Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
File: IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft (raw, json)
Hash identifier: 5oL03dXiHv2EytN7Q2h6oAjZ/9ySNn03OTRt59PDb0E=
Subject key identifier: 0E:64:F5:9A:E9:05:8A:9B:C6:F0:74:51:47:A9:D5:5F:57:08:B7:8E
Authority key identifier: 22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
Certificate issuer: /CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Certificate serial: 0198D5F1B746C4DCD060062C758CAD1F06B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
Manifest number: 1227
Signing time: Sat 23 Aug 2025 08:00:44 +0000
Manifest this update: Sat 23 Aug 2025 08:00:44 +0000
Manifest next update: Sun 24 Aug 2025 08:00:44 +0000
Files and hashes: 1: 1-nMAZc-5nMETLGR20qQodJXwzWs.roa (hash: eYA8AUyf83NJ/62tL4Gk8TX1qXmPj/b3h3AkumPPTzQ=)
2: 7PCtQ5R_w0udczv79LfUn6Szs8E.roa (hash: UeOrmKK9TH1L4E/SbRA8TvqgXT96VYfRkeusRGYVXmU=)
3: IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl (hash: hJ/bkHhY61O7AOGTkvDIpaaSeDH3Fhv3dhDrlcS0tY4=)
4: ayyHxivjLEoLFlxHs79jNQaOed8.roa (hash: QQS+fGK9P+7C6sfs4vGiJ9dFO6N+wnkemR+q8OHEfUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:b7:46:c4:dc:d0:60:06:2c:75:8c:ad:1f:06:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f35c611c29234bf4b40b35990ddfa293a537f9
Validity
Not Before: Aug 23 08:00:44 2025 GMT
Not After : Aug 24 08:00:44 2025 GMT
Subject: CN=0e64f59ae9058a9bc6f0745147a9d55f5708b78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:be:db:d1:0a:f9:be:1a:d6:6d:5c:eb:03:aa:
b1:fd:e0:8e:b1:67:a2:34:1f:85:00:95:38:81:6f:
c0:0b:56:a2:3d:29:3d:d3:aa:e7:78:61:b6:b2:fd:
31:19:6b:81:ec:66:41:c0:e9:72:d8:55:5d:09:7d:
bc:86:19:7f:91:ae:13:1b:85:51:16:41:c4:08:a8:
4b:8d:83:a8:f3:52:e6:6f:e7:e4:a4:dd:19:a2:d1:
e4:81:a0:b5:56:44:bb:91:7c:b3:54:2c:52:b1:03:
6f:50:b0:c5:54:32:f0:b8:39:27:6b:e9:1e:48:5a:
3f:2b:ef:bd:10:c6:22:91:e7:69:93:82:a4:82:48:
4d:28:f5:eb:1b:98:13:f9:72:e6:89:84:be:39:fb:
1f:0e:5c:bc:9f:70:87:fd:5a:7f:7a:75:52:b2:e2:
41:59:dc:37:1d:1b:14:96:f3:c4:b8:31:05:82:75:
af:76:a6:98:fd:13:6b:27:2c:b5:d3:e2:fd:84:cc:
d8:6d:9b:0b:b8:53:b3:50:8d:df:9b:db:3f:51:e9:
94:71:11:35:c2:28:ed:da:4f:a1:8b:11:92:5a:08:
d0:dd:c6:26:5d:6e:93:1b:1f:5b:c1:f4:84:dc:54:
3a:11:8e:4b:fd:ec:d7:82:d1:dd:a1:fb:e7:cf:c1:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:64:F5:9A:E9:05:8A:9B:C6:F0:74:51:47:A9:D5:5F:57:08:B7:8E
X509v3 Authority Key Identifier:
keyid:22:F3:5C:61:1C:29:23:4B:F4:B4:0B:35:99:0D:DF:A2:93:A5:37:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNcYRwpI0v0tAs1mQ3fopOlN_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f8cda4-c818-4dc0-b605-163247eb0e07/1/IvNcYRwpI0v0tAs1mQ3fopOlN_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:45:52:7e:ba:f8:38:4f:1a:41:8d:e4:5e:96:2f:04:d5:e2:
2f:d8:14:e1:7b:f8:43:66:db:e0:8a:6a:53:3f:48:72:7e:1b:
fe:bd:28:11:96:3c:02:4a:b7:88:c7:51:e0:ce:35:79:27:e8:
89:01:09:2b:8a:17:91:c7:c0:3a:70:74:24:0f:79:77:33:a6:
c3:f1:fe:0c:c5:c6:15:cc:e7:d2:22:33:c5:67:30:96:03:87:
4e:9c:f2:6a:e6:65:75:29:c4:7a:9c:1a:81:d2:40:6f:7e:62:
aa:2a:c0:ad:af:f2:bb:b0:4c:7c:6e:94:94:fa:ee:64:b7:fc:
d7:77:b3:94:70:d7:21:6d:94:a2:8a:f3:ad:e9:75:ff:5f:be:
32:f3:aa:45:f0:7b:e5:21:4f:f6:e5:a0:b1:d0:db:ed:61:aa:
a7:49:ed:d0:14:83:99:75:d4:df:53:69:a2:7d:76:5f:ee:81:
e2:aa:a2:8f:15:c0:78:c5:2f:28:bd:ab:f1:31:7c:e1:31:a0:
5f:15:99:7b:32:7c:68:04:2a:c7:35:b4:d7:53:45:31:9b:54:
b2:df:e5:13:95:b6:3a:d0:85:11:79:36:53:34:08:63:2a:98:
ea:47:83:e8:4d:68:5f:6f:a6:04:dd:dd:4d:2e:a0:c2:95:37:
bd:75:b1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:39:16 2025 by rpki-client