Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
File: IrPk850cPBTYMWBr_KFmbd6b7WI.mft (raw, json)
Hash identifier: SyHPmoJ87VjLDJbb1gcnhl9/JbFSsVFBL2ZgRAAqWUw=
Subject key identifier: C4:DC:D9:B5:84:2F:88:CF:CD:EC:30:47:2C:A4:17:B6:2B:9E:AF:3E
Authority key identifier: 22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62
Certificate issuer: /CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62
Certificate serial: 0198D73B5680333FAF050F0AF480D7BA7AF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
Manifest number: 1085
Signing time: Sat 23 Aug 2025 14:00:46 +0000
Manifest this update: Sat 23 Aug 2025 14:00:46 +0000
Manifest next update: Sun 24 Aug 2025 14:00:46 +0000
Files and hashes: 1: IrPk850cPBTYMWBr_KFmbd6b7WI.crl (hash: I0KsRnDlV/mik2NGXal6stSbTqgWpLnw5704CrXBV1A=)
2: eUQnxtW594Ad6vU9njmKr7uq7YI.roa (hash: 1w4c53hZ6iVZ5hhHMJGwGhh/v6xJyfrfdyok+gD0KR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:56:80:33:3f:af:05:0f:0a:f4:80:d7:ba:7a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62
Validity
Not Before: Aug 23 14:00:46 2025 GMT
Not After : Aug 24 14:00:46 2025 GMT
Subject: CN=c4dcd9b5842f88cfcdec30472ca417b62b9eaf3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c5:16:50:c3:3f:18:29:85:41:ae:4f:39:03:
c4:c4:06:eb:ef:a6:c7:1f:f5:47:5c:4a:47:d6:7e:
98:5d:9f:60:d5:19:7b:d7:11:db:76:f2:12:be:55:
0b:d1:a8:04:ae:4c:8c:49:0f:1f:aa:5a:9a:28:11:
b2:50:bb:a9:6d:60:6e:03:fc:56:5e:f9:a5:a0:2b:
65:f3:f0:ad:bb:b0:81:6e:98:c8:a6:9f:00:e9:3e:
53:50:d6:41:d5:4e:3c:cc:05:53:4d:8a:86:10:7f:
ce:0e:9a:5d:b5:cb:46:72:cf:b4:d3:74:39:2c:4d:
ab:23:50:27:ee:27:d2:c1:dc:95:2d:06:6c:22:1f:
c0:70:41:d3:06:13:b3:ed:1a:b6:50:9b:58:5c:d4:
ef:41:86:67:54:c1:77:f6:93:3b:31:82:64:0e:ee:
dd:e2:6c:29:4f:00:67:63:17:fc:36:a3:1f:aa:4c:
71:65:72:df:c5:02:15:db:01:f4:93:6e:62:69:07:
99:1f:d3:61:64:a3:3c:cd:6c:c2:c5:7f:6f:9e:f1:
f6:36:a0:3e:7c:08:e6:78:7e:c1:46:96:bf:7c:33:
a9:be:d9:cb:c3:c0:d0:cc:89:be:59:7f:86:51:d5:
1f:e8:87:01:b4:b0:d0:c4:ae:38:cc:d6:b6:aa:73:
65:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DC:D9:B5:84:2F:88:CF:CD:EC:30:47:2C:A4:17:B6:2B:9E:AF:3E
X509v3 Authority Key Identifier:
keyid:22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:59:93:35:4f:79:73:34:3b:68:5f:26:26:2f:d8:52:97:18:
ec:0e:43:ff:de:56:cd:74:76:6c:70:c4:de:ad:77:52:00:af:
1e:20:7d:9f:09:7e:ba:55:2f:6c:8d:05:4f:94:7e:fd:f2:0b:
09:c1:e9:60:3d:e1:c7:0d:81:bc:0c:cd:ff:1e:a5:b0:4a:ec:
c3:a1:f5:65:e8:2f:75:7b:f8:68:8e:6d:55:99:c2:bf:1a:93:
49:b3:c4:14:56:f9:74:4b:f6:b2:98:54:86:33:51:21:2b:0c:
2f:ab:7a:97:2e:09:a3:4d:c4:f6:8f:3c:33:84:a8:68:4e:3e:
eb:7c:4b:72:04:f5:11:02:6b:14:9d:bb:85:e7:d8:7f:04:72:
f1:6a:4b:92:3d:f1:62:fd:ea:8f:cf:e6:5f:43:8c:7e:46:3b:
a0:6c:c8:25:4a:cd:f2:9c:f5:37:e8:72:a5:49:3a:58:97:ab:
55:62:87:c1:c8:85:28:bf:6d:a1:53:cb:90:eb:2a:3a:28:5f:
b3:29:dc:e8:e1:3e:b9:3e:b1:79:dc:8f:33:0d:0c:3d:74:c1:
b1:c8:bc:82:75:14:60:fa:b8:07:ef:86:05:76:3d:36:b1:8b:
f9:54:08:67:90:99:f2:82:a6:4f:da:1a:0c:da:3d:6d:42:e5:
93:3d:d5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:11:55 2025 by rpki-client