Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
File: IacXNhMJ0pOTUcnYuiFz24MZqI8.mft (raw, json)
Hash identifier: ZUq4ihokvIvCvUwGtLs8nbqeaHEdfIFPzXCWVDlGrX0=
Subject key identifier: 39:91:E8:FD:CF:B9:99:8A:44:34:EF:E8:EB:E1:6A:1D:F3:2F:74:CE
Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f
Certificate serial: 0198D515AA1E50AC6F09DE73B9B46523FF82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
Manifest number: 0E66
Signing time: Sat 23 Aug 2025 04:00:23 +0000
Manifest this update: Sat 23 Aug 2025 04:00:23 +0000
Manifest next update: Sun 24 Aug 2025 04:00:23 +0000
Files and hashes: 1: IacXNhMJ0pOTUcnYuiFz24MZqI8.crl (hash: 41pjno53NPQTTeCqzNJM/uwAusq4hw1zFjl5IJXIfps=)
2: PeD0qOPxUYxeVA81pP9--xNVIzU.roa (hash: fJvgODfg2m2y6FUhDf+GL6D88mfLwM4rg59sQSq2L84=)
3: qwmmpmJft8mwuiEXYTlzhJQuep0.roa (hash: Q0Z/E8v8Q7W2fm0rXhwdPc4pFVbeDlufQTIsqxx5ZeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:aa:1e:50:ac:6f:09:de:73:b9:b4:65:23:ff:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f
Validity
Not Before: Aug 23 04:00:23 2025 GMT
Not After : Aug 24 04:00:23 2025 GMT
Subject: CN=3991e8fdcfb9998a4434efe8ebe16a1df32f74ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9c:84:f3:41:68:11:14:0c:85:40:fb:58:c3:
8f:2c:a0:b6:1c:f1:63:09:12:36:37:f3:9e:61:0e:
82:42:d9:d8:89:3f:ce:fe:15:72:53:11:70:c0:1a:
d0:e3:d4:92:2c:18:76:0c:f7:45:29:dd:8c:c4:ea:
fb:97:d3:99:d2:a7:3a:9e:d7:c5:67:6f:8d:93:fa:
47:11:08:14:79:39:f8:c1:e6:3a:ca:f8:e0:1a:cd:
f1:37:ac:e0:06:f8:0f:ca:62:53:51:f1:2e:98:da:
6e:7c:7c:55:52:8d:13:64:ab:97:01:dd:28:e2:3a:
12:07:8b:ed:9f:32:a6:e1:05:66:49:33:78:08:5d:
0d:08:d9:cf:3a:85:23:19:d2:f1:f8:66:cc:84:cc:
fa:32:88:c1:88:70:a0:a1:49:03:4b:8e:53:d7:6b:
2d:66:f8:34:54:c1:9f:2c:e9:ce:ca:91:e5:8f:d5:
62:ed:8c:77:94:9f:a8:8c:f5:8b:6a:02:ce:8c:5b:
a2:d6:07:64:9d:5b:ea:c3:9b:67:8a:e2:31:c3:64:
60:5c:5b:20:15:88:df:3e:9c:00:85:a3:c5:1f:05:
8a:b5:21:6e:bc:52:20:e9:53:2a:08:74:2a:e7:11:
f2:3f:f6:5b:21:25:f9:61:e1:9b:e6:9a:17:62:b3:
a3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:91:E8:FD:CF:B9:99:8A:44:34:EF:E8:EB:E1:6A:1D:F3:2F:74:CE
X509v3 Authority Key Identifier:
keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fe:43:22:d0:c5:5d:0b:aa:84:48:50:fc:26:91:1f:03:1d:
e0:6b:0f:bc:31:5c:ce:8c:71:8a:45:55:2e:19:58:46:2e:65:
49:5f:a0:68:aa:ab:7a:f7:bd:e1:f8:59:1a:e8:a3:19:c7:a6:
cc:a6:35:c7:c4:69:7f:35:d3:f4:52:80:00:14:ea:c2:2a:26:
f7:cb:c2:e3:3e:2e:3d:a7:30:36:5e:3c:ec:90:76:5c:62:5f:
a3:b5:6f:10:a1:f9:31:37:e4:45:1f:04:f6:96:98:36:49:75:
85:cc:e1:4a:3f:ae:c5:8a:40:81:bd:09:09:8b:aa:85:49:32:
ab:3e:c6:11:24:89:73:f4:44:94:b4:18:4d:7c:c4:01:b6:49:
ff:14:60:60:8e:2c:5f:cb:e0:f1:08:84:91:52:1b:86:0c:c5:
32:50:25:70:86:eb:35:47:1c:9b:55:88:9d:4a:5b:ee:8c:88:
f4:cb:89:45:f6:05:1c:a0:7e:ab:10:71:f5:f2:25:c8:52:54:
e4:84:0b:d2:17:fb:65:46:b1:ee:cd:d5:f8:09:b4:34:d6:5b:
95:dc:a7:ef:86:e6:f6:07:59:a6:7e:65:21:90:de:33:b5:30:
0e:82:f7:a1:5e:ce:5e:0e:b8:10:4e:e3:e3:be:e9:e6:02:5c:
b2:85:cd:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:45:59 2025 by rpki-client