Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
File: IQ2p568B3nVEj0kGqsQb0pZOiEc.mft (raw, json)
Hash identifier: lHsuYxxXt1hJyxUn/qQsDVDWd3ykBpFVpHvRThhkPNk=
Subject key identifier: F7:B3:72:FB:67:9A:20:32:0A:CF:A8:A2:D8:53:24:F2:0F:73:BF:D6
Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847
Certificate serial: 0198D9602F94671D272AD145A197C2DFCD1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
Manifest number: 1650
Signing time: Sun 24 Aug 2025 00:00:16 +0000
Manifest this update: Sun 24 Aug 2025 00:00:16 +0000
Manifest next update: Mon 25 Aug 2025 00:00:16 +0000
Files and hashes: 1: 84db03xfYelGerORYCPaE18sIuY.roa (hash: mGsmynBl7jLseJdNkmqKYTcle2kapG2/B7E0rIACZPM=)
2: DWb6WF8DjwRTU0qXDx46BO4zwgA.roa (hash: CzOBQqTqajUkprVoUPDiYGmEDab6x3jR9YCHnFVJudw=)
3: IQ2p568B3nVEj0kGqsQb0pZOiEc.crl (hash: z4j27YQ66HjMQdtOXoBDzBkl2DxSBVfm7TkX/e6WgHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:60:2f:94:67:1d:27:2a:d1:45:a1:97:c2:df:cd:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847
Validity
Not Before: Aug 24 00:00:16 2025 GMT
Not After : Aug 25 00:00:16 2025 GMT
Subject: CN=f7b372fb679a20320acfa8a2d85324f20f73bfd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fb:82:ae:ff:f7:39:85:2b:51:46:7b:9a:fc:
86:d3:1b:c2:3a:8c:2d:ce:77:38:1f:e0:32:4f:bc:
f3:c2:a8:a1:c1:fd:c8:68:dd:90:2a:a1:0c:14:8a:
f6:f0:60:30:f2:c1:39:50:2f:2e:02:a9:80:fc:2b:
f3:cd:c4:d0:c5:ca:f9:ae:ca:9d:ca:37:3d:84:77:
96:79:d2:8f:03:6e:8b:11:a0:12:30:4e:30:96:2c:
8b:1f:7e:18:bd:8c:9d:56:e2:68:21:8d:be:a1:cb:
6e:71:26:f1:4b:d4:24:ab:e2:66:46:6f:36:c0:af:
66:12:0c:f0:7b:13:d5:d6:a0:c2:1f:6b:06:c5:c0:
e5:79:52:f3:57:d7:df:f7:22:32:ac:f5:c2:56:fc:
7c:90:fc:01:e1:96:e2:62:8b:40:2f:58:74:78:7a:
72:54:40:fe:85:d3:41:5b:62:c1:8b:73:7b:4c:00:
70:68:8a:d3:77:01:65:61:d1:98:12:a3:b0:3c:a1:
ac:b3:76:bb:24:63:31:f8:fa:23:e4:c7:45:0d:a4:
58:07:ef:fc:d5:25:c2:03:45:39:a0:bc:06:17:b5:
57:3f:96:c0:6a:04:19:94:7b:70:5b:ce:58:df:8a:
37:e5:57:6c:7b:9e:a1:91:24:13:99:75:52:23:e5:
32:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B3:72:FB:67:9A:20:32:0A:CF:A8:A2:D8:53:24:F2:0F:73:BF:D6
X509v3 Authority Key Identifier:
keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a2:e4:bb:f4:6a:52:59:a3:0c:0b:a6:e3:95:55:46:8c:29:
d8:fa:d6:8f:2c:1b:57:39:f8:95:86:89:e9:7b:63:06:61:49:
a8:17:9f:7a:9e:b2:b7:e8:e5:26:c9:4f:29:3b:67:a0:db:61:
e4:27:7f:f3:b1:f3:e0:b4:10:14:8d:8a:20:0e:6e:4c:ba:da:
6f:b2:6c:9e:ab:90:e0:69:f9:3b:b8:a0:dd:65:bd:1b:9b:4d:
28:3e:b9:dd:a8:02:66:77:a1:f1:5f:e3:c3:e2:8b:c4:c7:49:
27:77:88:c8:88:ba:bd:fb:98:03:31:94:c8:96:9a:32:15:c2:
97:7a:ca:a0:9a:28:f6:ca:93:ce:0a:b1:03:ae:b6:22:b4:bc:
4b:6b:b6:74:84:5b:d0:97:c1:f9:8b:89:f1:23:a2:ec:18:db:
d3:4e:46:45:41:38:36:f8:72:7c:e1:8e:2e:6b:35:e5:3c:22:
c4:7b:74:e7:3d:9b:45:0a:ce:9d:f1:f4:69:bd:ca:a7:8f:92:
22:88:c8:fa:dd:4f:b4:c5:71:c0:27:28:4a:9d:02:fd:b4:69:
d5:b4:01:61:e3:be:b5:62:00:f0:20:fa:ea:ba:9c:ae:11:62:
fa:a8:f7:78:f3:01:b0:7e:42:13:06:42:eb:9f:a1:f2:5e:c7:
01:54:26:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:16:09 2025 by rpki-client