Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
File: IK7ciyobvW03BV7ADo5g9FiOEwU.mft (raw, json)
Hash identifier: iUdSF3r4Xla/Sb7yWfZ1IYqDynQAQlH+kWMlmzZMVQ4=
Subject key identifier: FD:CF:A6:84:1A:63:29:3D:4C:60:5C:02:BB:00:22:32:82:1C:0C:8B
Authority key identifier: 20:AE:DC:8B:2A:1B:BD:6D:37:05:5E:C0:0E:8E:60:F4:58:8E:13:05
Certificate issuer: /CN=20aedc8b2a1bbd6d37055ec00e8e60f4588e1305
Certificate serial: 0198D4050452B96D4D34D03ED20187BA087C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
Manifest number: 1649
Signing time: Fri 22 Aug 2025 23:02:35 +0000
Manifest this update: Fri 22 Aug 2025 23:02:35 +0000
Manifest next update: Sat 23 Aug 2025 23:02:35 +0000
Files and hashes: 1: 20Yy79DTSfilFFbqcJeVWxZcEUk.roa (hash: Ts6CpvaJSTki03QhEk4q4v0AnVBL0dLMnm27BuNB3Q8=)
2: IK7ciyobvW03BV7ADo5g9FiOEwU.crl (hash: yF+a0iJLQDI5YYcLCrI7TMbVE3wDLZ/crDl4UHQC33c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:05:04:52:b9:6d:4d:34:d0:3e:d2:01:87:ba:08:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20aedc8b2a1bbd6d37055ec00e8e60f4588e1305
Validity
Not Before: Aug 22 23:02:35 2025 GMT
Not After : Aug 23 23:02:35 2025 GMT
Subject: CN=fdcfa6841a63293d4c605c02bb002232821c0c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:51:47:1b:eb:13:bf:a7:7b:63:2e:74:24:1a:
33:0c:92:c0:2d:40:47:8d:5c:ef:4d:7d:a2:60:47:
6f:0a:a2:01:0b:79:11:11:6f:60:98:3b:ba:31:e7:
db:37:7e:b1:5c:0a:ef:2e:a3:af:d9:a9:a6:f4:8f:
fe:09:54:fd:e1:2e:28:d3:9a:4c:4c:7d:e5:b5:9d:
61:c3:16:e1:c2:2f:77:0f:4c:10:5c:42:39:7a:f3:
39:f5:82:2b:a0:7e:f5:df:cc:aa:a7:8a:2c:fb:ae:
6e:bc:f2:3e:29:d7:fd:6a:62:7f:14:61:62:84:27:
b5:91:00:eb:ba:e4:ae:4e:d5:4f:e3:b8:e1:2d:f5:
18:3c:a1:f2:ee:cd:36:23:f5:38:3d:e4:d2:a9:5b:
51:b1:cf:c8:aa:7d:f0:cc:ea:43:0e:11:83:75:7f:
e6:f4:e7:ee:f8:2e:85:1e:b5:96:c8:14:7f:e7:26:
8e:28:28:f7:17:6b:8c:5d:de:f4:fd:70:f4:36:ec:
17:f5:1e:5a:a6:55:29:6c:55:e3:c6:53:13:e4:5f:
d5:20:1b:2e:dd:48:96:ea:ae:48:1a:67:bf:74:c6:
fe:4d:cd:76:94:f4:0d:8e:34:3b:55:65:db:80:93:
94:0f:37:89:bc:99:6d:f5:91:01:53:fb:f9:c9:6d:
a5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CF:A6:84:1A:63:29:3D:4C:60:5C:02:BB:00:22:32:82:1C:0C:8B
X509v3 Authority Key Identifier:
keyid:20:AE:DC:8B:2A:1B:BD:6D:37:05:5E:C0:0E:8E:60:F4:58:8E:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c9:61:0e:df:a1:70:3c:f5:6f:b5:01:12:9f:1e:c9:d2:2a:
14:a3:a5:7f:db:46:30:bb:d0:e5:6c:57:a3:cd:13:78:cb:38:
60:58:ee:68:98:15:12:92:7f:6d:54:d9:43:af:ab:bc:95:70:
a0:23:a6:83:ec:06:98:bd:ea:b1:1e:f6:45:02:f2:75:f7:e2:
c1:2e:01:78:b2:96:62:d0:7a:6e:a5:3b:d1:0d:e6:00:54:9a:
05:a3:ab:19:86:6d:f1:a6:cc:45:57:7e:68:50:ec:9d:c3:7b:
1c:48:ac:86:91:25:a2:55:7d:71:35:0a:4c:8b:f0:8e:fe:2b:
d9:40:49:be:02:37:cb:49:f7:79:1c:7a:e3:a1:69:67:ab:30:
71:82:7e:46:db:73:2f:ca:6a:08:10:cd:9d:99:1a:a3:67:28:
f4:6c:e4:5b:de:32:ae:4f:62:9f:20:3e:86:3f:f8:9b:04:d8:
ad:35:b2:89:5b:73:25:81:92:ff:50:1e:56:ea:d9:e5:b8:46:
08:20:c4:8f:f5:43:80:96:93:7c:dd:7c:1e:9a:af:9b:2f:aa:
a9:6d:60:b0:92:93:92:04:45:d0:06:80:64:6e:d2:b2:e3:e4:
00:cd:3a:64:88:25:16:0e:0f:7c:e3:f4:74:cb:65:1d:85:c2:
c7:79:92:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:43 2025 by rpki-client