Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
File: _iT7KBKuLz1Nm7RYndcx5UaXkQk.mft (raw, json)
Hash identifier: A4phHawq3drVi2EzmfIfPMX7vg8q/63hWAVPn6ZdG88=
Subject key identifier: 5A:EC:C5:D4:88:AE:70:47:9E:48:AD:17:12:24:6C:74:D2:FF:DE:B0
Authority key identifier: FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
Certificate issuer: /CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Certificate serial: 0198D7E11ADD9488BE7DD012B0DFAC37469F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
Manifest number: 1228
Signing time: Sat 23 Aug 2025 17:01:50 +0000
Manifest this update: Sat 23 Aug 2025 17:01:50 +0000
Manifest next update: Sun 24 Aug 2025 17:01:50 +0000
Files and hashes: 1: 7ivcRbHUq4tA4Hz9Wb386VjaBS0.roa (hash: CGbH34TXJ114G1ywTRowOQ13NrG2LKX6vQJmgAwZZz4=)
2: _iT7KBKuLz1Nm7RYndcx5UaXkQk.crl (hash: EfPUlnkKrx895gVlderhBeGO8SrSwrZpR1IBgsqp5K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:1a:dd:94:88:be:7d:d0:12:b0:df:ac:37:46:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Validity
Not Before: Aug 23 17:01:50 2025 GMT
Not After : Aug 24 17:01:50 2025 GMT
Subject: CN=5aecc5d488ae70479e48ad1712246c74d2ffdeb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:14:71:3b:cf:3e:b2:7e:ab:56:31:00:cb:97:
5d:15:27:bb:e9:96:5c:27:88:5d:b3:63:ea:da:8b:
8c:6c:d3:64:de:72:74:fa:05:3a:e7:5d:5c:f9:07:
32:92:60:99:78:cb:01:cf:a5:56:4e:2c:c6:8d:fa:
9c:fa:e7:34:11:a0:73:d4:08:f1:74:7c:65:67:7e:
30:25:69:ab:48:25:76:95:09:47:af:4c:02:b4:b2:
04:25:34:c1:b0:d9:2a:16:e4:2f:be:d7:68:80:50:
52:27:c7:4d:9a:11:40:bc:49:b7:be:85:21:61:71:
e3:52:ab:e2:7f:04:4d:75:44:6d:6f:85:4c:f9:dd:
45:ea:d7:ef:8c:a7:66:31:1d:f6:ad:69:a0:b0:70:
85:99:9a:0d:47:40:7a:d0:ff:12:3a:6c:50:55:7a:
00:b6:c2:37:54:63:25:74:a5:b5:86:d0:dd:ab:15:
66:b2:00:68:a8:b3:a6:57:f0:43:ce:05:a9:df:40:
01:0c:db:7c:0e:34:ec:1d:bc:e6:27:3f:34:8e:c6:
57:48:d2:b4:af:a1:61:ac:48:8c:cf:63:8d:d3:65:
03:41:02:05:67:44:6b:61:a0:12:51:77:94:90:a8:
bb:5b:f5:f2:8e:e8:f1:c7:e6:92:3d:47:94:54:60:
48:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EC:C5:D4:88:AE:70:47:9E:48:AD:17:12:24:6C:74:D2:FF:DE:B0
X509v3 Authority Key Identifier:
keyid:FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:93:a2:b2:5f:db:3e:1e:b0:72:d5:de:13:7e:81:71:2e:84:
50:50:6f:72:d0:5b:80:4d:0b:0b:3d:c7:b5:11:a8:7f:91:f1:
35:a1:3f:b4:61:19:0c:8d:16:8e:b6:b8:ab:f1:d4:94:12:ec:
f4:a0:b8:01:e0:39:4f:3c:0e:58:67:d6:33:2b:32:a1:70:98:
2b:41:05:da:21:92:5c:19:6e:cc:f7:72:c4:d5:03:26:fa:75:
df:e2:85:59:19:22:6d:c7:6f:63:98:06:9e:90:1b:21:13:e2:
eb:c8:20:8b:6d:cc:91:ca:c9:38:d4:b0:71:45:0f:20:63:bd:
e8:a1:14:c9:3a:05:bd:5c:6e:41:4d:9a:da:e7:f9:d4:45:4a:
2f:a5:e4:c1:6d:a6:88:f6:ad:ab:60:d1:fe:44:aa:b6:d0:80:
e1:bd:a2:16:55:da:15:6b:04:10:f4:5c:53:3a:45:2a:57:5c:
9f:63:fd:45:4c:be:df:62:5b:13:47:34:29:08:02:83:61:f6:
54:19:76:09:a5:2e:b3:28:87:1d:7c:56:d5:ba:0a:12:fe:bb:
47:6c:f1:89:97:a8:b8:66:f0:7b:82:a1:bd:cf:c0:86:c8:e3:
e4:76:56:f5:2e:ab:38:38:01:35:33:df:dc:1f:35:25:a1:f7:
52:a7:2e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:57:49 2025 by rpki-client