Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
File: IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json)
Hash identifier: JQj63Z3XYsMrgiQDq/yfiOZYJBuoaoTISc9LzA/oFUU=
Subject key identifier: C0:F0:FB:CA:A4:3E:A8:40:A5:DE:02:FA:BE:4E:A6:51:CA:F0:8D:62
Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
Certificate issuer: /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Certificate serial: 01987B645779C7E611A83E73E87D7CA23B8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
Manifest number: 05EC
Signing time: Tue 05 Aug 2025 18:00:30 +0000
Manifest this update: Tue 05 Aug 2025 18:00:30 +0000
Manifest next update: Wed 06 Aug 2025 18:00:30 +0000
Files and hashes: 1: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: ivE3Wxax0JjD1v/S9QcnqAPhkripF2V9EmvOUymt1QM=)
2: P4joPrMbyyf9eJU97dD_0zc8DJY.roa (hash: gl6GZ/HrB5BKfA9rjfcCYlZhjRwEwX8+Blcs80phGI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:64:57:79:c7:e6:11:a8:3e:73:e8:7d:7c:a2:3b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Validity
Not Before: Aug 5 18:00:30 2025 GMT
Not After : Aug 6 18:00:30 2025 GMT
Subject: CN=c0f0fbcaa43ea840a5de02fabe4ea651caf08d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:07:26:fb:f9:72:6c:a6:46:a0:4d:ca:15:d6:
d3:d2:42:5f:0f:84:d9:d6:be:08:95:b2:e4:96:aa:
c6:78:90:62:10:c2:74:ef:d5:9c:d1:d6:ea:6a:0a:
3a:6c:fc:cf:2a:db:11:23:c0:8f:6f:65:7b:e5:4e:
88:86:12:90:6e:37:d8:b3:46:32:59:02:63:52:38:
fa:0c:de:05:c2:7a:7f:17:12:44:ad:77:8f:b1:13:
d4:fe:e9:6e:dc:a9:f2:e9:cb:23:71:cd:6f:35:5d:
5a:f1:1b:64:b1:6b:aa:e7:33:9e:d1:3e:2d:37:db:
a9:c9:b1:20:10:6c:dd:db:e9:e3:df:eb:e9:ef:ad:
f4:07:f6:d2:47:f7:e8:81:19:cb:4d:7c:fa:95:cf:
85:19:61:2c:96:1a:8e:9d:64:91:11:7a:2a:68:c3:
71:af:40:95:83:ec:3e:0c:b7:fd:97:cf:eb:19:62:
56:65:c3:7e:b7:8c:b1:f7:a6:6f:a1:f9:9f:56:f3:
c6:64:b2:61:64:9b:4a:3b:62:f7:13:9c:dd:87:6d:
7e:74:56:fb:e2:22:0a:8b:93:4e:e5:e9:e2:ab:96:
48:06:bd:e0:c0:bc:0b:bb:b3:6a:10:d3:5c:ff:c4:
43:fe:63:e8:a4:51:d0:0f:c6:c7:9f:6d:ff:c4:6f:
4d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F0:FB:CA:A4:3E:A8:40:A5:DE:02:FA:BE:4E:A6:51:CA:F0:8D:62
X509v3 Authority Key Identifier:
keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:25:35:8f:ce:ea:30:ee:c8:42:43:ce:3d:04:63:76:39:a3:
a2:88:e8:04:bd:d0:a0:bc:14:d6:c0:0b:29:00:b3:f5:63:dd:
66:fb:7a:bc:3a:18:ff:53:63:93:07:64:8f:ed:fa:b7:46:a8:
44:c8:05:01:bd:cf:a5:09:2d:70:2f:87:05:f7:f9:a7:a1:e5:
5d:30:0d:03:cb:59:e6:3b:dc:dc:35:f4:35:ce:07:df:55:a7:
a7:17:e2:c7:28:e9:25:a6:af:63:7e:bb:c4:36:6f:88:5b:2c:
b2:1f:58:5a:84:b7:87:7e:81:4e:4c:17:23:33:9f:af:77:73:
7b:6a:6c:e8:32:2c:17:f7:2b:09:45:0b:c0:73:1b:b7:c7:d8:
01:64:30:29:d4:61:0f:d4:c5:62:1d:07:7b:20:b0:39:91:f9:
45:bd:40:b8:03:51:f3:44:7d:d7:47:3f:ea:d5:e3:7b:e5:02:
fc:b9:f0:81:34:2d:a8:c7:91:f8:7b:0b:e2:05:0b:68:a6:3a:
71:69:a4:22:1a:5f:49:b5:32:01:42:1e:8d:9d:ea:7b:00:6f:
8b:28:e0:ae:af:91:3a:46:1c:c5:06:e7:bf:79:19:11:5a:85:
db:6a:b3:47:6d:bf:9a:ee:ae:0f:6a:c5:b4:c1:3d:fa:bd:76:
4a:59:c8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:37:33 2025 by rpki-client