Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
File: IS6vWaK_88qxGHEYlEeLue_5O4U.mft (raw, json)
Hash identifier: XxZJf8fs4I+8RLZRofdUhTPkc5gujscxwhjriTNQ6vE=
Subject key identifier: 2F:94:EF:5B:5A:3E:DD:56:9B:C2:D8:40:05:11:11:ED:CD:FB:4B:8B
Authority key identifier: 21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
Certificate issuer: /CN=212eaf59a2bff3cab118711894478bb9eff93b85
Certificate serial: 019891B5D7851E23ECB671F65DFEADD67EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
Manifest number: 1624
Signing time: Sun 10 Aug 2025 02:01:10 +0000
Manifest this update: Sun 10 Aug 2025 02:01:10 +0000
Manifest next update: Mon 11 Aug 2025 02:01:10 +0000
Files and hashes: 1: 9ACkzxrIX1FcdAcP7vGEcSMswwg.roa (hash: 5NgCoOKEw6pjVDqABbTS2aQr1tInYVR2kf/DOaxnI6o=)
2: IS6vWaK_88qxGHEYlEeLue_5O4U.crl (hash: Ap5tNLxJ1ruz2nFX9uMgIgJITMCAzUJ8Iv4R3QIhsqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:b5:d7:85:1e:23:ec:b6:71:f6:5d:fe:ad:d6:7e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212eaf59a2bff3cab118711894478bb9eff93b85
Validity
Not Before: Aug 10 02:01:10 2025 GMT
Not After : Aug 11 02:01:10 2025 GMT
Subject: CN=2f94ef5b5a3edd569bc2d840051111edcdfb4b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:7b:a9:27:be:1f:c7:a2:e7:0b:6e:d5:a7:
b6:b5:6a:31:4a:d5:e6:90:2f:5e:e5:44:c6:9b:c5:
a3:f7:04:3d:bf:1d:31:2f:87:12:98:4a:18:20:06:
82:97:06:70:fd:27:ae:bf:b7:29:46:6a:4a:71:e0:
ce:18:c9:d6:2a:6d:54:eb:9b:3a:04:55:bd:85:4d:
f0:8b:39:6f:d5:dc:18:df:25:ce:a2:f8:d4:93:8f:
04:77:8e:5b:9c:1f:af:d5:d3:37:9c:c6:21:8d:11:
d1:54:f6:0d:40:7e:c0:85:03:7c:80:6b:70:4e:e3:
b9:89:72:51:53:99:3c:88:a5:3f:fb:c7:a0:12:2b:
be:98:9d:1b:4e:37:dd:c9:9f:c2:f8:60:26:9f:32:
3b:35:e1:db:a8:d9:74:f9:cf:69:00:e2:0c:60:ef:
ca:65:e1:01:eb:4e:3a:45:ae:02:b5:ba:0a:bc:93:
6a:c6:02:e9:70:ef:c9:23:49:1b:2c:0a:ed:18:47:
86:89:3c:71:4c:29:3e:9e:12:c2:9d:1e:8f:2b:cd:
15:7c:6f:7b:d9:3d:20:3b:a4:0e:1f:d9:10:e2:48:
bf:1a:54:9e:f5:03:0f:0a:03:32:22:6b:6d:a5:1c:
ae:b0:86:8c:b1:4e:f3:29:8f:ca:fa:42:43:a7:42:
8c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:94:EF:5B:5A:3E:DD:56:9B:C2:D8:40:05:11:11:ED:CD:FB:4B:8B
X509v3 Authority Key Identifier:
keyid:21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:aa:b8:ba:d3:52:60:40:8a:40:3c:75:82:a7:a2:70:8f:2a:
e5:f9:f0:37:51:0a:7c:df:5d:e3:ac:22:e6:7e:37:7e:5f:89:
67:2d:af:ce:d5:df:83:3b:d8:24:01:45:fe:02:cf:b3:66:87:
24:f6:87:cc:ef:50:3c:9a:e5:fc:b7:4b:cb:da:dc:10:bc:c2:
a2:8d:ce:13:1a:22:7c:5a:d7:25:39:89:49:17:37:eb:8e:c8:
0f:52:39:af:b7:01:87:05:45:84:c8:c1:c8:7b:14:f5:70:8e:
8e:f0:4f:1b:57:87:46:6d:f3:2c:0e:24:37:54:e4:d1:c2:a7:
cc:50:b7:89:35:03:d5:82:72:f0:76:03:2a:79:27:1f:f9:e8:
cc:e7:c2:cd:18:3e:ff:bd:1e:ff:40:3c:d3:9a:82:3a:94:7b:
08:b4:55:54:1f:d4:c6:60:97:72:d2:3f:07:e1:d0:8a:a8:a8:
dd:3e:03:da:5a:5b:ca:51:47:54:ed:98:24:b1:3f:45:2b:a0:
77:b8:02:80:75:58:86:37:6d:de:d8:27:3d:f1:6d:98:5a:7a:
84:20:b9:28:4c:20:00:76:3f:d3:de:3c:e4:c0:8c:16:86:33:
88:dc:89:58:3d:71:77:1c:7c:e7:17:a3:0f:27:c9:87:37:83:
9a:2a:ef:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:35:50 2025 by rpki-client