Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
File: IqGe2FosDPxPUL6tFvyfbxRlrRE.mft (raw, json)
Hash identifier: FWQkvI3bdnJ8NP1LF0G77bKKisHE5MihDuhxB5qrItA=
Subject key identifier: 46:62:44:70:12:9D:55:B8:B7:0C:7B:85:A0:11:3D:4E:C7:29:5F:D7
Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
Certificate issuer: /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Certificate serial: 01987373F418FC9F767D212026055CEAB87D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
Manifest number: 0537
Signing time: Mon 04 Aug 2025 05:00:35 +0000
Manifest this update: Mon 04 Aug 2025 05:00:35 +0000
Manifest next update: Tue 05 Aug 2025 05:00:35 +0000
Files and hashes: 1: IqGe2FosDPxPUL6tFvyfbxRlrRE.crl (hash: RgRuTsXQKgfuEzZ6UZg+5YLVPSdvSOiDzdqBTrtdk8w=)
2: NppGj-vB7qPIZEIjN2QiF53Di1w.roa (hash: /HZmGG+wWIrcuKRavKc6Cvy6ql5RNC9frBmMmRXn2ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:73:f4:18:fc:9f:76:7d:21:20:26:05:5c:ea:b8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Validity
Not Before: Aug 4 05:00:35 2025 GMT
Not After : Aug 5 05:00:35 2025 GMT
Subject: CN=46624470129d55b8b70c7b85a0113d4ec7295fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:31:a9:56:4c:ce:2a:a3:a9:85:c1:99:08:79:
0f:d3:5b:ba:0a:c5:f0:33:b8:dc:b1:e7:84:69:24:
be:c1:03:3d:0e:6f:d1:cd:d6:0c:84:77:2c:f9:7e:
c1:b7:0e:0f:cc:ea:72:13:ea:c4:9f:86:3b:e8:2d:
05:c7:13:97:b0:6d:35:86:a5:46:f1:71:c9:ad:9d:
71:3c:57:95:16:bc:5a:52:de:9d:20:dd:d7:5f:02:
ed:bc:c0:f8:32:1d:c6:73:e0:8a:6d:23:e0:b2:08:
38:85:bf:82:b3:f9:f3:73:d1:b1:76:d7:c5:f5:fd:
7a:2e:06:90:7c:41:bc:09:71:50:d1:c7:f0:89:1b:
77:2e:08:fb:20:36:dc:ce:99:1c:4b:b8:9c:e7:cc:
25:16:f6:d3:11:8c:98:e9:6a:3a:53:d9:f5:5f:04:
30:8c:91:05:a4:db:e0:21:35:8c:41:b9:5f:89:6d:
33:b3:a6:3c:b7:75:1d:e9:f6:36:99:8e:68:e1:45:
43:1d:d0:1b:6c:98:c7:00:e4:ae:d3:35:b7:9e:ba:
96:a5:b6:0f:38:77:ef:8f:72:73:bb:47:32:e5:9b:
2f:ce:39:42:f7:46:92:52:72:6f:90:28:82:dc:89:
28:e2:5a:cc:13:1e:4c:3a:2c:02:36:3d:c0:f1:7c:
b8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:62:44:70:12:9D:55:B8:B7:0C:7B:85:A0:11:3D:4E:C7:29:5F:D7
X509v3 Authority Key Identifier:
keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8d:fd:d5:1a:13:28:a5:de:0d:5f:27:52:1e:ec:9f:ff:ed:
a0:5f:2f:0c:49:5c:3a:a2:0a:fd:a0:a6:83:0a:c6:c0:61:3a:
74:79:3f:9e:05:ab:6c:4b:ba:12:25:32:43:8c:72:08:45:38:
b1:e1:35:d7:d3:36:64:ed:fd:25:98:ab:1d:69:33:1d:28:cf:
8f:ae:c9:9a:9e:b9:db:d1:41:9e:1d:97:ac:7c:60:ae:f0:1c:
ee:81:96:81:75:68:10:03:24:49:8d:ca:23:43:a9:3a:09:5a:
02:d9:f9:3a:73:60:1f:e3:15:d6:d7:62:b4:77:56:bb:b1:51:
d4:64:fc:e1:ec:bb:67:b1:5b:3c:39:a4:84:b9:e6:73:07:07:
5f:3b:fe:a7:37:c9:9d:6e:5d:d8:6a:1d:88:11:f7:d7:6b:03:
02:ef:5b:5b:9e:8a:8c:a0:b7:db:4b:1a:c4:cc:92:07:51:50:
78:af:b5:ea:30:1b:ea:f9:f6:72:b2:68:25:b6:eb:2f:a6:a2:
92:b1:a6:fa:bf:79:87:74:e3:8f:28:77:97:72:16:9b:d3:76:
7c:7b:2f:47:be:67:35:2f:76:1f:1f:62:42:08:ec:b8:cb:72:
8e:07:bd:d5:c5:d6:ad:3a:ca:12:3a:e2:53:ce:e1:38:bc:be:
36:25:f7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:33 2025 by rpki-client