Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
File: IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json)
Hash identifier: c1v/2z8Bg0afXWuO9uuYGGLVksg52bBj3J5Nlu1xoZI=
Subject key identifier: 3F:5F:22:0D:71:5F:13:D8:E3:54:1C:34:B1:BA:82:77:95:6F:B2:5F
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial: 019873AACFAB6C056191998F35959ACED853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
Manifest number: 161D
Signing time: Mon 04 Aug 2025 06:00:30 +0000
Manifest this update: Mon 04 Aug 2025 06:00:30 +0000
Manifest next update: Tue 05 Aug 2025 06:00:30 +0000
Files and hashes: 1: 0l9u7U7-JAE9oPOAXydnoK5llfw.roa (hash: oY/oS9q71h1EkykDeqhOM86N3ajJJAt9KtXF0lNGiMw=)
2: 2fACuJecAc-smwkteOGVyDmQwaw.roa (hash: viMl4YuUNqgc5sNwoMnn50MgLIKYr6T6TslDseVt1Hs=)
3: 8pYQBY1X6aonwnW6yuYCI5Wtti4.roa (hash: 092AtUWzwBmA/vVNEA+RmdDuKAr1lrKIcR3sMOt9fgU=)
4: BUn9VhicX5lnszohZN-B_W7zFEI.roa (hash: sw98I/lp9w4TPvzfatfd4Z7hM9xvkDPTUdNratN07GQ=)
5: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: 8Bo91YsiZtXTgWIpBTYDYHDCvEbMyJX9YyA7cD868vM=)
6: Mb-LmcxVL1VtsH8hRS7hr7XbD0M.roa (hash: KME4a3jYpOqtZ1MxibFa+qtZYD833WMiiPbSgGuC5dk=)
7: Wgp0YQwJQq4VG6uZluu1oFgmg8g.roa (hash: Pid5x2mXBM1ejdavSJH9rOxNTt6jgdN510wqmMNGw8o=)
8: f9hPXV4ddBc04Tj4n8IyT5UmeTI.roa (hash: ehkZEN/NuxZsPtmevVrc57V++f4TSDUNScFVzak2JVo=)
9: ur75_utePzQFHMJnHtwdIqrcVvE.roa (hash: KyHjYmZU1vSOh/Fl9iCE7ipsY2BzRFcyEiJ6qYetbaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:aa:cf:ab:6c:05:61:91:99:8f:35:95:9a:ce:d8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Validity
Not Before: Aug 4 06:00:30 2025 GMT
Not After : Aug 5 06:00:30 2025 GMT
Subject: CN=3f5f220d715f13d8e3541c34b1ba8277956fb25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:26:f1:ea:96:75:d0:a4:51:34:61:5d:59:b9:
10:10:4a:95:16:4f:b9:aa:4b:c6:0d:28:45:1e:d8:
10:eb:00:e7:d9:19:f2:1a:4f:a5:5b:f4:aa:68:65:
f2:1d:a3:d7:80:02:30:bf:36:80:75:f7:aa:d7:17:
e6:71:fc:85:9c:81:91:31:65:7b:d4:02:b1:6b:fb:
76:23:1c:31:0c:95:58:6a:86:73:f2:b8:59:8c:7e:
a8:e3:27:47:22:de:f0:84:e5:fb:1e:85:62:f0:83:
09:a0:82:c3:49:11:a2:a3:04:f4:62:96:58:57:94:
eb:86:19:ee:68:f6:52:83:79:d4:8d:16:4d:7b:e5:
e8:56:4b:01:7b:f3:43:fe:95:39:7f:c7:23:04:30:
23:c1:f1:68:d9:24:0a:5b:8a:7f:1d:57:be:1f:63:
35:d6:5e:40:1c:4c:0c:89:3b:39:4e:a8:2b:85:84:
cb:c4:a0:e4:de:fa:ab:e9:a0:65:93:52:3e:18:3a:
1b:11:16:0a:9c:30:73:71:ce:7c:7d:d3:8c:d8:0e:
0e:d0:32:7d:2b:28:fc:ef:40:49:38:e3:c5:27:98:
a9:bb:b3:94:34:61:94:36:a5:82:f3:51:7c:1f:82:
26:b7:e8:27:43:39:12:6c:77:fe:48:73:36:29:11:
f0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5F:22:0D:71:5F:13:D8:E3:54:1C:34:B1:BA:82:77:95:6F:B2:5F
X509v3 Authority Key Identifier:
keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:51:a0:55:0d:37:4a:84:ee:9f:dd:65:97:68:3f:8b:30:40:
a3:1e:e7:8c:f0:ab:1b:f6:ff:d8:c2:ee:ab:70:54:a8:46:ff:
49:7f:9c:4e:6d:e8:7a:0a:82:81:97:1b:b1:1e:8c:c7:8c:8f:
8e:8e:17:72:54:ef:af:a4:44:ad:32:39:81:6d:d2:42:28:89:
2c:21:2b:ea:6c:9c:ba:13:fe:63:48:2a:b2:83:48:01:e1:db:
f6:3e:fc:e9:dc:e9:cf:69:77:d1:c5:53:e5:e4:e8:19:7e:2b:
18:51:81:12:75:ec:f1:56:fc:c5:93:9f:88:a1:02:7f:29:b9:
d1:49:cc:88:d4:8a:6d:1e:e8:e6:01:54:99:6d:2f:41:45:5b:
43:54:b8:e5:ac:bd:62:c5:46:83:9f:64:03:38:7c:54:73:7c:
6e:cc:b4:47:df:0a:4d:93:4d:1c:8f:86:47:13:7d:29:c0:2d:
bc:61:5a:60:1b:ee:3e:c6:43:a2:62:ea:d9:d8:16:0d:db:02:
81:fd:64:d9:bb:60:98:0a:e5:ce:0e:94:1a:b3:71:52:78:bc:
ec:96:57:78:63:5f:bf:78:d2:b0:e9:9d:d7:7e:b5:04:99:2a:
a4:b6:0d:c8:d3:3a:c5:cc:82:8c:e7:56:93:ba:04:6b:f7:7c:
51:3d:4d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:32 2025 by rpki-client