Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
File: IT4dUNUiiL7oDupDVXcBhxJAm74.mft (raw, json)
Hash identifier: qk4xGZTTAK29InROiZiDHTHH+vfhmQu9KEQf6qz8l3A=
Subject key identifier: 37:BA:5E:5F:36:27:27:A4:B7:45:C5:AB:97:0F:58:1B:3B:8A:C8:71
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 01987AC020F7B4DB1328F53CBB41CE726B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
Manifest number: 1166
Signing time: Tue 05 Aug 2025 15:01:08 +0000
Manifest this update: Tue 05 Aug 2025 15:01:08 +0000
Manifest next update: Wed 06 Aug 2025 15:01:08 +0000
Files and hashes: 1: 76krOMMFj4xGzKVVHko6uuDROxo.roa (hash: ceX2KDmhx3x4hNPX/8MXCJQ5KaH4yEnp1JFYHt1MSdY=)
2: F5qz-Vy2ncltsniwS8n2KgCCfq0.roa (hash: kxMCsu4yD7h4P+QzcS37eIb+y0MEuK5iSa4JgSytJ7M=)
3: IT4dUNUiiL7oDupDVXcBhxJAm74.crl (hash: skcu+soil//ZwOBfkD4aHjsAIqgjn5hmif4deLKX9Jk=)
4: StSC9N03azFTttR3EoIav2MRsZc.roa (hash: Cu2Gg7GKVcYUuysW1qolVhXM9Kgp01W96yjaPNDKJxk=)
5: ewZSVtLlMKbZRioDRSGf8H0IaLA.roa (hash: cBUrQBxHZc9doLajihiHlq4PDgUK5KQSHA/948O3rQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:c0:20:f7:b4:db:13:28:f5:3c:bb:41:ce:72:6b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Aug 5 15:01:08 2025 GMT
Not After : Aug 6 15:01:08 2025 GMT
Subject: CN=37ba5e5f362727a4b745c5ab970f581b3b8ac871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:84:c3:bb:53:12:04:5a:78:c4:7e:a2:1a:
a7:f6:e5:e2:d3:8d:c2:30:7e:3e:f9:31:d5:8d:38:
94:3d:c4:d6:ed:d3:ba:99:cd:4c:bb:ee:47:b6:e8:
bc:3e:91:c7:ff:72:b1:95:ef:99:23:8f:43:49:6b:
72:9d:7e:e1:6c:d4:97:51:7f:b0:da:74:77:9a:a9:
40:d0:30:03:20:ce:9d:f0:bc:2c:f2:0b:63:22:0b:
13:5d:6d:3d:0d:ce:b1:15:2a:de:98:e7:08:09:62:
08:3d:7d:75:e5:06:05:1d:d7:5a:35:37:8e:38:3b:
2b:27:c6:9e:a2:f4:41:c8:1c:f0:9a:02:6e:a7:97:
fe:23:d5:8c:f6:b5:fc:34:da:02:19:14:d7:52:09:
52:9b:01:c9:73:87:47:59:4f:c2:b8:27:f2:f7:42:
56:5a:3a:89:73:34:8c:bf:d4:83:4e:1b:82:50:d3:
26:12:2f:9b:39:4f:3c:3a:63:14:e8:22:2d:ac:76:
31:ca:db:14:2f:8a:e9:73:e1:a4:87:0d:b9:76:23:
75:d3:f0:82:e6:4c:d2:66:2e:6a:d6:0f:ff:26:37:
d4:d6:0f:76:6e:d4:de:38:38:a8:0e:54:0c:c9:91:
5a:4f:3e:4d:00:4d:53:40:b7:63:db:35:e0:12:25:
e5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BA:5E:5F:36:27:27:A4:B7:45:C5:AB:97:0F:58:1B:3B:8A:C8:71
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:83:ea:7d:eb:5c:a8:8c:7f:e7:ee:8f:fc:e3:3a:1f:78:cb:
40:45:c3:86:7f:43:3e:69:0d:55:60:18:db:c6:67:d8:b1:a1:
90:0d:53:1d:8a:44:04:92:c3:63:f3:37:51:80:42:31:91:5e:
90:75:c0:39:5c:15:26:c7:ec:f8:c3:85:c6:0d:a2:81:24:24:
cd:d0:65:7d:6d:b2:1e:4b:4a:91:df:db:85:a2:f6:38:59:f7:
8c:68:26:ee:01:d1:b1:1a:b4:7c:16:ce:af:e0:e2:98:9a:41:
af:c9:7d:f5:74:f1:e5:33:f1:a7:7a:c0:aa:cf:4f:de:a4:7d:
50:35:58:d5:d3:89:4c:a4:91:5f:fe:65:1e:1e:5a:18:6f:60:
da:b2:2c:8e:0f:db:c1:2c:96:69:31:76:db:2d:cb:2c:da:74:
b0:a0:71:a8:59:a7:ea:28:90:6b:72:f7:96:79:7a:99:06:00:
7b:26:a9:63:e2:1d:84:a4:b6:e2:f1:3c:5b:a6:b0:43:e8:28:
22:24:e0:df:46:16:89:c0:30:69:e8:e3:e1:b1:cb:82:80:56:
0f:e5:55:ab:64:a4:8f:fc:32:2f:09:f6:a9:1b:ad:72:01:87:
6c:39:3b:86:52:f5:f6:a5:5f:b1:35:20:72:fe:0a:3f:e5:4c:
eb:ff:1c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:21:28 2025 by rpki-client