Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
File: ifKArlGVUMen9JU6sn16593rE0E.mft (raw, json)
Hash identifier: l/RybdCcTOmUT29QaEZRNtk1e4UKKJIFSqQDuMHkQxI=
Subject key identifier: 25:DF:E7:C2:96:95:BA:A1:F2:E4:71:54:84:E9:4A:09:8C:C7:95:70
Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
Certificate issuer: /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Certificate serial: 0198D54DEC73FA433E44D74176517934AB3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
Manifest number: 15DB
Signing time: Sat 23 Aug 2025 05:01:50 +0000
Manifest this update: Sat 23 Aug 2025 05:01:50 +0000
Manifest next update: Sun 24 Aug 2025 05:01:50 +0000
Files and hashes: 1: 9dTi4wdiI3Tu8z52gakpEQiMUok.roa (hash: 4zYsVsn8fJnXPhGX6xQByXU2W5bf/FC7mJXJpk5+gzY=)
2: ifKArlGVUMen9JU6sn16593rE0E.crl (hash: pTOTWcMJM+MXRphlgi+gXCuhS/s/DkZIrn40UxM2NZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:ec:73:fa:43:3e:44:d7:41:76:51:79:34:ab:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Validity
Not Before: Aug 23 05:01:50 2025 GMT
Not After : Aug 24 05:01:50 2025 GMT
Subject: CN=25dfe7c29695baa1f2e4715484e94a098cc79570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:3f:a7:cd:7b:20:e4:24:3b:23:31:02:71:
1c:ac:91:a8:c7:e3:15:7f:1a:36:4e:b8:a8:9b:dd:
3f:34:01:46:91:d8:c3:da:f7:09:fc:7a:65:d0:67:
9b:97:c5:90:94:d8:ad:4a:91:eb:e6:7a:0c:56:fd:
d1:f8:e5:71:48:bd:21:70:b7:68:02:c3:b5:91:1a:
eb:a6:8e:5b:73:07:73:66:52:29:3f:a3:cf:4a:61:
ca:09:38:94:06:b8:20:51:ed:68:09:b0:b1:6c:e3:
8f:c7:25:62:07:70:b7:fd:e4:9b:58:41:88:44:66:
21:ca:a9:9f:95:2d:fe:08:10:0f:44:d5:70:5d:b6:
5f:55:37:fa:74:f6:4b:ea:66:f9:0f:c9:6e:1b:84:
b9:01:1b:c6:20:cd:3c:14:72:cf:06:9e:8a:c1:47:
c5:2f:6c:9c:f8:da:12:34:25:72:9c:87:18:d9:44:
04:c3:97:78:b8:e2:5b:2b:3c:0e:0e:c4:d4:60:bb:
82:ae:2e:21:f1:97:1c:df:52:89:fe:e8:aa:c3:95:
6c:5e:13:45:0b:a8:af:83:37:7c:50:13:6a:ce:41:
fa:df:2b:68:68:ed:c0:03:d6:69:1c:73:ee:fd:24:
02:2c:39:58:0f:4e:7a:94:0f:96:cd:3c:f8:a7:19:
59:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DF:E7:C2:96:95:BA:A1:F2:E4:71:54:84:E9:4A:09:8C:C7:95:70
X509v3 Authority Key Identifier:
keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:85:bc:ad:17:62:f0:09:20:4a:a1:4b:5a:95:21:2b:7b:d5:
c6:9a:82:6b:46:96:8e:85:98:e5:67:42:45:9e:d7:89:e0:09:
72:21:d9:e6:95:76:6a:45:cd:d9:40:9d:76:b4:a2:bf:44:06:
5e:75:67:a5:ab:9e:19:18:80:82:1a:50:0e:ee:8a:49:ce:47:
28:dd:b0:2b:4b:32:cd:72:ff:42:8f:92:91:de:1e:9d:94:18:
e5:d0:03:48:4c:a0:02:34:9f:9d:cb:d0:cb:75:f0:1a:35:7d:
21:80:0f:5c:8e:af:04:47:81:8b:4c:d8:7f:04:02:13:64:3a:
e7:60:a6:4d:a4:10:a9:8d:ff:e4:8d:2a:1f:9c:b5:7a:e4:4d:
68:f5:5e:9a:d3:ba:ff:65:7a:2e:0a:ec:9e:18:0f:36:7a:97:
a7:3e:ab:c4:9e:89:67:58:b9:d2:dc:b4:f4:fd:03:cf:12:b0:
31:aa:2a:e9:99:13:da:23:14:1c:a4:a3:24:c1:11:64:cd:e7:
a9:59:9a:f4:56:af:7a:3d:80:42:84:68:93:f5:87:bf:34:4c:
15:7a:9a:b9:ad:22:17:12:90:36:22:96:74:18:be:e6:05:7e:
db:0a:a4:ae:d8:64:69:a4:62:9a:f1:ec:d9:5a:a6:d4:97:68:
63:e7:47:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:29:17 2025 by rpki-client