Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
File: IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft (raw, json)
Hash identifier: muq1wi+onjr3eSgR1kpwyBbznh3egDcdGdRkhOCohKA=
Subject key identifier: EA:3B:A2:EF:EB:AA:80:71:70:79:0A:E2:EA:91:5B:3A:51:FD:9B:38
Authority key identifier: 20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4
Certificate issuer: /CN=207e90d62de2c727cd4539a2f070c4e91df32bb4
Certificate serial: 0198D4742B31055D286C3C36FB5D16EDF2B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
Manifest number: 028D
Signing time: Sat 23 Aug 2025 01:03:59 +0000
Manifest this update: Sat 23 Aug 2025 01:03:59 +0000
Manifest next update: Sun 24 Aug 2025 01:03:59 +0000
Files and hashes: 1: IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl (hash: YhdyKeBcxCUnf/QAhZXNwmDND84tv5dAod4wFL73Tio=)
2: QpNcCoA4Z5ottRskUsrVfwUI5R4.roa (hash: 3Ookyfb7wHO7/58EMfYEHBR9Z8xGK4lUfT1UByxh2SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:2b:31:05:5d:28:6c:3c:36:fb:5d:16:ed:f2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=207e90d62de2c727cd4539a2f070c4e91df32bb4
Validity
Not Before: Aug 23 01:03:59 2025 GMT
Not After : Aug 24 01:03:59 2025 GMT
Subject: CN=ea3ba2efebaa807170790ae2ea915b3a51fd9b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b9:c1:36:35:fc:48:5b:3f:d9:bc:03:25:f0:
c9:53:33:88:a6:89:d7:70:4f:c3:28:2a:99:75:5e:
19:c4:ec:7e:dc:02:99:9f:89:84:51:1d:6a:d6:5e:
cf:c0:fa:49:c5:47:9a:52:80:da:c3:8c:f3:18:68:
cf:92:b0:db:c1:61:60:b9:c7:b4:df:95:d8:60:1a:
3e:a2:9c:11:e2:71:3d:f5:5d:da:8f:6d:49:be:a0:
01:44:09:d6:b2:de:d9:84:64:c8:7e:ba:b3:a2:c1:
3e:30:87:95:32:47:85:96:f5:bb:7d:8d:35:af:bb:
ee:cd:81:f5:47:17:77:07:18:8e:34:63:09:34:2c:
5f:6c:5c:78:85:99:18:e8:d1:f9:f0:1b:21:68:a9:
4d:d7:50:99:34:5d:0d:6a:bf:20:9c:13:31:86:8b:
c2:2d:c7:77:86:b7:29:11:ff:46:b9:68:a5:ae:de:
08:a1:bf:8b:4b:0d:d8:d4:fb:7a:a9:a9:23:fb:0d:
6b:75:10:21:23:d7:b6:1c:46:0a:ec:c4:81:79:16:
6b:89:d8:0c:fc:aa:2b:e0:65:20:88:27:06:bb:4e:
1e:3e:27:6a:15:9b:d5:6a:b6:11:2a:5f:6a:99:0b:
67:95:da:79:cb:50:53:67:65:06:2b:7e:ed:d8:7a:
6d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3B:A2:EF:EB:AA:80:71:70:79:0A:E2:EA:91:5B:3A:51:FD:9B:38
X509v3 Authority Key Identifier:
keyid:20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c7:5e:cb:0a:6e:c3:06:dd:51:71:3b:73:23:f7:27:d1:e6:
00:95:de:5b:05:be:d6:65:16:04:85:f7:c0:ee:1b:ed:75:f6:
d3:82:d4:65:6c:f3:52:03:be:eb:10:f6:ec:6c:a8:70:90:5f:
97:cb:d7:c1:98:e6:21:f4:73:09:cc:5a:b2:57:ae:ad:98:a6:
ed:8d:71:70:df:98:14:f9:06:ae:ef:53:97:e2:0e:38:b5:b3:
41:21:3b:fb:d7:f1:0c:c5:ab:15:8c:03:04:db:39:22:96:ea:
ad:d2:70:ff:4d:d8:c1:05:e6:eb:55:a8:11:c9:cf:b8:cb:97:
e5:fb:4e:bc:9f:37:49:b3:c3:6c:6b:60:e8:64:7c:4d:a0:fc:
ce:04:a1:05:81:10:b8:17:26:b3:6e:c2:6b:73:11:e6:20:61:
cd:bb:d5:62:13:e6:bb:7c:bd:86:44:ee:7b:d9:8f:ec:8a:e7:
26:17:ca:fe:fb:1d:8c:91:44:83:34:b5:5c:3f:3d:1e:41:88:
54:09:4a:0c:76:b9:53:63:ff:73:29:20:7a:6b:f0:de:39:41:
18:c7:42:b5:bc:f8:c5:88:90:de:4d:0d:61:6f:90:47:f0:de:
35:0c:4e:04:99:12:a9:cd:04:51:af:bc:c6:d0:86:1a:cf:ee:
2a:8c:ba:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:54 2025 by rpki-client