Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
File: IjbtX1Yj7et5EKzTHV9u6B5csX4.mft (raw, json)
Hash identifier: qvkidbPqDGcFyumw81dbe4ZMXavHr7ISLWwn4a7uTXs=
Subject key identifier: DD:CF:4E:68:8F:8F:34:F3:C9:57:C6:CD:F5:D0:9A:0C:03:07:FC:C3
Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Certificate serial: 019873E3D856383DA22408C444A4A8B625C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
Manifest number: 0DFC
Signing time: Mon 04 Aug 2025 07:02:48 +0000
Manifest this update: Mon 04 Aug 2025 07:02:48 +0000
Manifest next update: Tue 05 Aug 2025 07:02:48 +0000
Files and hashes: 1: DY_YBD7dUEwRu5f1VApN2Xto06Y.roa (hash: kRig8nqc2JDYyWblKNLJUeoM3OkrL2nvfEXQMIcNjPI=)
2: IjbtX1Yj7et5EKzTHV9u6B5csX4.crl (hash: WaRPiCK8Hr0sS9vy6TBueD3vyrhZwZkCuERr++KnXiM=)
3: l9Ip7JI4fAFd10Cj77KHHSrnVWw.roa (hash: SkELgqgLspURpsKcvlJgINn6NNXlC7+9EjVyn8WnT2A=)
4: oxqh0Vlunc9_jJzsSDgtivZ6iaI.roa (hash: O+sbnF0yUj4wLiTH2KtiKCTxn2FjAX1wiARhxbkhBM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:d8:56:38:3d:a2:24:08:c4:44:a4:a8:b6:25:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Validity
Not Before: Aug 4 07:02:48 2025 GMT
Not After : Aug 5 07:02:48 2025 GMT
Subject: CN=ddcf4e688f8f34f3c957c6cdf5d09a0c0307fcc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fe:b7:56:99:0e:9d:28:5a:bd:77:fa:5a:15:
b4:5e:7f:02:b7:be:e1:3f:a5:52:db:35:60:c7:6d:
17:f4:42:3e:0e:12:31:6c:cc:de:27:7b:00:d7:a3:
c2:57:ce:2f:a3:c8:01:e0:fe:40:e4:28:68:05:7e:
35:cc:70:73:b6:61:f7:7d:28:de:70:9a:a7:07:42:
bb:95:1e:7e:8b:ab:a3:38:00:c1:60:a9:da:31:5b:
60:7b:03:fd:ed:76:6e:0e:2e:24:ce:8d:92:77:d4:
4f:02:b2:52:8a:63:0f:3f:93:4b:1f:55:30:af:5d:
1f:d1:48:7a:7c:d8:1a:8b:fc:29:29:bc:70:1a:90:
67:d1:ea:d7:da:8c:3a:25:21:db:c1:52:0b:e7:c3:
0b:8d:55:59:80:15:dd:f7:b6:c1:17:db:ea:63:1d:
4b:9c:72:0a:ec:93:54:02:f6:47:ad:5d:b7:a5:c4:
60:ed:30:b5:4b:b5:33:22:43:22:2a:29:a9:b2:43:
d2:ed:55:d9:e9:d4:cf:f5:4f:56:0a:5c:a3:ac:e1:
9c:81:fa:f6:1f:c3:cc:83:57:47:a3:a2:55:39:c1:
92:09:b8:1a:7c:64:e1:97:d0:d6:d1:10:01:43:35:
90:56:59:bf:34:de:fc:1c:41:bf:a6:45:f2:6c:58:
e4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CF:4E:68:8F:8F:34:F3:C9:57:C6:CD:F5:D0:9A:0C:03:07:FC:C3
X509v3 Authority Key Identifier:
keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:bb:35:da:f2:54:5e:1b:cb:4f:b5:77:2e:b4:b3:43:ae:16:
54:de:b2:31:e2:f2:aa:90:ce:ca:b7:3c:a0:90:6e:92:f7:98:
04:1c:7e:0d:fe:a0:77:ab:7f:04:80:1a:12:c5:e4:50:a2:de:
db:84:1a:fc:a5:ce:ec:84:cc:42:32:b1:ea:f0:a2:e7:53:90:
ec:cf:11:d5:5b:8f:53:db:77:cf:6d:42:95:46:4e:5c:c5:ae:
0a:38:15:48:6b:d9:ec:a5:de:c4:27:55:f9:c7:b1:75:0d:ab:
7e:27:2d:67:66:63:a5:37:37:c5:c8:34:ae:46:40:9b:c0:45:
63:72:62:b2:e9:9c:89:93:ac:bd:f5:d5:0a:d2:f7:86:18:a0:
5b:f4:f1:d9:c8:5f:da:21:fb:23:ff:f8:25:f5:c7:88:17:38:
fe:51:e2:69:ee:6d:e0:1f:3a:d6:fc:00:9b:4d:8a:b9:62:98:
9c:8f:bd:ed:db:b7:15:0a:9f:1b:8e:af:80:1f:5f:da:78:93:
14:31:3e:c6:9b:b1:c8:e1:f8:50:2c:8c:89:f6:99:d7:a7:0b:
1c:9d:2d:1a:47:86:ca:35:da:10:2b:f5:1f:fa:78:57:a9:fd:
03:67:2b:a9:e3:fe:53:f3:db:e9:5e:fe:00:a1:ac:ff:20:38:
74:08:10:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:33 2025 by rpki-client