Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
File: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft (raw, json)
Hash identifier: SLYmT5k7UnXiaKFu8rf5LEpkOytpsbERYdqLY7KcjgU=
Subject key identifier: A0:C7:B2:E1:A0:FD:17:B1:6C:45:99:66:39:23:B0:3C:77:AB:FA:6B
Authority key identifier: 23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
Certificate issuer: /CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Certificate serial: 0198D583849653D8EE6C423B897320FAF5A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
Manifest number: 0BC5
Signing time: Sat 23 Aug 2025 06:00:22 +0000
Manifest this update: Sat 23 Aug 2025 06:00:22 +0000
Manifest next update: Sun 24 Aug 2025 06:00:22 +0000
Files and hashes: 1: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl (hash: xPYYQ6iUKzjJ27yTz93rH0YCg6x0d68kLyK6AqV7OuU=)
2: LCSxsz-FQ4GzwZw8Odnzg4_wz4s.roa (hash: cOtRnPje7E9WAoJFvY2RM5FM1p4R+PS2ZqyaTPw4hic=)
3: WWsWrGhHJPhxsXXJtUhA3vzECwE.roa (hash: LLPjYgAmQluoQLBe3s0wxjIyXNJ82uAq8ra1WEAoLDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:84:96:53:d8:ee:6c:42:3b:89:73:20:fa:f5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Validity
Not Before: Aug 23 06:00:22 2025 GMT
Not After : Aug 24 06:00:22 2025 GMT
Subject: CN=a0c7b2e1a0fd17b16c4599663923b03c77abfa6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c8:a4:2a:15:b6:69:f2:e4:03:a8:ba:1c:99:
eb:86:51:e3:ce:b2:e8:ab:e7:6b:89:9b:7c:f5:83:
a3:6a:93:eb:77:13:0e:5e:7c:39:23:89:35:8c:d5:
09:0a:97:d1:9a:c4:5a:21:f8:ee:8b:72:2a:60:7d:
4f:be:f0:5e:33:2a:fd:a0:a9:04:e9:a0:8c:ca:5a:
32:30:10:ed:96:e6:6a:14:52:16:7f:19:dd:53:95:
fb:f7:78:15:9e:7c:92:81:5c:dd:bb:e5:4e:20:b3:
76:da:2e:78:d7:1f:d6:d4:4a:2d:30:b4:df:3c:6c:
5f:96:77:51:dd:30:c4:5b:2a:70:6c:f9:93:08:bc:
5a:98:13:b1:4f:8e:3e:85:c4:81:92:85:72:68:99:
cb:72:38:34:5e:62:31:ce:11:82:af:fd:02:2a:7c:
ff:da:6e:2b:0f:62:66:99:3e:dd:de:53:52:89:5f:
c3:fa:1f:27:f8:8b:ad:18:08:0c:fd:51:af:58:a3:
e7:77:11:b7:ac:be:63:6e:d1:e0:ec:7a:5b:c5:26:
ae:70:4d:3a:1a:37:93:32:89:9b:2b:04:d0:7f:3e:
c9:20:72:7b:02:b7:91:9e:57:c2:9d:05:b6:ff:d9:
c4:d4:57:82:e4:0f:8e:16:80:95:c0:e9:b4:51:58:
e4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C7:B2:E1:A0:FD:17:B1:6C:45:99:66:39:23:B0:3C:77:AB:FA:6B
X509v3 Authority Key Identifier:
keyid:23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:48:89:f7:18:ff:13:4d:3c:b8:8a:d5:18:a7:ce:19:1f:ab:
87:e4:e1:15:70:31:78:65:21:39:92:91:2f:21:9d:28:4b:c7:
38:da:b7:1d:db:7d:38:21:aa:21:f5:fc:3e:2c:c4:c3:7a:45:
d7:00:91:6b:3c:ec:84:7f:92:8f:b1:5f:05:aa:2a:bf:d9:4f:
54:28:a9:d4:3e:a1:f1:10:4e:b6:e4:1f:96:91:22:2e:5c:80:
32:6e:6f:13:34:dc:db:ab:83:4b:37:8d:e2:2b:71:35:76:7d:
e5:d9:4d:34:ee:63:b1:f9:d8:fc:54:b7:81:7d:8c:ca:4f:f1:
bf:93:70:f8:31:1c:5b:42:2e:41:91:dc:94:39:ae:fc:c5:23:
40:e2:17:59:26:82:3a:c4:6a:73:54:c1:33:85:0e:00:79:80:
0f:a0:ca:f7:84:bf:52:cb:f9:56:75:4b:4f:0d:e4:a0:4a:8b:
50:34:bf:b8:08:96:f2:36:4b:ef:c5:43:91:3c:12:82:88:9d:
20:7b:6e:57:8b:4e:2a:da:ba:48:98:f0:1a:b3:4b:6f:8d:34:
cc:03:b8:17:a5:36:ce:b2:eb:a9:51:57:f4:33:28:18:e1:02:
18:4b:7e:00:14:0e:d3:cd:19:28:9a:17:d5:77:71:4c:38:5c:
32:3a:b2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:44 2025 by rpki-client