Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
File: IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft (raw, json)
Hash identifier: pECjFmabnDsga/ztSk8YRz6w+GG5P9UJdXcHMFgEVsA=
Subject key identifier: 4D:2D:E8:D1:B4:B2:DA:2F:6E:BC:E0:75:D9:E1:49:85:5B:A0:C1:11
Authority key identifier: 22:B2:7A:B0:D5:5F:8A:E0:DD:A8:6F:DE:F1:C3:57:24:E1:88:5E:4F
Certificate issuer: /CN=22b27ab0d55f8ae0dda86fdef1c35724e1885e4f
Certificate serial: 01987298F1152C0EACAD26A5E223B56E9B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
Manifest number: 0597
Signing time: Mon 04 Aug 2025 01:01:22 +0000
Manifest this update: Mon 04 Aug 2025 01:01:22 +0000
Manifest next update: Tue 05 Aug 2025 01:01:22 +0000
Files and hashes: 1: IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl (hash: z4+jNXHlCyHkT8pAiamI11oDtv6eXu+9PVna4ub+mh8=)
2: zXLMwVTkvtRtqBEEK8m7kFIV-bU.roa (hash: t9hVNP/nAzK1Dyce9djTLoexqpTbWSAapAI0vD+z2PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:f1:15:2c:0e:ac:ad:26:a5:e2:23:b5:6e:9b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b27ab0d55f8ae0dda86fdef1c35724e1885e4f
Validity
Not Before: Aug 4 01:01:22 2025 GMT
Not After : Aug 5 01:01:22 2025 GMT
Subject: CN=4d2de8d1b4b2da2f6ebce075d9e149855ba0c111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:67:92:f9:c1:87:74:77:33:62:3a:c9:bd:cd:
e2:fb:1f:2c:8b:e4:fa:17:49:99:6f:b5:51:98:46:
8b:76:da:ab:f8:30:f7:1e:6f:79:38:33:6d:b8:3e:
3f:64:69:4e:6b:1c:a7:dc:d4:7b:1e:51:5c:ab:0a:
5b:9b:8e:6b:52:36:79:b6:f4:ee:e1:c9:97:9c:c6:
5e:0c:df:ec:48:50:04:62:16:d3:34:5c:f9:8a:a9:
f0:5e:ac:ac:b3:2a:68:b2:19:5e:ce:08:9f:9a:6e:
87:a8:94:85:63:fd:00:7b:4b:1a:49:68:bb:f0:2d:
07:87:b4:1d:7c:05:c3:cc:8d:d6:0c:9c:0b:4e:1a:
42:e1:a7:1f:a9:77:51:a5:a8:c7:54:1d:dd:87:55:
5b:93:0e:13:d0:4b:40:d7:87:3d:cc:f6:c1:ee:01:
b3:c6:2b:03:d9:ba:c2:40:d4:c8:92:97:30:ee:f6:
63:8a:8a:f3:3f:90:0b:fc:21:69:84:60:8f:05:8a:
b7:1b:f1:b1:34:80:c5:8f:5e:24:ea:41:ac:d5:fe:
fa:83:4e:33:6e:5a:30:c7:0f:4a:76:db:99:58:c6:
18:1f:05:98:1c:0d:3a:be:57:68:e2:db:e8:94:9d:
c0:eb:5b:54:22:2b:23:c0:b0:fe:fa:05:83:ac:d8:
40:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2D:E8:D1:B4:B2:DA:2F:6E:BC:E0:75:D9:E1:49:85:5B:A0:C1:11
X509v3 Authority Key Identifier:
keyid:22:B2:7A:B0:D5:5F:8A:E0:DD:A8:6F:DE:F1:C3:57:24:E1:88:5E:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b458ee-f6a5-4e2c-8118-de6644c3daed/1/IrJ6sNVfiuDdqG_e8cNXJOGIXk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:4f:9d:f5:3d:8b:e0:89:30:f5:7a:e4:e6:9c:58:03:7c:43:
41:7c:58:ac:b2:70:89:89:d1:66:e2:17:e9:3c:f4:6c:47:69:
8e:1c:08:4a:ab:10:bc:ad:7f:ef:a8:35:8b:01:a3:cb:5e:1d:
1a:35:b5:6f:a1:77:9d:3c:ea:0c:18:11:a5:f7:da:18:1d:a0:
0a:de:1a:4c:98:4d:b2:ca:73:8c:63:3a:2f:61:31:37:41:bf:
7e:f8:1d:6b:c4:d8:c2:04:d5:09:2b:1c:21:1a:9a:16:54:d7:
aa:3d:bf:26:8e:b0:78:f7:ae:26:c7:45:b8:5b:2e:1e:bf:36:
61:e7:7a:e5:2f:05:59:15:cb:cc:f4:fc:e3:05:9b:6d:4a:31:
3d:be:8c:2e:ef:ad:c1:9f:77:2d:a3:68:09:df:b3:e6:9b:85:
a0:3d:01:59:51:32:1c:b3:c9:d1:ad:03:bc:6a:e7:67:ed:6e:
c9:b4:23:57:fe:14:ea:50:7e:cb:e0:3c:31:7c:94:4f:d0:50:
33:7b:a6:7e:6f:ea:0f:9e:cf:72:f8:00:8c:25:81:6f:e4:ae:
28:9a:74:ee:67:a3:25:6a:12:ae:51:36:7c:aa:f6:49:81:39:
40:75:cd:95:bc:08:f5:67:5d:82:32:ed:c4:02:63:60:11:bf:
44:9d:3e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:12 2025 by rpki-client