Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
File: IjCHszf3R2yNYwSusIzuBX9L9pE.mft (raw, json)
Hash identifier: cB0GYDHQ19RIgJYF5ObMx4mNqHDxjNRVSfD6InwFUvc=
Subject key identifier: 70:02:5B:DE:54:49:EA:D7:F8:A9:5D:FF:DE:2F:0B:1B:CD:92:F7:9F
Authority key identifier: 22:30:87:B3:37:F7:47:6C:8D:63:04:AE:B0:8C:EE:05:7F:4B:F6:91
Certificate issuer: /CN=223087b337f7476c8d6304aeb08cee057f4bf691
Certificate serial: 0198A128A0E1B04D2C2C9C7FDBED2030741E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
Manifest number: E4
Signing time: Wed 13 Aug 2025 02:00:50 +0000
Manifest this update: Wed 13 Aug 2025 02:00:50 +0000
Manifest next update: Thu 14 Aug 2025 02:00:50 +0000
Files and hashes: 1: Da7F_pVCBMO9Pya93Jt3tHR6Oco.roa (hash: UlhnFczuqpWrkcvlwjEVQtMKK1bvCGUHj/RuLRvxfcM=)
2: IjCHszf3R2yNYwSusIzuBX9L9pE.crl (hash: sYYk0CpEwUy0bVOTXPDqLS00fYoCdZdBQ2z2z4RLUZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:28:a0:e1:b0:4d:2c:2c:9c:7f:db:ed:20:30:74:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=223087b337f7476c8d6304aeb08cee057f4bf691
Validity
Not Before: Aug 13 02:00:50 2025 GMT
Not After : Aug 14 02:00:50 2025 GMT
Subject: CN=70025bde5449ead7f8a95dffde2f0b1bcd92f79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9d:55:c7:a3:b2:fd:27:2e:9e:69:e4:11:93:
db:d9:70:b3:f8:06:d0:0e:61:5b:46:d3:49:e2:c9:
42:fa:27:bc:c6:b3:0b:8b:d6:05:bd:bf:70:8f:45:
61:fc:9d:11:7b:f2:9b:dc:4c:2a:6e:76:11:84:17:
47:c1:f1:08:1a:ee:d3:5a:90:90:2c:38:23:d9:82:
d4:74:54:83:2b:34:52:4a:53:0c:54:77:83:b1:8d:
54:d6:de:2a:bf:e5:8a:6a:e4:42:16:b0:2d:12:bd:
46:d8:0d:7e:46:a4:2e:2e:6b:81:72:32:8e:27:43:
d1:57:c7:9a:c3:f3:d6:c9:49:81:14:06:be:fd:0f:
3c:dd:33:7a:75:20:7c:8e:30:a7:ca:48:70:49:e4:
e8:16:f4:a2:1c:e8:96:b6:73:59:e4:9e:8d:10:3c:
71:3e:c9:36:57:67:be:35:2e:7e:77:55:b0:a6:2e:
ea:f6:02:1e:0d:02:a7:55:60:a9:fa:2b:cd:7c:67:
b4:45:c2:84:9d:72:53:a0:10:8f:7c:e6:4f:54:9d:
79:cb:c6:9e:a2:ff:2d:0f:53:9f:03:b9:85:1d:fd:
df:ae:3a:43:37:31:68:ab:45:ef:30:18:88:69:2c:
9d:8f:b9:4e:f0:aa:3d:69:6b:84:b2:c2:01:c1:20:
89:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:02:5B:DE:54:49:EA:D7:F8:A9:5D:FF:DE:2F:0B:1B:CD:92:F7:9F
X509v3 Authority Key Identifier:
keyid:22:30:87:B3:37:F7:47:6C:8D:63:04:AE:B0:8C:EE:05:7F:4B:F6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjCHszf3R2yNYwSusIzuBX9L9pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bc94fa-051e-48d5-acd3-c5125142ae58/1/IjCHszf3R2yNYwSusIzuBX9L9pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:78:2b:d0:2f:6a:31:72:d7:85:33:8e:db:c3:b8:69:e6:a9:
9c:b7:89:f6:bb:01:fc:7c:a6:2f:1f:59:17:a7:64:98:c1:a2:
6e:2b:17:b0:5e:fd:a5:3a:89:43:e4:16:be:32:b4:e7:eb:95:
8e:ce:91:10:bc:f4:d7:43:5b:f5:b9:b1:c5:cb:1c:ac:a4:d0:
23:65:4c:ca:bb:de:e8:af:11:4c:d5:0e:d7:77:99:09:e1:ad:
68:f1:1c:43:f5:28:97:c5:a0:d8:d8:db:49:1c:de:bb:0c:f1:
04:41:ca:f2:e5:ec:1d:cd:fb:07:83:00:c5:31:08:9f:31:8f:
e3:b9:f7:dc:54:eb:ed:19:1a:b3:9c:92:46:e6:23:dd:55:fe:
df:ed:61:7d:0e:1d:b3:e2:5f:87:27:2b:19:ab:6a:7a:4b:fa:
9e:74:a0:8f:91:57:94:ca:0a:cf:44:bd:4c:1e:ae:ab:e6:c7:
20:3e:68:7e:c5:1a:74:13:0c:fd:89:4f:87:c7:eb:2a:94:2a:
1c:89:5f:c3:c3:35:1c:64:ef:b3:23:48:d3:98:d5:dc:c6:54:
d9:cb:65:68:34:98:0b:16:be:ed:b9:e9:fd:8a:26:5a:d9:91:
29:88:45:8d:f6:f5:69:3d:a3:1a:7c:42:df:98:d2:f5:54:78:
65:9c:69:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:37:06 2025 by rpki-client