Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
File: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft (raw, json)
Hash identifier: e2DaESAhm2ZzlUMihGLFrehHpw4aWdWTCIUJGKN9HAM=
Subject key identifier: 74:7F:7D:36:1D:CC:59:DF:59:0B:B2:A7:1A:71:44:7D:2D:44:7E:50
Authority key identifier: 23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
Certificate issuer: /CN=230e9ac64510fa391846bb139ab52b8001d58038
Certificate serial: 01988BB3F39722CDD2E3676E4F7BDBFE49C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
Manifest number: 12B8
Signing time: Fri 08 Aug 2025 22:01:23 +0000
Manifest this update: Fri 08 Aug 2025 22:01:23 +0000
Manifest next update: Sat 09 Aug 2025 22:01:23 +0000
Files and hashes: 1: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl (hash: +3shMl7EKZhiDwUid/hNUrn57Y7W5j7RoeLaku8jvYo=)
2: UoyH2jgw3TjRmBGXcoIbjkHpXYk.roa (hash: 7Hn5Nml4HR5xVhJraj44LXb5goEfvTP/sHQKgiuE26I=)
3: pSCPepTx67SC5l3Ed1hdUBnE5IA.roa (hash: MWvK8q7nznQKhnSv15ZjQ+g2Xqx0IxpC4fGczjIPPSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:f3:97:22:cd:d2:e3:67:6e:4f:7b:db:fe:49:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230e9ac64510fa391846bb139ab52b8001d58038
Validity
Not Before: Aug 8 22:01:23 2025 GMT
Not After : Aug 9 22:01:23 2025 GMT
Subject: CN=747f7d361dcc59df590bb2a71a71447d2d447e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:60:de:80:89:f2:0c:46:cb:81:6d:9b:f8:
80:12:8c:78:c9:27:2a:71:94:f6:5d:fc:95:4e:42:
6f:5f:be:83:d5:6a:0c:34:7b:11:a1:e2:8b:3f:da:
d1:11:ed:19:21:97:9b:24:6b:67:22:88:d4:2d:b7:
b5:60:1b:ea:01:bc:1d:da:9a:82:2e:3e:e3:5a:19:
c6:44:ff:68:d7:b8:50:23:55:cb:82:99:66:a5:66:
de:a1:cc:0c:53:9f:27:db:99:66:09:22:a3:a0:f7:
a6:cb:77:af:7c:93:59:3e:a6:27:56:90:4d:22:30:
3a:b8:f6:15:e5:14:3c:10:a3:f9:41:6d:de:46:4c:
bb:2b:82:89:e0:f1:70:aa:06:dd:18:b6:79:8e:26:
d9:04:b4:b5:7b:3a:70:1a:71:e0:77:1a:bc:8d:6f:
ad:ce:65:9b:5e:a8:c8:24:a1:a2:39:6a:f7:8b:3e:
d2:25:e4:f2:58:f0:d8:1e:40:99:d0:56:d3:5d:fc:
e3:15:fe:c4:28:b1:a4:2b:68:4c:2c:5e:c6:b6:a0:
f9:69:21:a8:58:6d:29:96:da:18:85:d3:71:79:2e:
02:03:f1:09:9d:f2:59:de:3c:f2:00:dc:d0:d8:7a:
86:7f:e6:b4:79:ea:c6:29:d7:4d:9a:9c:ed:c0:02:
4a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7F:7D:36:1D:CC:59:DF:59:0B:B2:A7:1A:71:44:7D:2D:44:7E:50
X509v3 Authority Key Identifier:
keyid:23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:24:72:40:40:08:e0:19:c2:b3:c7:91:03:a7:04:44:ce:4c:
7f:b5:9d:cc:c6:e1:e7:4a:f2:2e:11:0f:91:d9:5a:7a:26:5d:
3a:db:3a:0e:00:36:97:67:53:66:1a:5d:3d:6e:13:d8:3d:54:
97:c9:aa:23:2d:4c:dc:01:fa:3c:8a:23:29:22:db:13:e7:ac:
74:58:48:76:66:4f:5b:d2:ea:53:83:c6:14:04:bc:33:65:1b:
43:34:47:88:1d:71:65:8e:2a:64:5f:67:3e:02:9a:ab:87:ad:
ac:78:a3:f6:db:05:27:50:6e:f5:60:88:73:ee:b1:24:2c:78:
08:f6:16:c5:20:e4:ac:45:3c:ae:45:3e:c8:5f:82:78:01:6a:
4b:32:d2:05:d3:c3:08:63:3e:63:c7:45:c3:78:3f:ce:77:8f:
cb:2f:75:2b:91:48:6c:bd:90:d8:02:48:eb:24:ca:2a:b9:e7:
c3:d3:71:cf:a9:65:35:16:c1:da:5e:51:d8:a1:e5:51:cc:a5:
a0:8f:33:03:19:fe:0f:31:11:52:a2:9e:a1:3f:af:aa:4c:98:
8c:67:a8:1d:40:34:91:20:71:1e:32:42:b9:ab:60:6b:e3:93:
22:e4:69:dd:9b:37:4b:3b:e3:17:35:da:bb:dc:f0:ac:df:0d:
31:d4:5f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:17:31 2025 by rpki-client