Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
File: i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft (raw, json)
Hash identifier: 4HxwAyg+JCjaSFbe5TVBJGLYXRwQwD0ap3EXaoSduig=
Subject key identifier: 3E:9D:32:7B:43:A0:92:B1:93:E9:32:DD:ED:90:3A:22:C8:B6:AA:F0
Authority key identifier: 8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0
Certificate issuer: /CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0
Certificate serial: 0198D4A7BD78ACFC83EF7B9A78885DADDF7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
Manifest number: 0951
Signing time: Sat 23 Aug 2025 02:00:19 +0000
Manifest this update: Sat 23 Aug 2025 02:00:19 +0000
Manifest next update: Sun 24 Aug 2025 02:00:19 +0000
Files and hashes: 1: i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl (hash: /dv4ZgtIo1oWGm9Vt5rsygJUhkxl9ME3Utv18yLBPZ0=)
2: stIrfyQj0_eTZw5LKQkMNxuFxgI.roa (hash: eqwBV8CXGai5haR4OF0T1dC++87tM0y7pi8XDxr8OrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:bd:78:ac:fc:83:ef:7b:9a:78:88:5d:ad:df:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8af6af57ddfc5c7aa828cf225f98dce95904a0
Validity
Not Before: Aug 23 02:00:19 2025 GMT
Not After : Aug 24 02:00:19 2025 GMT
Subject: CN=3e9d327b43a092b193e932dded903a22c8b6aaf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5d:0f:28:0c:2d:35:d7:a4:71:6f:70:2a:cb:
8c:20:8d:ab:82:1e:3e:c6:3b:03:f5:f8:3d:75:e7:
28:eb:86:f4:bc:3f:b9:a9:4b:b8:38:37:8e:d8:e0:
f5:0a:c4:a4:13:f3:35:c2:6e:c6:8d:7d:1f:cf:78:
d8:79:b8:db:f5:e8:ab:94:7d:50:2f:43:ac:ff:40:
41:bb:40:65:83:de:3c:ea:13:47:94:d2:28:e3:9a:
63:50:e0:86:b2:88:d1:4f:14:ad:a0:61:76:91:63:
8a:eb:d2:f7:0e:bb:75:0f:da:95:8e:cb:34:6c:85:
4d:77:da:64:2b:a3:23:df:e4:d1:81:7b:65:4e:6e:
01:c1:a2:61:a8:7a:cb:fd:dd:a6:6b:80:7b:06:d1:
32:5c:6c:d1:f8:ad:d2:cf:f3:54:3d:4d:ea:c7:19:
39:94:23:e5:31:52:a3:46:93:f8:d1:2f:27:eb:0a:
56:ff:a9:58:1d:21:f9:01:94:36:f6:f9:98:5a:df:
c3:33:d7:da:3d:9a:a9:fb:21:a3:3b:58:0c:b8:a4:
47:fc:fe:cb:fc:db:15:a1:c8:f2:2e:00:24:ac:fc:
6d:16:df:7d:18:84:3f:1d:de:0b:57:2d:38:7b:ee:
29:88:37:e1:48:17:53:d1:57:67:f2:0c:7c:10:62:
18:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9D:32:7B:43:A0:92:B1:93:E9:32:DD:ED:90:3A:22:C8:B6:AA:F0
X509v3 Authority Key Identifier:
keyid:8B:8A:F6:AF:57:DD:FC:5C:7A:A8:28:CF:22:5F:98:DC:E9:59:04:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1f2c8f-8ed9-4b7e-aa1e-d3c4f5dcbe4c/1/i4r2r1fd_Fx6qCjPIl-Y3OlZBKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:00:af:d6:48:24:de:35:8f:d7:d6:63:7f:e8:d2:d7:b4:d7:
59:55:75:b4:47:40:c7:3e:20:3c:b6:01:ed:48:0c:3a:a6:42:
95:a2:15:19:dd:da:b8:c1:10:d1:65:5b:fc:03:04:e5:25:21:
6d:f5:a7:bc:ac:1e:d6:75:69:50:95:f8:a9:62:b3:ab:5b:c3:
b0:7d:37:b8:bb:ab:05:41:3e:de:3f:57:28:f9:5b:25:bc:0c:
e0:73:39:5d:8f:c8:c6:b2:33:59:4f:3a:33:36:bd:7f:57:d0:
37:e5:30:cc:14:e6:79:06:9c:fb:d2:6b:65:d1:b2:1f:dd:9c:
b5:24:c8:53:b8:cf:d8:61:a9:d1:8e:0c:79:98:62:29:0a:24:
46:da:ae:8b:48:20:5b:3f:8f:e9:79:f5:61:22:49:b6:a8:14:
3d:0a:e4:6b:04:1d:b1:93:93:8b:e0:b5:a1:07:b7:f4:12:a8:
7f:f1:03:a1:5a:ab:09:7f:b2:6e:14:f3:d1:16:91:ec:89:f0:
01:c6:76:14:ed:3a:77:c5:e6:de:0e:4e:97:96:b9:1f:47:14:
61:c1:2a:03:c7:58:d6:64:cb:f5:a0:08:eb:28:10:14:76:34:
28:67:91:51:aa:93:89:14:39:4e:0f:de:4a:ee:38:55:e0:8f:
8a:9c:68:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:08:13 2025 by rpki-client