Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
File: IuSOFh5JBZI_bUqirgohUw8t4gs.mft (raw, json)
Hash identifier: EaNUewYYRESz92xvPAS6hKxUmh3mWzI18CAMN9Dp2TA=
Subject key identifier: 7E:2D:6C:48:6F:58:71:4B:B6:0E:EB:28:0F:71:C0:42:F2:62:E9:1F
Authority key identifier: 22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
Certificate issuer: /CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Certificate serial: 0198D65F570DAF03DA79217DAC1E6029D4D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:00:29 +0000
Manifest this update: Sat 23 Aug 2025 10:00:29 +0000
Manifest next update: Sun 24 Aug 2025 10:00:29 +0000
Files and hashes: 1: IuSOFh5JBZI_bUqirgohUw8t4gs.crl (hash: YfqoNMC96C+QKq+UjwoFr19HKs5411yLwB7lBH300CA=)
2: OUi5qBFFBiQ3EGmTWiGmad22xM4.roa (hash: KwdKSyLAfkRw0QNUdiy6X/wiXk2JmvHy0XAz3/ojAhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:57:0d:af:03:da:79:21:7d:ac:1e:60:29:d4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Validity
Not Before: Aug 23 10:00:29 2025 GMT
Not After : Aug 24 10:00:29 2025 GMT
Subject: CN=7e2d6c486f58714bb60eeb280f71c042f262e91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:51:98:6d:98:e6:2f:97:a8:55:a9:5f:63:39:
b0:92:d6:3a:b4:51:e3:dd:93:ca:96:d0:0e:ed:e8:
65:6d:de:bc:ee:9a:93:a4:7d:fa:6a:6d:81:c5:2f:
0d:d7:20:25:fd:79:8f:f0:db:c5:e0:51:b3:40:ce:
4b:2a:fe:80:20:89:e5:b9:19:b6:ad:8d:2c:c7:73:
af:ab:b5:76:3e:6a:cd:b6:cd:fb:3e:58:92:70:c8:
53:b6:b8:6a:2a:d0:91:67:f3:67:b1:9e:33:be:8f:
dd:3e:43:b3:ad:07:b1:c2:42:74:95:d1:30:98:cc:
d0:23:33:0e:43:b5:7d:88:52:b2:22:47:5b:0e:e9:
87:8f:70:55:d6:31:4f:fc:14:03:46:0d:65:3e:96:
70:56:81:7b:c0:0a:d6:f7:5f:91:b9:62:90:67:13:
f1:96:ea:54:c5:61:b6:ad:48:59:0f:1d:14:71:a9:
7a:f6:50:b3:6e:1e:3d:55:e5:3e:95:bf:e5:0e:a5:
a4:d0:ae:c4:2f:7e:13:d3:28:88:de:f6:26:6e:02:
bd:49:34:6e:c5:31:10:c9:76:5c:b4:b5:86:83:1b:
d8:85:e6:13:07:7d:a0:ef:0f:9f:e3:8e:c5:c0:28:
e5:17:37:cf:20:75:a5:6a:a1:20:80:04:6c:59:16:
ea:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2D:6C:48:6F:58:71:4B:B6:0E:EB:28:0F:71:C0:42:F2:62:E9:1F
X509v3 Authority Key Identifier:
keyid:22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:42:0a:11:60:bf:a9:ac:40:44:fe:d4:b5:61:ab:58:2b:d3:
6f:ad:e2:b4:c5:59:3a:25:dd:fc:97:c7:b6:60:dd:cc:1e:63:
01:63:be:a3:e3:1b:30:a0:61:1c:87:f6:f4:aa:ed:19:3b:dc:
b8:47:1e:24:2e:69:ef:94:5e:06:29:07:ef:28:68:4c:dc:65:
7e:1d:71:62:7e:4b:f9:43:af:56:5e:b1:4d:24:9d:ee:42:7e:
6a:12:36:90:6c:1c:de:bd:f8:35:e7:b2:d6:bb:41:c9:85:d8:
37:32:19:21:e7:d6:b6:c3:e4:8d:7e:33:7c:b2:ff:84:1e:c0:
1f:a6:0a:f2:6c:02:f1:f9:7c:fb:41:dc:07:6c:67:76:e3:87:
ed:b7:f6:1e:0c:08:99:28:e2:1f:14:04:66:6a:fa:b5:a1:2c:
93:31:33:e1:65:ca:51:67:d2:94:ea:ec:f1:6a:b3:bc:de:02:
5f:58:62:4c:be:d2:42:f1:4e:41:e5:cb:cb:aa:df:1f:2e:6c:
a9:8f:6d:3a:78:c3:4a:9c:03:7e:d2:f6:1d:e5:d4:7a:eb:1d:
ca:5b:22:15:f4:20:d3:3b:77:42:1c:99:8c:c3:df:b7:c7:44:
bb:45:29:af:97:89:55:1e:3d:38:d9:0d:5f:48:8d:8f:a4:6a:
6a:30:44:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:50 2025 by rpki-client