Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
File: IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft (raw, json)
Hash identifier: p3yMRgQ3RCrgHFu7Vat1NDFJIqAw5aav1gPQndOc+UQ=
Subject key identifier: CE:CD:42:A1:AC:1B:8A:AE:C0:80:84:52:6A:A9:F0:59:20:9C:7B:6F
Authority key identifier: 20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45
Certificate issuer: /CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
Certificate serial: 0198D9600340B45BF65074D64A88AEA62088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
Manifest number: 096C
Signing time: Sun 24 Aug 2025 00:00:04 +0000
Manifest this update: Sun 24 Aug 2025 00:00:04 +0000
Manifest next update: Mon 25 Aug 2025 00:00:04 +0000
Files and hashes: 1: GE_VINn07eeSJYTvZIuo88WEV3U.roa (hash: 7RURCigC0zQY7NED6IrTycMVsCozhn/RUtlNFgdIpNw=)
2: IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl (hash: 0+XxIbdVNT47SpqbVfMKctmTRDfLtrxBP8kkCkjsl1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:60:03:40:b4:5b:f6:50:74:d6:4a:88:ae:a6:20:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
Validity
Not Before: Aug 24 00:00:04 2025 GMT
Not After : Aug 25 00:00:04 2025 GMT
Subject: CN=cecd42a1ac1b8aaec08084526aa9f059209c7b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0a:3e:54:62:4d:3f:cc:38:8e:56:8d:23:e1:
b5:87:2a:13:39:26:02:58:b4:d1:2b:75:56:79:46:
6a:d2:51:1f:72:20:6a:15:1f:34:27:5f:6c:0d:e1:
c9:1a:2d:e8:fb:8b:b1:b4:40:c8:cd:4a:a0:22:7c:
70:87:d4:05:9d:93:3b:79:27:11:eb:43:c0:a1:0b:
e6:03:8a:7a:ae:a3:f9:63:00:5f:c8:ea:f6:58:73:
73:b0:1c:0b:1b:50:b2:7f:56:c2:7b:68:9e:24:fa:
25:70:48:4c:60:7f:28:0f:a1:70:11:5c:46:e2:bf:
cb:b6:63:a3:a5:62:46:a9:ff:f0:6f:19:85:9f:7a:
91:ee:79:e7:b6:67:09:0b:ec:0b:0c:0d:01:e7:41:
79:8b:0b:31:ff:ba:c5:4e:b6:52:e2:a0:a1:cf:cb:
b7:76:47:58:c3:07:3a:d2:5f:a2:cd:82:71:21:64:
18:73:3f:f3:59:b1:24:d5:47:86:2c:80:c4:f2:52:
cb:6f:65:42:2f:18:ba:f0:bc:f3:b2:1e:e5:f1:c4:
fc:8c:1b:6a:e2:72:82:bb:28:ba:65:9e:05:ae:77:
8f:51:d6:d5:ae:e9:ca:b1:cb:1d:55:60:d1:30:d1:
69:42:d4:11:28:2e:cb:a1:2f:03:d5:4b:4d:62:d6:
c1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CD:42:A1:AC:1B:8A:AE:C0:80:84:52:6A:A9:F0:59:20:9C:7B:6F
X509v3 Authority Key Identifier:
keyid:20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a1:e3:1e:c3:c4:54:57:20:d1:7f:0e:95:f3:06:a7:97:ea:
a2:40:c3:e1:76:97:43:cb:d6:a9:f3:cc:c5:22:d2:0a:92:df:
89:9c:fa:1c:f0:3c:ce:8d:94:4b:86:54:ca:b3:15:6e:ff:cf:
6e:fd:96:e5:96:2f:3e:6c:3d:1a:fa:a5:6f:a3:9d:39:d9:e8:
e7:2d:73:dd:f9:50:24:e9:e6:fc:b3:88:70:9a:70:f6:21:05:
68:5a:a1:8c:5c:55:8b:db:2d:cd:70:88:a4:c9:72:03:e5:df:
53:b2:f5:19:84:f6:90:61:05:14:8d:8d:65:11:05:53:0a:60:
bc:34:5e:42:b6:5c:f8:d8:95:a8:e9:db:d9:cd:b0:29:74:6e:
0b:3a:3f:82:fa:84:9a:bb:ea:98:30:70:c5:20:72:80:28:f7:
00:5e:ad:56:34:57:e4:7b:5c:4c:a9:81:e0:06:c7:18:57:93:
54:d2:87:cb:6e:d9:c1:60:00:dc:85:c4:dd:0e:48:fa:70:f0:
01:82:b3:9b:17:c2:26:d1:98:02:2e:7f:71:70:db:4d:12:10:
46:a5:c3:a8:73:51:9a:01:ea:f1:0d:86:85:d9:24:59:5c:49:
c6:1a:ac:79:67:3c:fc:26:8b:bf:a1:6b:c1:31:10:9d:18:77:
dd:64:d7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:08:08 2025 by rpki-client