Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
File: IE19hlKpn8F__y197MSeVWqg64A.mft (raw, json)
Hash identifier: Hs/hkcCRKAi2fNKJeLwNy5O1jbToHSwg1aQOVJCSGpQ=
Subject key identifier: CB:A0:EF:6A:25:6E:4E:06:A8:7C:49:9E:98:F7:2B:B6:7D:17:D4:B8
Authority key identifier: 20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80
Certificate issuer: /CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80
Certificate serial: 0198D40488389D373203001F316933FEB8AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
Manifest number: 034D
Signing time: Fri 22 Aug 2025 23:02:03 +0000
Manifest this update: Fri 22 Aug 2025 23:02:03 +0000
Manifest next update: Sat 23 Aug 2025 23:02:03 +0000
Files and hashes: 1: IE19hlKpn8F__y197MSeVWqg64A.crl (hash: 31Shz089WlG/PXdHXAAlpqdLegAWWeAmrXxPmMIj3Ug=)
2: qVpN4Y8KxLODwpDOgLN11KilqHg.roa (hash: 09hTebOsoFtxumaEhzqwE7uj7IeLGjUIKeNrykM3gp8=)
3: tdhuYGIdy-7BcAqbVeS6RaDWjiM.roa (hash: Sh6aeKnHHbg/58/2+xd9mufW5cUQ13QaLyf7FAUXcc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:88:38:9d:37:32:03:00:1f:31:69:33:fe:b8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80
Validity
Not Before: Aug 22 23:02:03 2025 GMT
Not After : Aug 23 23:02:03 2025 GMT
Subject: CN=cba0ef6a256e4e06a87c499e98f72bb67d17d4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:59:0d:ab:47:88:63:54:b4:71:09:93:3a:1b:
89:ef:42:9d:ea:db:1b:e8:13:dd:40:b1:65:40:95:
63:c2:3c:45:3a:3a:ce:76:75:c6:de:68:2a:7e:c3:
a5:98:0a:69:a5:04:dc:28:6b:87:39:80:c8:1a:9c:
0e:0d:ee:61:0b:7f:cd:d9:be:9b:29:7c:b3:4a:78:
99:77:ae:a1:dd:56:20:ce:93:05:47:9a:61:01:4b:
6d:79:6c:6e:42:ce:5b:39:f4:ae:bc:a1:0d:5f:d6:
cf:88:dd:f1:8d:46:04:fb:e3:fc:87:c9:fc:2f:24:
8a:d6:a0:00:c3:69:89:a0:11:54:20:a6:75:a0:9a:
ac:1f:57:17:36:13:eb:49:30:9d:8b:38:fe:c8:81:
07:39:24:fe:29:ad:e9:c8:d5:99:cd:07:fd:ee:db:
2b:de:aa:d9:43:85:74:d6:cd:ba:97:1d:a0:0a:22:
02:d1:79:22:c0:f4:f5:60:5c:6c:b9:86:2e:75:5b:
ec:3f:0f:e3:7f:32:66:a7:27:5b:56:9e:53:69:0b:
47:d3:31:0f:1f:49:a8:41:46:b1:c1:3e:2c:f6:aa:
67:05:ba:06:c0:ab:c1:e1:64:05:1f:61:5a:48:43:
62:98:ed:a0:0c:a7:80:ca:a5:24:82:c6:43:cc:87:
73:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A0:EF:6A:25:6E:4E:06:A8:7C:49:9E:98:F7:2B:B6:7D:17:D4:B8
X509v3 Authority Key Identifier:
keyid:20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:cf:f8:e5:58:80:e5:d3:0f:d2:e1:71:3c:52:80:26:23:12:
64:84:25:fa:76:3b:58:17:55:ba:7d:f6:04:16:ab:0d:ed:f5:
28:b2:54:fb:36:7c:26:b2:6e:03:23:82:d8:c9:03:49:b3:da:
55:a6:64:6f:26:e5:0f:09:ec:f1:8d:32:9a:0d:8f:d0:8b:2e:
f6:f9:18:d9:b5:90:c1:63:73:32:ab:92:63:db:5c:5b:a3:95:
24:4a:a7:ad:0c:bb:44:18:31:af:f8:1b:fe:dc:06:89:25:59:
5c:54:af:2d:68:0e:a8:cf:4b:89:94:02:e2:52:fb:79:f2:6f:
3a:6c:e5:1a:12:68:7e:11:f4:9d:a9:58:bc:44:d4:5b:8f:9e:
19:90:b3:84:f2:bd:92:8a:f8:68:6d:b0:27:90:b9:61:c9:0d:
c5:9c:2a:1b:a7:8d:41:5a:a7:c3:31:dc:54:e1:d9:09:49:3b:
68:3d:5f:97:0e:d4:99:66:65:79:0a:5d:99:b6:a7:03:69:b6:
e8:ac:a6:91:a1:fe:c8:03:f9:ec:41:27:f5:27:26:1b:20:86:
9f:1f:74:18:3d:0d:5c:45:1c:bf:55:93:ab:1d:ea:26:36:32:
fc:6b:51:51:e7:ea:cb:ac:aa:80:2a:2c:e7:ca:a9:4c:34:fa:
f6:17:69:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:27 2025 by rpki-client