Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
File: IJPjg7LMUtXsow_rEml1k8nHiKA.mft (raw, json)
Hash identifier: WzKYY11lwopmf2scSxaaLzXba93t2uk/UUXaX7sj0Qo=
Subject key identifier: 0D:76:C7:28:6D:65:7E:C8:F0:6A:C9:61:B3:03:B7:33:74:4D:BE:A8
Authority key identifier: 20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0
Certificate issuer: /CN=2093e383b2cc52d5eca30feb12697593c9c788a0
Certificate serial: 0198D4E015D1AE0C1C4D52EF4EBBB6556A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 03:01:52 +0000
Manifest this update: Sat 23 Aug 2025 03:01:52 +0000
Manifest next update: Sun 24 Aug 2025 03:01:52 +0000
Files and hashes: 1: IFpZrxJhl8wQt7Uq0qRwzYFnZJk.roa (hash: eoMtlnp1ZLGeorMDixEuqh0nobwLwy70mhjbtsKxD5o=)
2: IJPjg7LMUtXsow_rEml1k8nHiKA.crl (hash: yG9f2GTgBdyPiAgFtIsvSo00Ypao/yn4EJF+rN0XdEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:15:d1:ae:0c:1c:4d:52:ef:4e:bb:b6:55:6a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2093e383b2cc52d5eca30feb12697593c9c788a0
Validity
Not Before: Aug 23 03:01:52 2025 GMT
Not After : Aug 24 03:01:52 2025 GMT
Subject: CN=0d76c7286d657ec8f06ac961b303b733744dbea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bf:8a:e8:97:85:c0:fc:8d:ab:c8:68:7c:48:
00:dd:6a:5c:73:7a:96:9e:29:a5:84:af:f4:da:63:
ff:ac:82:6a:ca:15:2c:5b:61:44:3f:27:ac:51:0a:
f1:8a:db:72:52:49:03:1d:eb:24:c7:f8:b3:86:81:
75:0e:bf:38:0e:f6:5b:35:42:94:22:41:9a:88:28:
e3:95:e1:c2:b4:a8:cc:09:93:aa:18:32:25:07:8c:
68:c5:96:1c:b8:48:77:19:7a:7f:c5:c6:12:29:f2:
a3:ec:c9:5f:69:cf:c1:09:f4:e9:0d:dc:8a:f9:3d:
f2:51:bd:8b:0a:61:c5:d3:70:04:22:64:f4:ec:cc:
5c:01:06:d7:64:7c:cc:f6:87:c2:81:fd:cd:95:d6:
e6:40:9d:0e:25:7a:92:01:00:d5:d0:25:5b:2a:fe:
ad:45:ee:2d:81:bc:a3:0d:f4:23:82:ac:e9:d1:2d:
2e:6b:cf:dc:30:a2:dd:02:99:47:da:43:dd:8b:89:
60:43:c1:68:cc:ac:12:8b:00:b4:2e:cf:37:9d:43:
41:0c:57:68:73:c3:a2:55:52:37:ed:6c:10:02:ad:
b0:f0:a3:26:a2:96:51:3e:a5:80:25:18:9e:d4:37:
e6:a4:49:a1:0f:bd:f7:3e:8f:2d:bf:8f:2f:cf:14:
41:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:76:C7:28:6D:65:7E:C8:F0:6A:C9:61:B3:03:B7:33:74:4D:BE:A8
X509v3 Authority Key Identifier:
keyid:20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a5:aa:07:3e:1b:a2:62:e6:20:94:c9:6d:dd:63:1d:b5:33:
8e:b2:fa:6b:55:aa:67:7e:90:e9:6f:f4:c0:2b:91:f6:95:37:
ac:a6:e5:d2:68:39:fe:e4:e1:ff:c4:49:6f:24:b7:d0:71:ad:
f1:34:a7:54:2a:fc:70:07:2f:57:2d:c2:69:9b:66:33:23:0d:
34:fe:24:c0:4e:c9:92:85:b2:5f:9f:e3:67:9d:d8:ce:c6:f4:
4f:f0:b5:af:fa:98:70:a5:e0:56:57:61:83:7e:5f:ff:d1:d0:
65:24:fe:e6:6d:68:d2:dd:92:88:57:fe:1c:71:71:f7:31:eb:
6c:9f:4a:31:3f:a1:45:45:42:3d:12:da:2e:19:1d:cf:59:ca:
4f:02:91:e4:51:d8:ec:7b:4b:ef:54:d9:af:ae:00:f8:35:c0:
b4:c8:86:a9:f7:77:0a:77:c5:f2:69:1c:1d:0e:f3:89:ea:05:
7f:f6:6b:ba:dd:d1:63:3f:91:b9:16:c0:8a:9a:07:54:61:11:
9e:42:4f:6d:df:f5:f7:30:cc:9e:aa:11:8c:d6:02:ab:89:0c:
0d:82:46:e7:d8:f1:5f:ed:80:33:9c:de:27:69:9c:29:ba:9a:
a5:30:1d:8f:ba:b2:20:07:73:ef:95:23:85:7f:ba:14:dd:96:
c2:9c:65:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:26:41 2025 by rpki-client