c8:00:86:d9:fb:55:ce:b8:71:ea:e6:cf:
92:a0:90:48:a2:01:2d:61:e0:4d:b6:13:29:13:34:
b8:5a:74:ed:35:f6:bb:2f:4f:79:ce:3f:49:34:df:
77:e6:6c:53:65:ae:ac:2f:4a:61:5d:0a:70:3e:5e:
60:10:0a:ce:24:81:d2:3d:91:13:b5:bb:b6:7a:84:
22:11:10:92:75:b2:18:14:35:08:8a:a9:66:0a:ed:
46:0b:4d:96:c4:00:33:07:cb:c7:1f:a2:df:84:fb:
c0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E9:42:99:48:D8:72:31:8A:68:62:80:03:E5:50:00:EA:F1:18:3A
X509v3 Authority Key Identifier:
keyid:22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:0e:7f:7a:c0:65:f9:9f:7c:aa:91:8b:d7:b0:15:f2:e5:23:
56:d9:d6:ab:72:1f:e5:ca:19:7c:66:73:84:3d:49:6f:b5:67:
4f:48:ef:b3:9e:3a:de:13:7c:d9:7e:71:65:74:65:7c:59:18:
37:1a:54:c8:8e:2a:6b:d5:18:5a:40:3d:f5:f0:fb:7b:bc:8a:
46:11:4c:7a:96:3a:13:6c:96:8a:f6:29:b6:1c:ac:2a:61:88:
84:aa:74:7a:18:9f:57:96:a6:c3:f3:94:6f:eb:0f:0c:34:08:
f5:6d:cf:d6:6b:b6:8f:5d:a7:a5:5b:87:9c:60:e7:f8:d9:23:
5b:c8:df:d9:79:7e:5b:f4:e9:ff:52:6c:46:82:79:22:33:2b:
13:47:a0:5c:d4:5d:59:4e:d7:b4:51:5a:e9:f7:47:4c:3f:28:
fb:2f:ae:07:06:0a:fe:3b:f9:30:0a:a3:2f:7f:a9:2c:1b:35:
35:33:eb:ac:a3:1b:eb:ae:83:28:26:6b:44:3b:53:18:1b:4b:
d0:2f:67:1a:6b:4d:79:15:a3:aa:31:c4:cf:7b:fb:41:ff:c1:
dc:6b:be:b4:7b:5d:e6:0b:04:e8:bd:e1:7b:29:0b:9b:da:43:
d0:8a:5d:b3:82:79:e7:65:5f:1a:e8:3f:dc:b6:3b:65:3f:27:
2d:44:31:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:21:40 2025 by rpki-client