Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
File: IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft (raw, json)
Hash identifier: TajPMAQMw7KfphjhSsKI+GQIL/vqJUrnV79fX17Gxnw=
Subject key identifier: 9F:6D:24:94:DA:5C:EC:00:5E:71:E8:C7:B2:6D:EF:29:15:57:72:4C
Authority key identifier: 22:A7:2F:3E:D2:3E:22:94:F9:BB:6B:A6:60:24:61:66:C1:3F:83:24
Certificate issuer: /CN=22a72f3ed23e2294f9bb6ba660246166c13f8324
Certificate serial: 019891ECDEFB0318C1362E9F48FCE157F895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
Manifest number: 140D
Signing time: Sun 10 Aug 2025 03:01:16 +0000
Manifest this update: Sun 10 Aug 2025 03:01:16 +0000
Manifest next update: Mon 11 Aug 2025 03:01:16 +0000
Files and hashes: 1: 6LkNfXDGOHhf8gBsIaO1gA2Q-VM.roa (hash: NThSJkZPm+DD4/mAcNhw9miEjuzZudxLC0TeMXxTy6I=)
2: IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl (hash: jR8nBPr74T+vlZ0Zwj5EU10YrA4ozkirZT7qtaLrdzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:ec:de:fb:03:18:c1:36:2e:9f:48:fc:e1:57:f8:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a72f3ed23e2294f9bb6ba660246166c13f8324
Validity
Not Before: Aug 10 03:01:16 2025 GMT
Not After : Aug 11 03:01:16 2025 GMT
Subject: CN=9f6d2494da5cec005e71e8c7b26def291557724c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c3:b9:65:5f:9d:ed:c0:c0:5e:4f:c0:3d:3c:
3e:05:5e:aa:e7:04:5d:23:f5:5d:9e:a3:f4:00:53:
97:da:88:3a:d5:37:37:01:5a:54:4f:db:76:f1:f8:
2e:65:d8:42:00:6b:29:4f:22:2e:dc:6c:cc:12:35:
2c:99:89:52:31:e1:49:ef:ca:5c:24:ad:58:2f:80:
1a:cb:4c:45:56:d3:7e:45:23:b7:b9:3d:96:64:b0:
3e:da:16:54:e9:26:1a:d3:f5:71:bd:d9:82:2e:f7:
05:62:6d:f2:f9:79:2b:8a:da:a4:ac:39:41:b1:84:
97:a2:e0:d8:1e:89:5a:27:13:da:c3:c5:0c:81:62:
fe:f0:90:3b:78:71:0b:8b:77:4e:04:04:80:47:a2:
60:61:f5:a7:f9:e9:ed:05:5f:3b:5e:6d:c5:2b:1f:
ae:c5:d3:33:16:b9:8f:e6:f9:31:92:62:e1:fe:41:
40:5c:4a:36:18:e4:ab:2e:75:37:a8:a4:75:8a:cd:
3d:cc:66:9c:49:b6:b3:d3:15:8d:13:2f:95:65:20:
57:ce:1a:d3:b9:31:15:58:bd:bb:35:5c:b9:9f:83:
75:ea:71:1e:d4:c1:fe:43:bd:6f:0e:cf:f8:fe:fc:
f5:af:d2:68:70:45:2b:d7:83:88:a2:a3:6e:be:e3:
ae:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6D:24:94:DA:5C:EC:00:5E:71:E8:C7:B2:6D:EF:29:15:57:72:4C
X509v3 Authority Key Identifier:
keyid:22:A7:2F:3E:D2:3E:22:94:F9:BB:6B:A6:60:24:61:66:C1:3F:83:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:6c:87:fb:83:d2:98:ff:3f:31:9a:21:fa:e7:87:94:52:b6:
6d:90:a9:cc:0c:c3:e4:58:9a:5a:19:1b:20:10:bf:c9:e8:18:
d9:ed:5d:e9:d9:66:e4:cf:0b:d9:63:50:8e:0d:44:8a:5a:2a:
3e:f2:f7:2e:f7:7e:c7:d8:01:3b:7f:01:29:72:c2:c9:46:15:
e6:42:58:a6:4e:63:a0:ab:70:fe:24:93:66:00:35:64:25:3a:
cd:be:64:cf:fd:1e:30:61:17:96:c4:01:9c:3b:48:74:7e:66:
a3:46:d0:0a:ea:f8:5c:f5:bb:db:93:f8:99:73:b1:dc:52:ee:
c2:ff:49:46:10:23:74:b6:43:17:31:11:2e:64:eb:7a:2d:48:
34:c0:8e:4b:94:5b:97:f9:94:8f:bc:99:e3:40:eb:52:2f:61:
9f:1c:28:7a:a3:3a:d3:1e:f7:e8:89:bc:c5:55:0a:6c:42:bc:
f0:e9:5b:81:da:bb:13:48:15:9b:03:83:5e:3d:5b:cf:07:25:
70:58:08:3d:fd:bb:c6:52:e2:5a:f1:42:39:ad:33:64:32:28:
05:d9:7f:4a:e7:c5:9a:9a:7a:f1:08:1e:c5:6e:ca:4f:b4:31:
1b:dd:ed:37:b2:eb:a9:29:f2:6b:6b:d3:0b:b9:85:b9:da:5e:
fb:24:1c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:34:37 2025 by rpki-client