Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
File: ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft (raw, json)
Hash identifier: jkkhrslRvd7VsCgPU9on+gRt3fzOeIur9G56i+trsRU=
Subject key identifier: 48:FF:1B:CB:4A:AB:F3:93:EB:5B:0D:31:98:26:B7:44:FC:58:9B:7B
Authority key identifier: 8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41
Certificate issuer: /CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
Certificate serial: 0198D472613506AF81A9F5C0AD008818208A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
Manifest number: 071C
Signing time: Sat 23 Aug 2025 01:02:02 +0000
Manifest this update: Sat 23 Aug 2025 01:02:02 +0000
Manifest next update: Sun 24 Aug 2025 01:02:02 +0000
Files and hashes: 1: ctXergtQbViumays4Ono_Wloemw.roa (hash: a+neR/aKDm0TTcExel5rgJgh8DlN9uyZuV72kD5h5x0=)
2: ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl (hash: WF6y5CNydp+g7r1JOMy751t0EnWneM/ehjqjO15xoI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:61:35:06:af:81:a9:f5:c0:ad:00:88:18:20:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
Validity
Not Before: Aug 23 01:02:02 2025 GMT
Not After : Aug 24 01:02:02 2025 GMT
Subject: CN=48ff1bcb4aabf393eb5b0d319826b744fc589b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0f:85:78:8f:17:7a:04:7b:ea:1c:25:30:47:
e5:88:8e:b5:99:cf:fd:b1:cc:de:d6:17:8c:03:0b:
ec:1b:e7:bc:1a:fa:47:fe:1f:d5:5e:ff:5a:b7:a1:
f9:df:b8:a9:74:bf:5a:40:0d:29:b5:c1:0e:f1:c0:
b1:68:ab:1d:bf:fe:a3:c6:00:9c:58:1b:f4:84:fa:
7d:1c:23:8c:23:aa:a0:2a:fa:ca:21:61:50:c9:10:
4e:6e:ef:69:7f:ee:06:5e:c4:b1:e1:da:e6:e7:a8:
4c:bf:b6:65:13:0b:ab:a8:dd:03:67:d6:4d:e9:33:
ed:ac:87:d0:97:33:08:81:83:15:c4:9a:72:8e:35:
58:6f:ad:bd:8a:dc:73:9d:36:9a:0f:80:0f:79:5e:
72:39:3e:d7:0b:f7:8d:d9:66:6c:d6:28:23:a3:2b:
63:97:96:aa:04:33:cc:d3:e8:7d:cc:b7:6e:f5:bc:
1a:1f:68:b9:c6:b1:9d:e4:26:57:b0:62:27:b6:3b:
43:7d:77:b2:5e:2a:58:db:a4:57:5c:67:38:5c:b1:
b8:43:f7:25:10:5e:56:47:bf:e7:d6:1b:8f:68:34:
0d:21:1b:8d:3b:bb:c8:95:11:66:d5:62:df:2e:6a:
12:ad:ef:c8:fc:8f:41:80:7c:39:d9:df:f7:92:08:
0f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FF:1B:CB:4A:AB:F3:93:EB:5B:0D:31:98:26:B7:44:FC:58:9B:7B
X509v3 Authority Key Identifier:
keyid:8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:15:9f:e5:12:c7:d5:da:83:72:2e:55:82:98:79:d2:61:d0:
52:65:11:f0:d6:b8:50:30:6f:41:bc:be:a5:bb:76:59:7e:e0:
5b:75:ef:1c:99:dd:f7:4c:da:3c:8d:5d:68:bd:a6:b1:d9:4b:
ae:bf:3e:15:bd:03:be:58:22:f9:86:57:7f:7a:a7:54:3b:1a:
e7:49:e8:67:4b:75:41:3a:ef:18:9e:ba:91:91:d6:3b:27:0d:
a1:61:09:e3:d3:cd:25:dd:0c:0b:7f:85:1c:94:ab:c2:87:c9:
ba:e7:42:79:2a:e6:03:3f:9b:4f:d4:d8:24:64:24:39:d3:94:
b0:8e:a4:64:db:34:75:a3:2c:8a:5b:de:7c:0a:9b:b5:54:d7:
e8:73:a5:d9:00:89:6e:47:8e:d4:c5:4a:0a:86:6c:96:b0:e5:
b0:15:c4:71:0d:d0:1e:28:01:4e:61:be:7d:8c:13:07:c5:4d:
26:3f:e1:18:22:d7:ea:44:ab:67:af:8a:cd:b6:58:09:d7:35:
96:4c:89:3f:07:e1:b6:80:e9:53:03:2e:13:71:ed:4f:7c:fa:
0c:6c:03:50:0a:e3:23:72:27:89:0e:ea:db:82:bd:7d:e4:f2:
57:0f:f5:69:f1:88:f2:8b:e1:d7:ea:34:33:51:3c:f9:89:9a:
17:64:a8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:19 2025 by rpki-client