Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
File: IJ2ng837PLbZvILBktbXKrtKM20.mft (raw, json)
Hash identifier: KBJYwN/4k0/NvLf4oVGsbtdluUuPWJ5kNf5ZthGULg4=
Subject key identifier: 6E:BD:7E:08:26:A9:48:5E:2E:B5:79:D9:E1:17:B1:1B:7B:4A:1B:1E
Authority key identifier: 20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
Certificate issuer: /CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Certificate serial: 0198D472BD9C6B2D325AE285070E17367631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
Manifest number: 028A
Signing time: Sat 23 Aug 2025 01:02:26 +0000
Manifest this update: Sat 23 Aug 2025 01:02:26 +0000
Manifest next update: Sun 24 Aug 2025 01:02:26 +0000
Files and hashes: 1: 2n3afJDZ2VaAW1ICi9wuuluJH-s.roa (hash: n7gdmzqfRPjhPckkIN46JD6+pmnsuH8Fvwcad0thHWk=)
2: IJ2ng837PLbZvILBktbXKrtKM20.crl (hash: u3oJYykaLcjTQbCUptwXdXPJo0VbYZBu68xiP6LyG/k=)
3: fc650b5-Hy28l_7CM0InWSbhHHA.roa (hash: I0jfOZTYpGZasFE0U01uqVVs9byyAIXg5OzAj9nSBPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:bd:9c:6b:2d:32:5a:e2:85:07:0e:17:36:76:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Validity
Not Before: Aug 23 01:02:26 2025 GMT
Not After : Aug 24 01:02:26 2025 GMT
Subject: CN=6ebd7e0826a9485e2eb579d9e117b11b7b4a1b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e4:87:9d:72:d4:a6:60:79:60:5f:69:33:d9:
dc:fb:d9:9b:db:cf:3b:c2:c0:9a:5f:07:23:79:28:
0a:d2:3f:ed:ab:c2:e1:93:ff:22:d7:98:16:9e:3a:
0b:ed:d9:0d:fd:11:5e:38:06:2d:43:dd:df:58:0d:
2d:77:e1:3c:24:be:28:84:8d:3a:a1:62:a4:f7:76:
ba:4f:a3:ed:9e:7d:76:b8:3f:01:68:47:f2:62:6a:
af:ea:44:d9:2b:a4:8d:bb:8e:10:11:5c:cd:94:3a:
9d:f0:6f:c8:99:5d:65:ea:9a:2c:77:a1:96:ff:78:
b6:fa:10:07:3f:36:e6:c3:75:43:4d:18:26:9c:b7:
85:2a:66:90:a6:2d:6b:04:d8:ea:32:44:96:44:79:
bb:37:e1:b0:6e:a4:48:af:df:61:3b:b6:bd:e7:0f:
0a:8a:31:a1:59:dd:69:d5:53:f3:d8:cb:b6:70:06:
7b:9f:db:51:7f:ef:18:d0:83:3f:04:a8:e3:dc:ad:
12:05:56:6c:df:6e:f8:99:7d:3a:3f:a9:ba:f7:57:
dc:7b:51:9f:f1:d4:40:ed:2c:e1:ef:bf:83:30:f1:
34:84:87:54:9d:71:81:34:44:f8:78:e9:02:58:dd:
d1:b7:38:7b:79:0c:1d:09:62:b5:16:79:0b:47:2f:
70:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BD:7E:08:26:A9:48:5E:2E:B5:79:D9:E1:17:B1:1B:7B:4A:1B:1E
X509v3 Authority Key Identifier:
keyid:20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:20:1d:5d:53:59:05:1f:41:65:5d:f3:ff:7b:1c:6c:25:fd:
b0:03:06:db:e1:2e:24:54:95:1c:c5:32:b4:fe:10:e9:cc:b0:
d7:a0:01:b1:2e:19:c4:e4:fc:c2:ae:9e:f3:60:65:bb:b0:ea:
18:0d:3e:52:d5:fb:aa:3b:eb:b4:f7:66:a5:9b:86:35:35:3e:
a7:91:54:38:4b:a9:c0:3c:04:1c:d1:0d:c4:9d:89:20:3b:b5:
2a:9e:a9:2a:c0:07:ae:6b:bc:db:ee:75:e6:4d:ad:af:a4:39:
40:25:48:36:b4:24:cd:7d:92:d1:64:f8:77:58:9b:16:3a:50:
67:9d:9e:56:be:83:6b:ce:ab:e2:8a:f9:0a:d3:8b:b5:6a:f9:
4a:bb:cb:ec:e7:a9:a0:9f:0f:d8:ec:43:59:aa:4b:85:e7:07:
62:06:22:0c:59:c4:6d:af:a9:f1:97:cc:04:72:9f:79:08:2c:
bb:b5:72:d7:f0:1b:01:c6:d4:6e:2f:e4:2f:53:10:79:f0:6b:
6f:ff:4f:51:06:98:a8:5c:32:ab:26:6d:86:26:99:78:27:c5:
0c:7a:cc:16:62:67:24:49:0a:b7:c5:43:c4:92:38:f7:fc:d7:
9a:41:8b:4b:f5:78:c8:fd:9f:e6:7d:4e:6c:f1:17:9e:3c:32:
b3:86:19:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:14 2025 by rpki-client