Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
File: ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft (raw, json)
Hash identifier: jnwWHrRLahyD6J2PXPxhJKlVbNRqs/pLoPyTqbV0+s0=
Subject key identifier: 04:36:17:DE:59:50:F1:42:37:59:B1:C0:27:28:50:C2:F2:41:51:3F
Authority key identifier: 8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F
Certificate issuer: /CN=8b17fe8dd72c50c628dea973158d0f942326da8f
Certificate serial: 0198D5BBCFDF5D5A37B33EEA5EF61EBD5F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
Manifest number: 07CB
Signing time: Sat 23 Aug 2025 07:01:52 +0000
Manifest this update: Sat 23 Aug 2025 07:01:52 +0000
Manifest next update: Sun 24 Aug 2025 07:01:52 +0000
Files and hashes: 1: DLubGHoQGgvM_j186blmZIGyLZM.roa (hash: TEMPnE8yGqVWn4gW4EZOnV9emzYVMGQtqJpNZOLj0Yc=)
2: ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl (hash: I2r638QS4JDO+bRMYu/D0pYxb7dS99UEeG/kLD1rTXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:cf:df:5d:5a:37:b3:3e:ea:5e:f6:1e:bd:5f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b17fe8dd72c50c628dea973158d0f942326da8f
Validity
Not Before: Aug 23 07:01:52 2025 GMT
Not After : Aug 24 07:01:52 2025 GMT
Subject: CN=043617de5950f1423759b1c0272850c2f241513f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e4:b0:22:86:a5:d1:a4:bf:15:f3:df:34:0f:
c3:88:eb:74:36:08:ac:cb:8f:4e:16:2f:ac:4c:66:
86:11:f0:20:d3:ad:06:29:d7:9a:22:fe:03:fb:ba:
69:6d:d0:a3:85:2e:c5:58:dd:7b:91:1d:54:dd:6f:
eb:80:95:fb:74:f8:b0:de:46:24:19:2b:7b:03:f9:
bd:5e:85:53:a6:38:30:4a:05:ba:b5:40:77:fd:41:
bd:97:c6:b5:04:d4:e8:a4:65:32:17:a0:d4:87:c7:
87:66:b2:9c:c6:53:11:1f:8d:01:77:65:8c:52:2e:
c1:5b:6d:b2:3c:18:92:ce:1a:bf:af:d4:a1:94:1e:
4c:c7:da:2f:86:83:f2:81:cf:ef:b8:f5:29:f3:18:
c8:c8:d1:62:f2:18:36:27:94:ee:39:dc:03:93:ec:
ae:f3:bf:a8:12:7d:4b:a9:c7:bd:fd:6f:05:f1:2c:
7e:cd:4e:30:5b:12:7d:dc:a8:e5:91:98:91:65:71:
4a:a1:fa:0e:58:7c:ae:2d:51:0b:8f:0d:19:83:9f:
a8:71:6e:e9:d0:ee:90:64:c2:0e:9c:c0:41:12:24:
b3:36:92:1c:e6:a8:a3:06:61:92:6e:d3:cc:49:66:
fb:c3:41:7f:1b:37:9f:20:5c:08:d9:42:f3:33:02:
1b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:36:17:DE:59:50:F1:42:37:59:B1:C0:27:28:50:C2:F2:41:51:3F
X509v3 Authority Key Identifier:
keyid:8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:55:a3:f3:7f:cd:b9:54:8f:71:0b:a9:66:1b:18:51:6d:fb:
16:fe:51:2f:0f:70:be:07:06:52:b9:fe:cd:69:b2:ca:98:37:
b7:23:c9:73:77:b6:7a:81:de:85:37:50:21:4f:8d:5e:89:4d:
25:46:4e:5b:d3:1a:f2:e1:82:df:80:d9:49:b7:c8:aa:93:92:
71:46:c9:7c:cb:e5:dd:25:16:93:77:14:fe:2b:fa:dd:3f:7f:
29:b5:d8:ce:f2:94:f5:62:48:81:a6:23:d5:42:80:7f:99:c0:
fe:5a:4d:f1:dc:69:67:f1:14:60:30:9a:81:e2:95:9d:67:8b:
c2:69:8c:5b:af:9c:26:03:a9:a8:9e:55:b3:fa:01:cc:64:01:
2c:52:bf:d6:07:7f:c4:be:cc:8f:55:f3:26:a6:05:60:48:92:
fa:ca:63:2b:9a:00:1e:38:1f:52:37:95:a4:3e:4e:2f:a5:c0:
cd:87:dd:bf:58:10:ce:5a:9e:b0:e1:f0:f2:37:20:ff:77:6b:
8f:b7:8d:c8:39:f0:cc:1f:65:70:88:45:53:40:6c:1b:17:42:
ed:19:e7:b4:5f:59:df:40:cf:2c:e5:40:bc:af:be:e4:df:72:
18:93:a7:86:d9:f8:e3:8a:c5:f8:94:5c:c9:4f:a4:3b:69:28:
f0:49:b3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:58 2025 by rpki-client