Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
File: iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft (raw, json)
Hash identifier: 5YOL4GLFY+8zSjkpKWq4HLkCZ6y1Jo17p6kvaQDgFh8=
Subject key identifier: E2:00:13:BB:2E:00:4C:5A:98:26:B5:6D:66:C4:9A:50:3B:6A:13:D9
Authority key identifier: 88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C
Certificate issuer: /CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
Certificate serial: 0198D4A7DF3666E6C7885E82CC98859DF275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
Manifest number: 1358
Signing time: Sat 23 Aug 2025 02:00:27 +0000
Manifest this update: Sat 23 Aug 2025 02:00:27 +0000
Manifest next update: Sun 24 Aug 2025 02:00:27 +0000
Files and hashes: 1: PMwAzTvxWSjXFX28MV2s8k9HrhI.roa (hash: t71gV8OtnRcF1xNLqmy1I40UHYgIb7svkEMIzmfxErA=)
2: iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl (hash: RZ+mcoCnn8gAZX1oCAH9/hFMnuWyYDcnK3dGD2rV/h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:df:36:66:e6:c7:88:5e:82:cc:98:85:9d:f2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88feb2b050d50ad8ce10c1c2f507fdb8a52d028c
Validity
Not Before: Aug 23 02:00:27 2025 GMT
Not After : Aug 24 02:00:27 2025 GMT
Subject: CN=e20013bb2e004c5a9826b56d66c49a503b6a13d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:92:e9:63:2e:b5:51:ff:25:70:a6:5b:24:48:
ba:77:63:e5:79:58:86:a9:be:76:e9:34:01:17:71:
32:16:5a:57:8a:53:0a:89:60:4f:54:96:f6:cd:7d:
27:c7:bd:cd:4d:61:36:53:bc:23:e6:f8:2e:14:8e:
ab:1d:c4:83:ef:9a:e0:39:4d:a1:9a:03:a4:23:a9:
7f:8b:85:dc:cb:38:82:a2:3e:83:8f:c3:6e:33:c1:
6f:21:3c:c2:90:c4:df:73:15:7d:56:f4:d1:b1:84:
af:7c:cc:ac:73:13:db:1b:5c:db:01:9c:22:55:ef:
f3:d3:30:42:9a:b7:cb:3b:d8:34:65:0a:de:3b:94:
48:f7:bd:50:60:52:10:a3:f6:ea:3d:a6:6a:00:ef:
5f:ad:d0:fb:ea:7e:cd:34:56:c9:12:10:d2:fd:7e:
9b:04:e9:14:5a:1b:75:a3:8c:ce:02:49:cb:bd:7f:
fb:79:f9:2e:e1:de:b9:db:93:3f:16:3a:ee:59:96:
25:2a:bd:50:2a:39:10:42:65:ff:b8:df:d8:da:d2:
74:5b:19:27:78:5c:53:3e:02:ea:f7:e4:d2:5a:84:
21:47:30:c6:c0:e2:9d:2c:a1:9c:a2:e1:33:c0:3c:
28:1a:7f:70:c4:d7:35:8a:9c:d9:75:8f:af:91:f0:
45:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:00:13:BB:2E:00:4C:5A:98:26:B5:6D:66:C4:9A:50:3B:6A:13:D9
X509v3 Authority Key Identifier:
keyid:88:FE:B2:B0:50:D5:0A:D8:CE:10:C1:C2:F5:07:FD:B8:A5:2D:02:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP6ysFDVCtjOEMHC9Qf9uKUtAow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/1d312f-be9e-4a27-b22c-2f21f4524683/1/iP6ysFDVCtjOEMHC9Qf9uKUtAow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8f:fa:74:57:61:0a:40:b0:20:5f:03:db:e5:aa:d3:74:98:
3b:d0:cf:b5:22:db:9e:65:bb:81:c1:f3:e2:a5:6f:3e:4e:00:
47:bc:88:a9:8d:4d:22:41:e2:48:47:8b:f5:43:29:e7:2f:67:
10:46:ac:ee:b5:ac:dc:15:78:d3:c8:ff:ad:01:c4:60:2d:a4:
6e:60:be:25:1b:81:ac:9a:11:10:a3:c9:d5:34:cc:ae:15:b3:
12:cd:ab:90:83:d5:56:f8:86:cf:9f:81:6d:b2:05:79:a9:b9:
9b:34:df:30:cc:33:96:c3:75:86:71:ea:f1:ed:1c:f8:76:a4:
f9:b4:f3:03:27:3a:b7:3c:14:2c:15:38:fa:35:c5:41:32:c9:
6f:71:73:02:78:c7:8d:a7:c9:ef:25:84:d1:81:cf:13:32:05:
73:e8:2c:4c:8b:93:74:58:0b:e5:59:1f:9f:7f:b8:c5:2f:b5:
aa:94:58:99:82:47:f3:46:f5:be:66:ed:d8:9b:a3:4c:47:ca:
26:5a:7d:ac:d8:b9:92:c9:86:3f:f3:5a:4d:cd:07:6c:c5:0b:
21:09:9b:d4:c6:cd:46:5c:3b:1f:09:fa:8f:8e:a9:95:73:ca:
66:76:b5:77:9d:05:97:e5:c5:05:5b:fd:b4:4a:09:1a:41:2e:
a7:c2:e8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:38 2025 by rpki-client