Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft
File: iydIPcFsMY5a__gyKTDIF_0ZLJE.mft (raw, json)
Hash identifier: bMYRvoAH0gcSBoCa5qBEa8fkNtOTVDq0lAqjUmToDQA=
Subject key identifier: B8:9A:F0:1F:29:29:17:94:B8:CF:48:B2:FD:7F:17:6F:F9:FB:16:37
Authority key identifier: 8B:27:48:3D:C1:6C:31:8E:5A:FF:F8:32:29:30:C8:17:FD:19:2C:91
Certificate issuer: /CN=8b27483dc16c318e5afff8322930c817fd192c91
Certificate serial: 0198D54E9D097DC78280ABC724F6A830D4D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iydIPcFsMY5a__gyKTDIF_0ZLJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft
Manifest number: 09A9
Signing time: Sat 23 Aug 2025 05:02:35 +0000
Manifest this update: Sat 23 Aug 2025 05:02:35 +0000
Manifest next update: Sun 24 Aug 2025 05:02:35 +0000
Files and hashes: 1: WG1KTWwRB1pYbj2P1y-YbJWElMQ.roa (hash: /RcbZ2ujStzbSPjPDGEz6Qg57WsDieIVmjOcowRraSQ=)
2: iydIPcFsMY5a__gyKTDIF_0ZLJE.crl (hash: pnvnO0y37LcnwSHEw1hr21tV8Y7HoqrIbVxRCXF+i+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iydIPcFsMY5a__gyKTDIF_0ZLJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:9d:09:7d:c7:82:80:ab:c7:24:f6:a8:30:d4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b27483dc16c318e5afff8322930c817fd192c91
Validity
Not Before: Aug 23 05:02:35 2025 GMT
Not After : Aug 24 05:02:35 2025 GMT
Subject: CN=b89af01f29291794b8cf48b2fd7f176ff9fb1637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:32:00:6b:cf:7d:15:0d:49:31:ee:55:40:3d:
82:eb:3f:c2:56:57:27:95:fa:6a:54:d0:6d:67:f0:
b3:4e:81:0b:b3:9d:21:e3:2f:18:f7:58:09:4f:6c:
b8:49:63:97:aa:bd:75:8b:ee:58:ef:d6:56:77:ed:
be:47:2d:92:fa:42:a8:7a:17:15:e9:ad:75:36:93:
e1:35:e6:03:2c:1e:75:a0:b0:0b:f5:a9:f1:8c:21:
02:b8:cf:29:2f:a9:f1:60:f3:b2:e5:63:df:4a:3e:
c9:b5:a4:b3:ef:dd:87:54:62:8b:3a:12:35:65:e1:
65:c7:b0:75:90:14:2e:56:21:09:2c:e7:27:76:de:
d5:e5:03:04:6e:e2:38:b4:14:d8:27:32:08:cf:ce:
b6:6c:68:92:94:7c:f7:30:35:b7:8f:71:28:0f:08:
9e:a8:37:8d:86:9e:2c:09:1e:2d:7f:a5:56:91:d1:
f3:55:82:59:ec:b0:28:4b:70:56:09:e2:4d:25:88:
92:5e:92:85:5b:b8:a1:f5:03:8f:63:5a:c4:f8:d5:
82:df:c0:cc:be:5f:23:b5:8f:0b:84:8a:d7:4b:a7:
ab:7f:7b:a4:ca:e9:8a:5e:5e:f1:26:c9:ef:6c:d7:
a7:dd:9a:36:07:6f:e1:af:a3:48:1f:67:b1:2c:b9:
10:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9A:F0:1F:29:29:17:94:B8:CF:48:B2:FD:7F:17:6F:F9:FB:16:37
X509v3 Authority Key Identifier:
keyid:8B:27:48:3D:C1:6C:31:8E:5A:FF:F8:32:29:30:C8:17:FD:19:2C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iydIPcFsMY5a__gyKTDIF_0ZLJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ed:b8:04:cc:41:a1:53:74:91:39:35:ee:3f:e1:48:2b:b2:
37:56:48:d0:57:df:39:d9:72:b1:d9:6f:dc:28:4c:48:92:2c:
f1:6c:a7:94:e7:d4:82:ea:de:f4:50:6c:05:0f:34:cc:59:6c:
cb:76:00:45:1d:43:a7:a0:10:79:07:60:e9:a3:81:4c:8f:36:
1e:17:a1:62:99:3e:db:cf:99:f8:67:11:a3:b7:16:1d:78:e2:
2b:7c:41:a8:e5:4c:b6:fe:29:94:d7:14:c1:85:1c:48:bf:5f:
b4:a5:ee:1e:e1:3f:22:01:49:4e:10:a3:c3:39:b5:c6:71:ad:
cd:5d:7a:8f:92:1c:52:ba:53:94:f5:bf:6d:2f:be:6a:bb:e3:
af:ae:e4:9a:7d:71:c2:b5:cb:48:d5:44:69:b0:cd:5d:d6:11:
95:eb:c3:db:b6:f4:6c:63:22:95:c3:a7:66:e7:d3:08:70:9f:
6d:c2:52:ba:df:26:bc:1a:94:03:a5:e1:5f:8a:8a:4c:8d:e1:
dc:f8:65:aa:11:a8:86:ba:0f:01:09:a7:3e:5f:1d:77:91:bb:
72:e7:e6:f4:05:62:b5:ec:12:b5:90:0f:42:80:83:d3:c3:e3:
14:28:99:c3:c8:a3:f7:45:21:28:df:ee:f4:17:8f:40:8a:96:
ba:51:05:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:59 2025 by rpki-client