Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
File: IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft (raw, json)
Hash identifier: eBaUFHG0R6htmzAQ3rrRD4ptyXTzRuykZZG/87119tg=
Subject key identifier: 41:69:D0:69:7C:D8:38:03:34:F2:F7:28:60:A8:10:E2:D2:A4:F5:36
Authority key identifier: 22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC
Certificate issuer: /CN=2213007596493802fb93a326731fd3329eae2dac
Certificate serial: 0198D47458C8884E383C526E3CA3BCF5DB58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:04:11 +0000
Manifest this update: Sat 23 Aug 2025 01:04:11 +0000
Manifest next update: Sun 24 Aug 2025 01:04:11 +0000
Files and hashes: 1: DjsbeUScAR9EUfRE070QFYOZXx0.roa (hash: Jj0CL6iZxJ5XW4ZpctnqFGBbj6Ygbs9fspzlTAigxwY=)
2: IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl (hash: TXWPRmxt9pGgDV7eslL4k7lXUsUxbjmrOCnxlatABhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:58:c8:88:4e:38:3c:52:6e:3c:a3:bc:f5:db:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2213007596493802fb93a326731fd3329eae2dac
Validity
Not Before: Aug 23 01:04:11 2025 GMT
Not After : Aug 24 01:04:11 2025 GMT
Subject: CN=4169d0697cd8380334f2f72860a810e2d2a4f536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:3c:b3:49:05:7e:b0:ac:36:46:79:83:77:
75:77:78:8c:51:30:89:62:6c:bc:5b:2c:38:70:74:
bc:45:c5:c9:77:26:1e:7f:88:d5:f0:76:1b:8f:82:
6a:3d:a1:e7:00:3e:6f:a5:d8:18:38:eb:18:fb:6b:
d3:57:b4:76:eb:2a:0f:bf:8c:00:c2:2f:c5:5a:8e:
40:18:bb:28:76:b3:f9:f5:03:1b:55:4e:df:a6:3d:
ae:09:c2:97:c7:d5:31:c3:e4:3e:45:a1:f4:a9:24:
67:8d:46:38:f8:b3:9b:5f:2b:73:b2:fa:09:f1:ae:
58:26:c4:af:43:9a:e0:d8:2d:2b:31:c2:1d:4e:be:
f7:a1:8d:fe:96:cf:f6:10:94:c4:3b:ce:14:42:d6:
69:b8:c4:4d:2c:46:27:bb:27:98:55:33:49:1c:3e:
5b:ab:7a:34:35:72:3c:d0:19:9a:fc:ed:75:43:46:
f9:d4:be:4b:ad:b1:d4:bf:dc:fd:a8:69:ba:d8:f1:
c4:fe:3b:bb:2d:69:6b:b8:4d:79:d8:36:b1:be:9b:
71:c1:07:12:5e:14:c6:47:75:e8:96:bc:04:49:86:
ab:c3:ef:1f:b9:e0:5e:b0:d6:88:b7:8c:f0:d1:e8:
0a:d0:e8:f5:d6:f8:4f:47:d9:61:27:32:ac:35:f1:
21:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:69:D0:69:7C:D8:38:03:34:F2:F7:28:60:A8:10:E2:D2:A4:F5:36
X509v3 Authority Key Identifier:
keyid:22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:8a:14:2b:13:77:ef:8c:b9:80:18:7b:7e:0a:73:0d:09:1c:
3a:47:31:56:cf:bb:9f:dd:0c:bd:6d:fd:92:6e:84:5d:1e:77:
af:31:ae:62:66:4b:9a:69:72:9d:16:7b:b6:89:38:ee:d1:b6:
32:92:51:45:a2:fd:00:65:ea:43:85:71:e5:d6:dc:d1:c6:e3:
fd:1d:f1:1f:3f:0a:56:90:ab:58:a8:8d:1f:1f:bb:cd:f5:04:
62:5d:16:68:63:cd:20:b0:7b:14:c5:8b:4a:ab:ef:ee:89:86:
68:ee:6f:02:34:d6:c5:52:0a:28:9c:15:29:c9:a0:ae:76:b8:
f1:14:2c:9e:84:65:c6:ff:b9:14:86:38:84:13:7b:eb:45:bc:
1d:a8:b5:82:5d:69:4c:d6:e5:38:39:22:86:21:87:1c:b1:6d:
e1:b3:57:c4:ae:b2:c9:59:b1:c6:ad:bc:ca:20:2b:e9:b4:54:
7f:8d:98:3c:7d:c9:23:71:8f:88:02:fc:0e:be:69:11:56:8e:
62:e3:54:ab:56:13:c7:a2:7c:dc:aa:ba:c8:58:97:02:a6:0f:
34:17:73:af:d7:04:c5:a4:88:2e:69:6d:b2:34:14:ff:b2:55:
ee:8f:76:fa:78:8c:3a:8c:36:ec:9c:87:0c:d2:77:28:f3:67:
14:05:5e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:06 2025 by rpki-client