Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
File: ixtym3XF-LLp0ViqKWOW1oC-cK0.mft (raw, json)
Hash identifier: 41URt88aA99/6wFBeF1i0Bz0mBcOSeBEB9rzA7NfVmo=
Subject key identifier: 32:C0:06:D4:ED:7D:18:6B:E1:52:9F:F4:98:5A:BE:22:F4:E7:44:7B
Authority key identifier: 8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
Certificate issuer: /CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Certificate serial: 0198D54DCB7B638AA227B1B091B123260094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
Manifest number: 0D71
Signing time: Sat 23 Aug 2025 05:01:42 +0000
Manifest this update: Sat 23 Aug 2025 05:01:42 +0000
Manifest next update: Sun 24 Aug 2025 05:01:42 +0000
Files and hashes: 1: VD1pOY6vP5TwIHzsVFu_IinabUU.roa (hash: cVzGsu9mooBFFczgcbG8J8W2oDgnSi/7QeWcMNjjuWQ=)
2: ixtym3XF-LLp0ViqKWOW1oC-cK0.crl (hash: IQQi9h7akXgxagkcDM4TCQ8zkTwC0RNzP1UkvoPor68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:cb:7b:63:8a:a2:27:b1:b0:91:b1:23:26:00:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1b729b75c5f8b2e9d158aa296396d680be70ad
Validity
Not Before: Aug 23 05:01:42 2025 GMT
Not After : Aug 24 05:01:42 2025 GMT
Subject: CN=32c006d4ed7d186be1529ff4985abe22f4e7447b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:95:06:57:4e:26:be:ec:4a:67:fa:7f:d1:0d:
df:c9:9b:73:c0:d1:2d:bd:fa:c7:83:3d:89:3f:89:
5a:7c:87:43:4f:07:68:36:74:6f:21:3f:da:9f:79:
ba:0d:0f:e6:3c:35:9c:74:ee:9c:b6:0a:7e:64:5f:
27:db:c0:92:bc:72:6b:90:f0:56:c0:86:80:40:ef:
52:dc:bc:62:53:9c:3e:50:2c:54:d8:82:8f:2c:2b:
f9:ec:1f:99:99:92:b7:5b:fb:f0:92:99:ee:38:55:
a3:e9:a1:da:ed:8f:08:e0:8d:94:8b:6b:3e:84:06:
ec:fb:48:a5:3d:88:26:b6:e6:68:5e:f1:4a:3d:23:
9b:2b:f8:aa:63:2f:48:16:83:94:77:56:f2:a0:3e:
25:90:58:d1:e1:91:f2:df:4e:c4:bf:7b:4e:a6:64:
40:78:e3:a8:ee:7f:7f:35:9f:f2:bf:83:4e:f3:32:
91:e7:c7:06:a5:57:30:e1:c3:66:0d:ae:b2:d7:d6:
cb:0a:af:83:84:2b:02:37:08:a5:e1:72:43:c5:ef:
70:04:05:f3:c6:36:93:65:7d:23:a3:f1:20:3c:cc:
2d:a0:df:a2:f5:df:f3:e0:38:d3:b4:f2:66:b4:bf:
88:99:30:05:96:2c:82:93:bc:b4:81:bf:a6:58:63:
77:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C0:06:D4:ED:7D:18:6B:E1:52:9F:F4:98:5A:BE:22:F4:E7:44:7B
X509v3 Authority Key Identifier:
keyid:8B:1B:72:9B:75:C5:F8:B2:E9:D1:58:AA:29:63:96:D6:80:BE:70:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixtym3XF-LLp0ViqKWOW1oC-cK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2dd256-814a-4fb3-8515-668149263539/1/ixtym3XF-LLp0ViqKWOW1oC-cK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:30:75:27:f4:fc:85:27:3e:5e:b4:3b:70:63:4d:3c:7d:7d:
bc:e0:bc:89:c5:09:47:5d:cd:7c:26:19:20:58:bc:0e:d1:d0:
1e:9d:21:eb:a9:9d:59:4a:23:ac:cc:c4:a4:34:4e:80:03:cf:
fd:4b:14:b3:0b:d1:a0:02:02:00:05:5d:35:1d:93:bd:0c:ab:
8a:7f:f3:04:a4:7b:ff:3c:62:d7:ee:74:48:66:01:aa:b8:83:
b2:a5:1a:d1:f7:a6:3c:04:d8:d5:0e:f3:27:14:d2:74:5f:1a:
49:35:e5:93:cc:97:6c:63:2a:c0:fa:91:3b:3e:e2:d4:43:25:
74:02:6c:cd:1f:3f:2c:ae:33:44:89:88:7f:0c:d1:c8:5c:16:
cf:5c:8a:27:cc:e4:7a:8d:b9:a2:61:5f:93:0c:e3:ec:34:85:
9b:97:d5:7d:7e:a5:f6:30:d8:a2:5e:3e:00:7c:d5:38:92:d3:
58:4a:f3:48:7a:12:a3:99:8a:7d:a9:4d:b6:52:bb:79:05:61:
9d:b1:c5:30:3d:48:b6:ff:79:99:7c:3c:6e:6b:ba:61:82:21:
02:cc:df:6c:94:e1:c0:67:ad:49:f3:15:97:f6:f9:64:3b:c6:
23:41:f2:2a:59:a7:db:0c:91:36:76:c7:cc:c5:f5:b7:4b:59:
10:3b:ec:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:44:36 2025 by rpki-client