Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
File: IqGe2FosDPxPUL6tFvyfbxRlrRE.mft (raw, json)
Hash identifier: u87LWhZApFaoxORLW3dDQg6Yuym+VzVLdPdY5jh44rw=
Subject key identifier: 44:B0:35:D6:E9:A7:34:A3:B1:D6:2C:F9:6A:6B:1A:58:55:41:D5:E5
Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
Certificate issuer: /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Certificate serial: 0198D5F13E5B5BD1669C81E7654524435FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
Manifest number: 056A
Signing time: Sat 23 Aug 2025 08:00:13 +0000
Manifest this update: Sat 23 Aug 2025 08:00:13 +0000
Manifest next update: Sun 24 Aug 2025 08:00:13 +0000
Files and hashes: 1: IqGe2FosDPxPUL6tFvyfbxRlrRE.crl (hash: vVj18A63o72FKABM20lxKcKqgW7AOcFUOR5Ml82jeFk=)
2: NppGj-vB7qPIZEIjN2QiF53Di1w.roa (hash: /HZmGG+wWIrcuKRavKc6Cvy6ql5RNC9frBmMmRXn2ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:3e:5b:5b:d1:66:9c:81:e7:65:45:24:43:5f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Validity
Not Before: Aug 23 08:00:13 2025 GMT
Not After : Aug 24 08:00:13 2025 GMT
Subject: CN=44b035d6e9a734a3b1d62cf96a6b1a585541d5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:58:77:cc:84:30:00:49:e7:3e:5c:57:f3:54:
bd:58:01:17:4a:8a:f9:59:54:96:00:ce:f7:93:bb:
6d:48:94:1a:36:36:c7:07:81:e4:8e:1d:83:8d:39:
1e:05:ce:9f:b4:b2:92:bb:64:43:d7:b1:a3:35:0c:
b5:01:a4:9a:d6:54:b8:55:fb:ee:4e:13:42:75:87:
05:26:90:3f:df:52:96:ed:ef:19:ac:3d:8a:aa:29:
f7:8e:bc:5d:25:00:bf:21:40:a9:f0:54:7a:93:40:
a5:2c:8e:19:24:fc:75:c7:2b:fb:a0:2c:a2:1d:04:
88:ec:a2:ac:c2:c9:80:a0:e4:c4:be:a1:7f:78:77:
79:e1:f3:62:47:ae:66:92:cd:37:0b:01:7c:5f:71:
e5:ba:d7:e3:b5:6a:d8:96:8c:03:da:01:a4:22:b8:
f3:f1:80:48:a1:74:63:df:2b:b8:14:08:82:b6:eb:
06:26:ab:d1:0f:c6:45:1f:5d:57:28:5f:ab:fe:47:
ca:49:c9:6e:5a:a5:63:17:3d:29:80:dc:6c:3c:bc:
37:c6:af:d9:8f:af:d0:0a:a6:d9:99:36:fa:35:29:
2a:93:0d:ac:00:a5:b7:8e:ed:f2:50:96:88:3e:b0:
84:1a:35:42:c3:bc:94:7a:79:2b:4d:0c:74:c1:94:
7a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B0:35:D6:E9:A7:34:A3:B1:D6:2C:F9:6A:6B:1A:58:55:41:D5:E5
X509v3 Authority Key Identifier:
keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:62:51:2d:4b:63:61:29:a1:0c:d3:cc:f3:a7:aa:66:1f:24:
45:e4:14:04:cc:91:4e:9d:fd:0e:10:3a:64:c1:f1:ee:09:73:
af:35:ab:9b:d2:60:6b:27:a7:32:f9:bd:20:96:2c:a6:ed:62:
37:41:39:82:b3:3d:7b:52:6b:34:82:77:9b:ab:9f:60:41:06:
15:0a:7d:ed:16:57:6f:50:69:78:38:af:ec:98:ea:f5:01:cb:
a9:45:11:b4:f7:43:d3:12:3a:2a:f2:65:77:9d:0f:cb:78:f7:
bf:45:8b:9c:69:0f:63:46:07:34:98:fb:bd:6c:8d:70:3e:10:
9a:71:90:e9:99:bb:ab:76:9b:66:ee:e4:8f:e0:b7:ec:a5:84:
8e:f8:06:41:e4:2d:f1:3f:db:90:b7:83:2a:a9:12:28:53:46:
14:09:e2:99:9a:5c:bd:cc:0c:4b:3b:95:08:f5:e8:55:f5:a0:
fd:74:3b:76:10:6d:d8:d8:1a:b5:75:87:d2:d2:05:d3:01:a4:
6d:aa:7b:19:9b:2e:62:96:81:ce:44:76:fd:03:7c:5b:60:c8:
1b:20:a7:1f:f2:af:6e:17:97:ab:80:de:ac:82:c5:aa:b1:cf:
63:8b:f8:1f:fd:b2:c1:8a:a1:8b:75:69:5a:bd:18:f2:7e:5c:
e4:e1:09:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:26 2025 by rpki-client