Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
File: Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft (raw, json)
Hash identifier: +Fl+0+EmcqQaIxCE1wH81ai5PMwmb2syZ2mMUIfK/Q0=
Subject key identifier: D1:C3:AC:86:07:3C:2E:F5:39:EE:DB:D7:7D:5B:F2:32:39:81:70:EF
Authority key identifier: 21:CF:53:48:1D:13:3B:AC:F5:27:86:8D:BA:1B:37:63:E3:D6:DD:A7
Certificate issuer: /CN=21cf53481d133bacf527868dba1b3763e3d6dda7
Certificate serial: 01987E2ED5762FDF1DFE1A5952D4C6D2D730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
Manifest number: 05DF
Signing time: Wed 06 Aug 2025 07:00:55 +0000
Manifest this update: Wed 06 Aug 2025 07:00:55 +0000
Manifest next update: Thu 07 Aug 2025 07:00:55 +0000
Files and hashes: 1: BkDrM4-atcp10Br--qbvg_yK1zg.roa (hash: OQTXLqdYWvwdj8zXSXiFu8x5dJlCSPxgy4/Qhi1Yohc=)
2: Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.crl (hash: q6L5bRVnWRkJyrXB/pk5Q0ENLnj/gAvmkWvHNC3QQ/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:d5:76:2f:df:1d:fe:1a:59:52:d4:c6:d2:d7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21cf53481d133bacf527868dba1b3763e3d6dda7
Validity
Not Before: Aug 6 07:00:55 2025 GMT
Not After : Aug 7 07:00:55 2025 GMT
Subject: CN=d1c3ac86073c2ef539eedbd77d5bf232398170ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1d:9e:86:64:b0:8d:b1:96:bb:d0:48:3e:fc:
18:52:d7:ac:76:de:62:e2:21:c7:7c:97:01:99:e3:
2b:cb:33:40:a6:0e:1f:da:d5:44:05:ce:6f:f3:0f:
18:2c:13:86:b0:e2:4b:fa:6c:f7:2d:36:5f:50:dc:
bf:05:af:a9:26:df:b8:87:07:12:23:9d:c8:98:07:
7a:61:fe:93:c3:50:54:54:66:36:f2:ec:09:a1:41:
12:f4:d4:9d:94:86:3c:09:99:99:31:10:9a:36:57:
bb:17:6a:b2:01:0c:de:ca:79:66:a6:b1:5b:37:88:
10:23:fb:b2:ae:32:49:f0:ea:73:9c:71:6d:43:a7:
23:46:74:a7:46:a9:1c:27:03:44:d1:6f:83:0b:d7:
53:49:dc:c2:7c:d3:f3:29:4b:4c:33:2f:04:37:3c:
9f:8f:bb:73:16:54:4e:b1:d9:f8:11:11:1e:12:93:
7c:50:c7:a0:c3:58:55:b3:ec:71:1c:9a:b4:9b:80:
69:d4:1c:b4:ae:56:7f:b8:b2:7c:c2:22:ca:33:60:
4b:2e:09:5e:5e:6f:43:29:ad:12:f6:ba:c2:ce:55:
35:e6:68:fc:33:b6:36:4c:5e:7c:a7:ad:3b:2b:7e:
8e:e4:6f:21:e4:e8:2e:b1:2c:1d:3f:dd:f2:e7:27:
f5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C3:AC:86:07:3C:2E:F5:39:EE:DB:D7:7D:5B:F2:32:39:81:70:EF
X509v3 Authority Key Identifier:
keyid:21:CF:53:48:1D:13:3B:AC:F5:27:86:8D:BA:1B:37:63:E3:D6:DD:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:de:7a:e0:6b:90:c7:4f:c7:d0:84:ab:c9:83:36:ce:17:a0:
84:5f:87:c7:f2:b1:03:31:04:9a:86:93:ee:20:ea:a9:d3:4a:
bf:88:59:b3:f3:00:c8:97:62:c3:13:34:1e:43:05:a0:61:86:
d5:43:5d:b8:99:cf:7a:bc:38:df:b4:7d:15:ed:fd:4c:b2:4d:
21:cd:03:01:b2:4e:87:ce:f2:78:9e:d9:ab:e4:3e:6a:6a:b6:
63:2f:a1:b3:4b:bb:c0:a2:e2:46:2e:dc:63:70:ad:ab:e4:62:
0c:c9:de:fb:00:de:76:28:36:65:82:48:b7:0c:59:de:69:71:
46:10:b4:27:48:2d:d0:c4:30:be:d4:38:ca:3e:32:ad:5d:f9:
61:3b:3b:a9:20:0d:54:49:b9:e4:10:e2:fe:e3:55:c0:ff:17:
f4:24:b9:5c:46:09:dc:21:69:af:10:a7:5e:b3:f8:f6:8f:25:
59:e6:00:73:ff:73:86:9b:71:3a:c1:1b:5a:ad:c7:02:78:69:
b4:f0:72:02:20:06:ac:e7:87:87:1c:28:63:46:3b:37:ae:a1:
8c:5c:cd:d1:b9:b8:1d:fb:5e:ea:03:70:03:8a:1e:fb:28:3d:
03:c1:31:29:37:5e:e6:b0:46:a1:e7:5b:61:9c:77:8d:16:a8:
d2:27:c6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:14:29 2025 by rpki-client