Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
File: Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft (raw, json)
Hash identifier: WkbR5siHn+/AJ48idfxSbCJ7VvOnwfd/jPBKpwmai14=
Subject key identifier: BC:C9:00:CE:28:30:59:55:BB:32:8D:DC:AA:48:CC:AE:DD:3B:83:DB
Authority key identifier: 23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
Certificate issuer: /CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Certificate serial: 0198D472A3BFDB4DEB1964AE5695D5168642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:02:19 +0000
Manifest this update: Sat 23 Aug 2025 01:02:19 +0000
Manifest next update: Sun 24 Aug 2025 01:02:19 +0000
Files and hashes: 1: 1--lfY911D4o-n0x13kTzxgPAa1c.roa (hash: 7jYLrsmco67v6YLtE1rUNiJwEOZGyK+AZuLqYtKHcu0=)
2: 1-PLlhObhI2KvU31PH_oGB4eDG5U.roa (hash: h2JQLRGR8RDG0rSKaLT0jUCHodG0PW/TX0LlgI0i4Qc=)
3: Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl (hash: nwuohCzurQcLR3kP0KSwS1am9rJAzkXt559cTeyGsrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:a3:bf:db:4d:eb:19:64:ae:56:95:d5:16:86:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=231e28359c180ea6c488a98ca3af77b5bb793dee
Validity
Not Before: Aug 23 01:02:19 2025 GMT
Not After : Aug 24 01:02:19 2025 GMT
Subject: CN=bcc900ce28305955bb328ddcaa48ccaedd3b83db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:84:af:11:35:c1:0e:ba:94:b9:10:a6:66:3b:
1a:d2:05:86:4d:98:6b:2e:c7:94:53:fa:80:6d:09:
0d:21:14:ed:a9:0c:25:67:e3:1c:9e:22:4c:b8:8c:
e0:ae:d7:a3:18:bc:51:db:a7:50:db:12:3f:54:ec:
fe:ef:0f:24:f5:eb:ed:9e:22:19:8a:f8:18:e9:01:
02:fb:90:fe:ce:29:0b:57:64:ef:af:68:f7:f6:7f:
91:6b:55:13:aa:af:f4:68:eb:eb:00:6e:29:0b:31:
b3:b9:73:da:0b:1d:ee:85:ab:ff:67:25:82:58:c0:
1a:1f:43:05:a6:be:cd:24:be:6f:98:7e:48:00:9e:
94:22:dd:37:7d:fd:95:bc:39:0d:b6:f9:24:71:50:
96:80:a2:05:e5:72:bb:46:5f:34:c0:32:74:86:3f:
e9:c6:08:de:6c:2e:cf:28:63:23:7e:66:66:c0:53:
9d:bf:fe:ed:3b:f3:b0:37:00:ab:51:09:91:55:d3:
5e:d3:19:13:f5:a8:8b:da:d5:2a:73:15:c3:2a:62:
93:9d:49:b5:97:54:33:98:7b:38:ff:9b:f1:51:cb:
23:2e:0b:45:f3:b0:2e:fc:0d:cb:80:9b:de:31:20:
ed:1f:db:6f:d1:87:24:01:15:2a:1f:29:27:03:8f:
99:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C9:00:CE:28:30:59:55:BB:32:8D:DC:AA:48:CC:AE:DD:3B:83:DB
X509v3 Authority Key Identifier:
keyid:23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6d:67:6c:ed:7d:6f:c0:17:79:42:15:1f:a9:a5:57:cd:25:
ed:e6:9b:c5:86:b0:7b:b5:12:ab:4c:51:24:ba:4e:3b:7f:7c:
7e:96:6b:bd:95:66:94:4a:5d:3e:82:2a:52:c0:8a:f0:1d:b8:
22:4c:2b:b0:8f:fc:b6:c2:7c:3d:ac:21:bc:81:0e:52:e6:d3:
c4:4f:5b:0c:97:12:c6:2a:f3:85:ff:ca:18:00:92:97:66:ca:
3a:5e:f9:a3:16:df:65:9a:50:7c:db:b8:3f:b1:85:af:a2:8e:
54:ca:59:1d:97:93:0c:a3:33:ad:68:f9:3d:01:d7:99:3c:d9:
7f:f5:19:38:69:6e:71:b1:a9:81:c4:d0:79:17:9d:b8:a9:f3:
f0:8d:81:a4:dc:99:bc:e8:94:d8:b6:92:e2:e0:b4:3a:aa:f1:
4a:11:7a:3d:74:52:6d:1c:3f:ea:15:39:43:05:36:b6:50:fa:
fc:ba:ca:21:7d:d5:1b:c1:54:f9:c4:83:a5:ff:68:f1:0d:15:
11:31:4c:93:48:5e:fe:f9:59:ca:54:d8:ad:1c:c1:45:e2:c3:
aa:35:ac:63:93:a1:b1:b5:e3:ea:e5:da:1c:31:8f:de:3b:8c:
d3:ab:e0:81:59:6e:d9:4a:97:f4:5d:6b:fc:6b:5d:b7:89:97:
b4:1d:0b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:54:47 2025 by rpki-client