Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
File: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft (raw, json)
Hash identifier: AJZXEC2rbunVJV0+k2f+HDHn+jRRGJnRDR2G6/t8LDM=
Subject key identifier: B5:D3:31:98:01:EA:BF:E8:3F:E3:65:AE:8C:33:E0:12:77:43:B1:4C
Authority key identifier: 22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
Certificate issuer: /CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Certificate serial: 019874500C1B9684C698F520E355C4B9510C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
Manifest number: 10FA
Signing time: Mon 04 Aug 2025 09:00:59 +0000
Manifest this update: Mon 04 Aug 2025 09:00:59 +0000
Manifest next update: Tue 05 Aug 2025 09:00:59 +0000
Files and hashes: 1: 0qW5Y4yA32z4Dny6mIJ-qLW2XWk.roa (hash: q9HOhDrTziiN8dHNBG3tLes1wQlniZAzuxjJOEin3Rw=)
2: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl (hash: 20RLv5P+ywX1zj6bcWVGpMBl8BhQ1vSTQnpba4CzYw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:0c:1b:96:84:c6:98:f5:20:e3:55:c4:b9:51:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Validity
Not Before: Aug 4 09:00:59 2025 GMT
Not After : Aug 5 09:00:59 2025 GMT
Subject: CN=b5d3319801eabfe83fe365ae8c33e0127743b14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:31:ff:ef:74:8c:ca:42:29:19:4c:c0:23:86:
91:85:0f:c3:35:b4:68:78:6b:68:0b:fb:13:0b:b2:
26:19:e5:fe:4e:76:4b:53:a8:04:b3:57:dd:88:43:
99:df:d8:a5:26:a4:c0:71:78:3e:b6:42:a8:c7:fc:
07:29:99:78:4c:a1:db:44:b0:76:83:b0:99:18:b9:
0d:14:c6:45:fa:9d:6c:e7:69:64:90:ab:f8:30:df:
61:45:ed:6a:0e:13:2c:0f:ef:11:bb:ab:c0:c5:f9:
93:2b:b4:44:bd:25:2e:9f:2d:b7:7d:8d:4f:cf:c6:
c0:ca:2b:a1:7a:7a:7e:79:b6:5d:67:22:66:82:15:
d8:f8:18:cc:57:30:e2:f5:e1:73:71:85:f8:1f:2b:
3a:aa:3a:98:d4:82:04:bb:e8:74:bf:1e:18:cc:fb:
e5:5e:af:8a:00:76:97:5c:f1:af:73:46:f4:40:d8:
cf:62:01:57:48:9f:ee:0f:d0:f0:76:45:db:36:8d:
75:0a:f6:be:8b:70:fa:f8:0f:42:74:cb:a6:53:fa:
dc:e6:5c:83:37:35:12:12:c2:2f:14:b8:5d:fe:cd:
80:41:17:75:eb:bf:b7:61:e9:37:54:dd:ea:e8:b9:
cc:ad:0c:ed:af:59:69:48:37:c7:3d:32:9b:37:df:
36:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D3:31:98:01:EA:BF:E8:3F:E3:65:AE:8C:33:E0:12:77:43:B1:4C
X509v3 Authority Key Identifier:
keyid:22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7c:4f:9f:40:47:e1:21:86:89:23:f9:ba:8b:21:d4:b1:c4:
15:00:1e:a5:c5:98:87:f1:ba:ce:06:ae:6c:ca:20:80:8d:ee:
81:3e:07:a5:82:1c:98:2c:4d:95:e5:5a:48:21:e9:c3:7d:a1:
b3:d0:b7:24:37:28:c7:a2:7b:f1:c0:86:fc:54:41:ff:9e:ee:
ca:7c:d4:b7:a0:78:2e:0c:b9:62:3f:d0:a9:f3:7d:ef:f0:43:
19:51:8e:1d:c7:2d:63:16:8d:9d:8a:c5:6e:b7:f7:f8:8c:02:
5b:b5:da:90:9f:d1:3c:03:f7:84:07:0c:c0:d9:40:ac:f3:4f:
62:57:2a:ef:82:28:4c:e6:e5:9e:3f:92:94:83:d4:e3:63:e5:
2d:bc:50:17:5c:f5:b7:f5:2b:b3:47:94:79:69:b1:0d:20:ee:
c3:97:b5:bc:fb:fa:13:a8:c3:53:c7:ab:3f:d4:39:40:0a:77:
f9:90:4d:0d:ed:d8:c4:f5:c9:04:8b:66:7c:d9:63:98:c3:86:
56:9a:5d:f0:15:32:18:65:a5:58:71:65:22:a1:99:60:1a:e1:
75:90:4c:78:d3:a7:21:c1:0b:dc:41:0d:66:33:d6:33:eb:9a:
41:89:23:09:6a:b3:5d:dc:68:fa:3b:03:30:78:3d:ee:0b:80:
63:ba:bd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:54 2025 by rpki-client