Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
File: izGWcRDKvuxKZreAN-Uqh7K8j10.mft (raw, json)
Hash identifier: zFw1cH8yR85ylk9aK1e/n+ogC5PcaOTq6hqRxXRVSmc=
Subject key identifier: 69:E3:61:9A:DD:E2:EC:20:C7:2F:F0:11:7E:05:CF:9C:C9:51:EE:A9
Authority key identifier: 8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
Certificate issuer: /CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Certificate serial: 01987C4032D3757A38B5A08D881B3A286B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
Manifest number: 1317
Signing time: Tue 05 Aug 2025 22:00:38 +0000
Manifest this update: Tue 05 Aug 2025 22:00:38 +0000
Manifest next update: Wed 06 Aug 2025 22:00:38 +0000
Files and hashes: 1: izGWcRDKvuxKZreAN-Uqh7K8j10.crl (hash: WO8P6TnOSDtQverT7qC91Kka5qlycuqs+YeOaDJYg8k=)
2: pb0HpyJZMsT5W8dfe0VOR5LOW_M.roa (hash: 8ccg9QKMd308GM+mOMPhnrelb3Ldijvww8dEm02A/EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:32:d3:75:7a:38:b5:a0:8d:88:1b:3a:28:6b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Validity
Not Before: Aug 5 22:00:38 2025 GMT
Not After : Aug 6 22:00:38 2025 GMT
Subject: CN=69e3619adde2ec20c72ff0117e05cf9cc951eea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3a:ef:52:ee:c0:51:19:c6:b7:58:7b:eb:e8:
f6:60:79:06:58:2f:01:85:88:58:7e:e3:e1:a3:3f:
64:da:4f:e9:f9:20:04:ad:72:a2:1b:d3:3e:4a:3f:
6b:74:1e:bf:9f:8d:cb:2d:7b:1e:ea:a3:48:cb:0b:
d9:01:a4:7c:32:ec:b6:ad:ae:de:6a:59:29:ba:3c:
c4:c9:46:6f:06:7a:51:74:dd:b6:68:6a:ec:20:c3:
4f:92:0f:39:5f:fd:4b:e2:a6:48:9d:ec:bf:c4:8a:
12:9e:b6:9b:83:d4:1c:ad:a8:8b:d9:37:3e:78:23:
b4:cd:7a:48:9d:55:02:9b:7f:1c:aa:68:85:74:32:
bb:6e:2c:95:e8:85:a7:ea:44:d6:06:bd:95:45:a5:
74:cf:36:cb:00:07:6f:66:98:fb:23:91:fd:2e:02:
4c:1f:36:60:0a:4b:b3:51:7a:41:3a:b8:3b:09:16:
3f:0e:30:3e:93:8f:52:fc:a0:89:bf:11:c0:65:66:
ea:9a:54:58:af:d5:80:b6:43:f3:07:c1:ea:fa:16:
cf:26:70:75:b6:39:17:31:12:45:22:17:36:c4:bc:
f0:dc:69:54:94:6c:09:89:c8:9f:2c:91:f9:83:3c:
21:7f:2b:47:33:0b:6a:27:6d:90:31:e7:49:3e:b6:
f5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E3:61:9A:DD:E2:EC:20:C7:2F:F0:11:7E:05:CF:9C:C9:51:EE:A9
X509v3 Authority Key Identifier:
keyid:8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5a:b9:80:61:60:51:66:b7:af:bf:7d:88:3c:f3:be:7b:37:
2d:a7:cd:d5:50:bf:35:e3:9e:64:db:c4:79:84:51:c5:a9:2b:
c3:28:cd:f3:2f:e9:21:1b:61:ac:d1:4d:37:ca:31:17:81:b0:
42:6f:4b:b3:86:0e:38:c1:99:67:01:de:c7:55:d9:94:47:2a:
d3:45:fb:d0:2b:71:8c:03:d7:ac:68:9c:ac:26:bd:c5:c6:41:
41:43:0f:ec:32:82:b9:5f:bf:96:80:ba:11:6a:a5:88:24:c0:
8e:96:ee:e8:51:dd:3d:a8:4d:44:9c:21:1a:47:49:13:3c:60:
d1:8f:90:c2:2b:74:4c:0b:80:ac:13:be:22:82:09:1d:20:7d:
eb:04:24:c0:c0:35:9c:e1:35:27:68:c0:37:93:f9:f0:5c:d8:
0f:bf:75:78:e6:e5:6b:a6:0b:d0:ff:ed:c0:32:3a:4d:47:6a:
ae:1a:95:96:ce:9b:9b:54:54:fe:a6:25:55:f4:5d:e2:8e:b5:
45:9d:de:78:3d:b0:45:e5:7d:2d:8c:88:2f:4e:5f:07:d0:80:
41:02:7e:1b:7e:ac:86:9c:46:49:15:29:2a:57:83:19:c3:61:
8d:25:74:b7:05:61:f1:d0:8c:f2:89:db:a2:72:da:c8:32:29:
92:88:aa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:13:19 2025 by rpki-client