Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
File: cIR_giGJfW6VLobqLDOauqzBMfU.mft (raw, json)
Hash identifier: 7GGJVmytvtn2eME+ZBrANoq05vfCFBkSDUJFC7rBO34=
Subject key identifier: 1F:FF:2C:CC:42:C8:11:B3:F7:07:DE:65:BC:84:30:64:74:CE:27:90
Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
Certificate issuer: /CN=70847f8221897d6e952e86ea2c339abaacc131f5
Certificate serial: 0198D4734A5F0EFA1D941DF6388B6FE602CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
Manifest number: 0F53
Signing time: Sat 23 Aug 2025 01:03:02 +0000
Manifest this update: Sat 23 Aug 2025 01:03:02 +0000
Manifest next update: Sun 24 Aug 2025 01:03:02 +0000
Files and hashes: 1: 349zjBrXxWXdbWEBD0TY_PcES-4.roa (hash: dTkBBehXJumOuwcY3aMRaxc4m1QE9Au6OaxONrVwqa8=)
2: FGloAOGdHctONwf864BFw9r6804.roa (hash: idNgzg92xFKVGDg8Q8+8kqcQjJU43tGKLwcMZ1BO8+8=)
3: QeA9h5gc7h5TROkBqdTQKlfxGiI.roa (hash: wvC6P2mkgiV/WDCXbKURUPeQIyZPZgtW7FSvBfEWp/8=)
4: cIR_giGJfW6VLobqLDOauqzBMfU.crl (hash: xeh7pc1bckqDctOrTSwVUROStoH/Q8/Je56sww080bg=)
5: f4DXZiMB_Ff_0JwzJIxf0LcmHB4.roa (hash: BYRfPeQZzgZNAMB4knpfUfsNVjUgJWJmqeqw3IISPlY=)
6: rguLiIijQORjnghvpZcGDmu1SjU.roa (hash: JNesrlv42ZJgaFQwOxaZT3TmKgM6sVVqVrh2EttTKxs=)
7: zWJS9qIiKhPDTGBp07EnN-zc5Ok.roa (hash: UIbGdiKmqLamnBzWNetbuRIAxAE+Pp02kC9Gg2VRxdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:4a:5f:0e:fa:1d:94:1d:f6:38:8b:6f:e6:02:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5
Validity
Not Before: Aug 23 01:03:02 2025 GMT
Not After : Aug 24 01:03:02 2025 GMT
Subject: CN=1fff2ccc42c811b3f707de65bc84306474ce2790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a0:cf:5e:e2:7d:a1:3d:d4:7f:6d:d8:56:90:
8a:56:56:af:fa:de:3a:e7:ac:95:c2:48:7c:73:cc:
d5:26:bb:c3:5d:39:54:f3:77:4c:f5:84:81:6c:14:
59:6a:97:9a:d7:26:8d:13:e7:56:23:28:3d:4d:13:
2a:3c:82:c4:aa:a8:3d:14:86:b8:80:7a:5e:df:dc:
90:1b:7a:a0:22:9d:12:92:84:74:f5:ce:9f:1e:77:
72:a8:7f:cb:96:8f:84:9e:01:38:07:20:e0:3a:15:
80:cd:67:4f:2e:8c:c9:ed:f5:7d:72:0c:89:24:7c:
08:f8:4c:f5:04:f5:d0:18:a7:33:6f:e5:ad:fb:ec:
51:a1:57:7e:12:b0:3b:4a:5d:f2:92:1b:c4:4f:b2:
22:93:70:89:4b:38:7c:55:f6:9c:9b:a1:8e:4d:3c:
09:ae:49:53:64:7d:8c:e3:f0:75:cd:a2:d1:97:e0:
a2:09:cc:98:04:74:ea:5b:2c:4f:55:f4:de:ea:cb:
f8:f7:5c:41:17:84:fe:51:75:67:4f:1a:31:57:cb:
b4:6a:56:74:70:1b:72:87:67:55:7e:e7:41:0d:d1:
4e:14:c3:d8:ef:b7:19:55:4d:62:6b:5c:64:05:b0:
ae:c8:1e:f4:ad:7c:e3:6d:5d:73:fc:84:12:0c:82:
81:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FF:2C:CC:42:C8:11:B3:F7:07:DE:65:BC:84:30:64:74:CE:27:90
X509v3 Authority Key Identifier:
keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:32:a7:ec:df:7e:b2:c2:98:b8:32:02:e1:97:67:e5:ad:c6:
aa:ba:67:88:5f:13:60:e7:aa:7c:95:ec:66:bb:b1:e4:23:c3:
03:0b:97:ee:a6:db:7e:94:85:b4:37:7a:35:fb:4e:c0:72:ea:
61:f8:c4:33:88:9b:2a:3f:ad:32:b7:ce:74:38:ff:78:fc:f0:
6c:bf:04:8a:ba:07:96:89:dc:30:bf:45:88:37:60:2d:3f:a6:
9d:13:a4:43:1e:14:0e:4b:f3:ba:a6:19:b1:0c:6d:28:22:bf:
73:66:fb:4f:e6:3f:0e:d2:9d:81:aa:31:85:e3:03:5c:ff:85:
f8:3e:a6:62:d1:07:c4:10:80:c1:ae:1c:21:9d:bc:e4:0d:22:
96:d1:95:8a:a1:2b:47:ca:79:d6:9b:39:7b:02:92:ec:30:db:
a4:82:f2:cd:21:09:06:14:59:ff:b4:aa:7a:7f:f2:51:55:f8:
3a:5b:57:d6:ea:8a:9b:76:06:23:1e:cb:25:79:b0:a1:4d:bf:
07:f5:16:9d:74:21:47:30:ed:08:64:08:01:c7:fa:0e:67:f7:
7d:56:16:20:04:47:9e:5b:ce:d7:69:4d:cc:5a:f4:0c:f2:c4:
65:9e:8c:10:10:cd:7a:04:45:b2:2c:ad:1d:88:e2:14:ea:15:
a5:75:b8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:16 2025 by rpki-client