Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
File: IhHwQD6XRloB3RRbwVB75WVxDU4.mft (raw, json)
Hash identifier: ZQ4v1XslEmKXPT+WKce74BhE8xUIZvNIQd9/hZiu+Kk=
Subject key identifier: 45:FD:58:35:D1:2C:07:3D:40:A8:D3:03:47:09:96:FB:A4:BC:F7:F1
Authority key identifier: 22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
Certificate issuer: /CN=2211f0403e97465a01dd145bc1507be565710d4e
Certificate serial: 0198D5156D5DC7914A8D1FEFD5A94336DB03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
Manifest number: 06FC
Signing time: Sat 23 Aug 2025 04:00:07 +0000
Manifest this update: Sat 23 Aug 2025 04:00:07 +0000
Manifest next update: Sun 24 Aug 2025 04:00:07 +0000
Files and hashes: 1: 0Td-ytKd7IQkV6ppvSRDV5Vu3uc.roa (hash: vadykyjqf/87L2UrE0dzG3fnpUitaYJ3rncrWvmznpA=)
2: IhHwQD6XRloB3RRbwVB75WVxDU4.crl (hash: 73a+Dy5l8PFYZXDFY1Lw7XgZLP8hHsa+m6RZh0A3rvg=)
3: klqt66FL_fbr6-S9maCaJ71u_2M.roa (hash: veL+ZGa8+a7DgdnASURYCHEXm47JFKP1LXkF9cJkBfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:6d:5d:c7:91:4a:8d:1f:ef:d5:a9:43:36:db:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2211f0403e97465a01dd145bc1507be565710d4e
Validity
Not Before: Aug 23 04:00:07 2025 GMT
Not After : Aug 24 04:00:07 2025 GMT
Subject: CN=45fd5835d12c073d40a8d303470996fba4bcf7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a6:2c:cc:4a:70:6b:b0:d9:52:0e:d6:ac:06:
52:55:24:cc:c1:12:a7:19:af:ec:75:5e:bd:6b:6f:
30:a5:26:1c:3c:cd:b9:4d:2f:fe:60:42:80:5a:44:
39:9b:51:4d:47:c3:4b:e6:cb:06:b7:05:5c:69:66:
2e:c5:20:7c:f2:f7:73:71:6e:2a:a0:a4:c3:83:de:
b4:bf:23:d7:f3:32:4a:7f:92:d6:10:ef:0d:64:f0:
b2:da:8a:9a:64:63:b0:68:bf:37:e7:9b:75:61:68:
85:8a:5f:02:70:9d:38:a5:52:8c:b2:32:74:f3:00:
9b:50:4a:8d:0a:d2:56:68:19:b9:3b:68:58:e8:90:
66:4a:89:1f:4a:5e:39:d2:47:a4:3c:55:28:e7:f6:
a6:34:b4:c8:78:f9:99:48:f8:dc:3e:99:d1:45:e2:
e2:c5:d3:7e:44:98:ab:bf:f0:71:24:05:62:7b:d8:
fc:7f:2b:0b:93:d8:2e:ba:e9:01:91:a8:af:28:6c:
4a:dc:63:ec:be:05:35:ac:8d:66:0e:86:e8:dc:11:
bd:36:bf:93:8a:ce:01:1b:1f:60:80:bc:d0:57:48:
e6:56:8f:0e:b3:e6:8f:31:26:43:ce:3c:64:28:e6:
e4:0f:16:e3:5d:21:8b:56:9c:52:19:62:ef:71:52:
21:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FD:58:35:D1:2C:07:3D:40:A8:D3:03:47:09:96:FB:A4:BC:F7:F1
X509v3 Authority Key Identifier:
keyid:22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:30:e7:3e:50:2f:55:6e:b1:88:fb:2a:78:ed:59:c3:bf:70:
2e:ce:0b:9c:0a:15:56:4f:23:47:d3:63:2f:99:73:f5:29:97:
88:8a:72:d9:48:90:49:26:4a:31:08:cd:cc:71:2b:e7:14:b4:
c9:3a:cd:08:a9:2a:68:7d:6f:79:97:8e:f2:4e:7a:61:b9:35:
5c:2c:2b:3b:35:23:9e:98:87:ba:ac:a8:d0:b1:ee:5c:d7:62:
40:cb:a0:f2:63:de:f8:6c:9b:17:9a:bc:6a:7e:65:57:8a:08:
3a:6f:d7:5d:85:e9:a2:3c:95:52:5e:64:42:fa:82:69:33:31:
2e:17:38:a3:7b:eb:20:0d:b6:e5:1c:0c:b9:a6:27:28:19:da:
65:74:ec:e0:16:90:3e:e5:0a:86:fe:a3:0f:d0:f3:b2:90:44:
67:26:68:cb:43:cd:33:64:72:4e:39:37:ea:98:13:08:09:1c:
c7:2a:9f:83:a0:fd:31:c8:ba:23:98:de:b2:b4:33:bf:7e:71:
98:3a:f3:e2:49:1a:81:f8:d7:1a:9c:48:9a:a6:f4:93:f6:40:
cd:6e:d8:1d:99:af:68:c6:4c:fe:a5:f7:43:24:27:f6:25:83:
90:ce:10:80:e4:8b:81:7b:88:7f:48:df:43:0c:15:d4:8c:bc:
fe:59:cc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:31 2025 by rpki-client