Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
File: iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft (raw, json)
Hash identifier: tKogVD0hb69xA5IyX/lN6uLwDFrrPo3i6V3VifByMiU=
Subject key identifier: CB:BA:CD:AC:EC:CC:C6:0E:0E:1D:AF:A4:EB:9C:81:0D:87:DD:9C:B4
Authority key identifier: 8A:A1:FE:9A:4C:03:D0:15:AE:C9:74:E2:D2:97:09:A9:79:EB:82:F1
Certificate issuer: /CN=8aa1fe9a4c03d015aec974e2d29709a979eb82f1
Certificate serial: 0198D5BBCFBCAC797A1ECA477346C3BF048D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
Manifest number: 0F19
Signing time: Sat 23 Aug 2025 07:01:51 +0000
Manifest this update: Sat 23 Aug 2025 07:01:51 +0000
Manifest next update: Sun 24 Aug 2025 07:01:51 +0000
Files and hashes: 1: 03mz0LQjzt1ORtulSs8-RgKcMnM.roa (hash: o7HH4upfGHhmSB89uCr8oSYNHbC8ZdA+S7MeD1sbYe4=)
2: 2Qr14eAD37nuU_5fo7_UeplXIWU.roa (hash: usgUNw1aFsserU4Vh7SHZUsSrOPQTJ2Wa8CALhVnFWI=)
3: XcS7NtVySUtUzIKZEZ4PM2dCvo0.roa (hash: RI3/B49k5u7aP42xJ7PCHqmPzqodpebWnjl4/ch5Tn4=)
4: iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl (hash: 8g7AdE0zDu+qNoCyIuC/zchESAkTIF7m/ICfCmYz97Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:cf:bc:ac:79:7a:1e:ca:47:73:46:c3:bf:04:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa1fe9a4c03d015aec974e2d29709a979eb82f1
Validity
Not Before: Aug 23 07:01:51 2025 GMT
Not After : Aug 24 07:01:51 2025 GMT
Subject: CN=cbbacdacecccc60e0e1dafa4eb9c810d87dd9cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f9:de:33:8b:51:ed:df:3c:c3:e2:b8:51:5b:
b6:58:90:bc:d9:0f:30:a7:6f:8e:a6:e1:cb:fc:c8:
d8:7c:f1:24:b9:76:b6:d6:1f:f1:50:95:f8:9d:88:
0f:43:81:b2:30:94:b2:80:1b:11:f7:15:66:62:47:
91:3f:44:d6:df:13:84:b4:9e:57:04:2d:33:ca:11:
45:5b:58:12:da:8e:89:15:fd:1a:5e:89:d6:7d:f3:
c7:a1:e0:9b:23:5c:0a:a3:50:94:d6:bc:ca:52:70:
17:c4:de:79:a1:94:7b:97:8b:5e:0b:f8:69:ff:a9:
87:ec:e7:1d:54:49:dd:45:a1:50:83:30:4e:2f:c3:
c5:00:44:0b:c7:1a:68:84:2b:8b:59:55:90:25:f5:
ff:49:c9:6d:5b:a9:bc:2e:ab:26:69:dd:23:29:ed:
7b:69:f4:ab:15:20:4e:f0:49:86:1d:b0:d0:64:df:
45:ce:92:a1:35:81:67:3d:cd:3a:69:14:17:b5:56:
22:ed:ad:c5:20:c7:b7:07:8f:e4:f6:86:82:34:ec:
50:16:09:43:65:7a:f7:d8:32:ef:1a:d2:ce:ff:44:
8d:34:40:7e:21:64:23:48:5d:14:3a:36:45:34:78:
6e:54:d3:65:4a:53:f8:9a:e0:7e:e8:23:22:59:d8:
60:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BA:CD:AC:EC:CC:C6:0E:0E:1D:AF:A4:EB:9C:81:0D:87:DD:9C:B4
X509v3 Authority Key Identifier:
keyid:8A:A1:FE:9A:4C:03:D0:15:AE:C9:74:E2:D2:97:09:A9:79:EB:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4e:1d:0d:0a:4b:46:10:29:60:5b:5a:a3:d1:86:6f:50:43:
ab:b4:e2:f3:28:03:d0:5d:5b:50:39:a0:e3:e0:ff:e2:a9:ce:
8c:74:fa:1f:d0:6d:7d:d3:73:e8:3a:90:d9:a5:50:85:00:51:
a2:e6:f0:68:c1:48:2a:c9:4f:28:ce:01:db:bc:d6:13:77:b4:
da:36:f9:73:af:39:ce:e2:ab:dc:d9:75:c6:5e:b4:4e:90:87:
0f:50:1d:b8:74:de:17:a5:fe:7f:40:54:94:da:fb:09:36:37:
ee:b0:b3:7b:df:d1:80:31:90:80:8b:ff:85:ff:92:19:8d:f1:
b3:b8:d6:af:97:58:82:71:cf:45:20:43:ed:67:38:f4:a4:3f:
0d:a0:af:05:e8:89:bb:d3:a1:f6:b5:fe:45:81:97:8e:b4:f9:
a8:9d:4c:54:52:78:ad:f2:89:8d:16:2c:bb:9a:a7:b0:02:99:
60:87:4f:55:ac:d2:df:c8:12:e2:b1:92:f0:d0:a0:c9:95:f2:
7d:aa:81:cb:96:e6:2d:ff:45:02:bf:13:a5:24:79:ba:70:ce:
fa:a2:00:f8:ff:78:d8:d4:53:fc:f3:c8:05:72:f0:7f:3c:2a:
19:f7:37:19:92:2c:90:dc:47:ba:ff:00:2c:81:c1:77:59:2f:
7c:6a:0a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:03 2025 by rpki-client