Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
File: IraiXy90GRvp6gypwZFf50XPV8g.mft (raw, json)
Hash identifier: gIF4pQ7umIpACzNtS8yuLAxz0AS74a4GHzIiFfGGPUg=
Subject key identifier: 7B:CD:26:BA:02:0B:68:11:4C:80:C8:C7:82:06:54:84:2F:89:E0:54
Authority key identifier: 22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
Certificate issuer: /CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Certificate serial: 0198D7A960DD123DDFA826F8F22F1FC2DD0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
Manifest number: 15DD
Signing time: Sat 23 Aug 2025 16:00:58 +0000
Manifest this update: Sat 23 Aug 2025 16:00:58 +0000
Manifest next update: Sun 24 Aug 2025 16:00:58 +0000
Files and hashes: 1: IraiXy90GRvp6gypwZFf50XPV8g.crl (hash: fb4Baks4VQt+yomCrESd3utXT80Ho6Hg7IlNtOjgriA=)
2: MOp992QACjCU4CSR_4wEvEmDi9g.roa (hash: dTmvXI6qyvbgdeeHz07O4lgdS1FEoKVIkXmdx9O7lnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:60:dd:12:3d:df:a8:26:f8:f2:2f:1f:c2:dd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Validity
Not Before: Aug 23 16:00:58 2025 GMT
Not After : Aug 24 16:00:58 2025 GMT
Subject: CN=7bcd26ba020b68114c80c8c7820654842f89e054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e3:15:2c:4e:b5:a5:39:d9:a4:28:71:f7:22:
40:45:19:7a:60:5d:1f:bc:c8:97:80:94:a3:77:be:
0a:88:f1:4c:11:67:b3:1f:05:aa:6f:5b:e9:90:b8:
33:72:cd:43:53:b7:f7:e6:cf:05:56:db:72:3f:9e:
d3:8a:58:1b:5c:f2:65:30:38:ee:8d:c1:13:85:7d:
47:2f:90:ea:5c:3e:4e:fc:96:d0:66:d0:24:11:ad:
64:9f:60:9e:6b:80:8d:5a:e4:9c:b6:12:62:40:97:
e0:09:a8:c5:1f:10:04:c5:00:01:65:db:31:a9:f9:
70:e7:a4:df:00:41:15:24:10:46:37:42:80:dc:04:
36:fd:f4:c9:53:f6:5e:4a:bb:49:a6:7c:6c:83:96:
c3:25:9c:03:bc:26:77:12:e5:7e:4d:84:c6:20:71:
d2:03:6f:51:e6:5f:aa:2f:ea:18:d7:62:3f:7a:b6:
8f:76:fb:ed:7e:cd:de:27:85:38:9c:d4:a0:e5:74:
41:17:72:be:db:a3:c7:b3:22:2e:f9:ec:04:f4:dd:
13:70:16:ff:f6:c4:31:26:47:73:12:45:f2:b3:cb:
1e:79:e2:46:13:e8:e7:bf:7e:0f:65:57:e2:c3:1a:
4e:21:db:2c:58:7e:87:85:60:58:02:c0:bf:66:97:
5d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CD:26:BA:02:0B:68:11:4C:80:C8:C7:82:06:54:84:2F:89:E0:54
X509v3 Authority Key Identifier:
keyid:22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2d:b9:87:3f:06:f8:7d:bc:7d:c1:38:06:d9:ac:9a:53:19:
eb:6f:a9:5b:b9:b5:3a:69:ec:59:bb:2b:c1:af:20:76:9b:5f:
49:fb:ab:69:fb:61:b2:42:87:2b:c1:9f:d7:bf:20:a8:61:60:
27:de:77:fa:19:7d:e0:af:59:e6:d3:05:26:e7:46:b6:21:6a:
28:38:03:2c:55:90:b1:fc:90:aa:95:bc:dd:c3:ae:62:8a:47:
99:fe:36:88:1c:65:2d:fe:88:6e:98:42:2f:82:cd:95:2c:2e:
37:d0:78:0f:df:7e:ab:4d:e4:27:22:14:33:86:e2:d8:53:9d:
cd:e2:d9:37:01:22:12:df:16:81:18:d7:eb:74:5d:4c:6f:c2:
6a:af:5c:01:d9:a7:60:89:23:36:40:3b:a2:ec:99:29:37:1c:
12:49:68:df:af:41:6f:ae:c4:d1:ab:04:e5:4c:ce:ce:a4:ce:
db:81:27:fc:5d:d0:c1:04:e1:68:dc:43:f4:4f:4e:55:71:9e:
83:22:fe:ad:21:f5:b4:36:c1:31:76:4f:77:8d:f0:ab:c4:f8:
d5:09:27:c9:90:da:a9:65:cd:64:81:89:61:7e:6e:75:d6:af:
02:07:f2:46:94:9e:05:58:02:48:e6:13:73:2d:64:33:b3:35:
ce:83:21:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:38:10 2025 by rpki-client