Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
File: IWmMHNxm3ChdD4B2KcRiYaiLLec.mft (raw, json)
Hash identifier: 7CC0uy4/+GaZaWMT9sVYhYCZXn7nt+VtkaXp+/ilSRo=
Subject key identifier: 3B:9B:ED:41:DD:9F:19:DC:F4:81:32:63:CF:11:BC:05:26:D0:16:26
Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
Certificate issuer: /CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Certificate serial: 01987D1C389741FF6125DF2172EAC711A3C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 02:00:58 +0000
Manifest this update: Wed 06 Aug 2025 02:00:58 +0000
Manifest next update: Thu 07 Aug 2025 02:00:58 +0000
Files and hashes: 1: CMn2soeES3hR-sK_8HvrSujpCpQ.roa (hash: VTuRr4KfXEripqS9AelciewMmdMPiSyij0Vs8ogbZ90=)
2: IWmMHNxm3ChdD4B2KcRiYaiLLec.crl (hash: 5MEQc9j7MdEF0WTXnKy3PLnXmhhd4Nl1KZpA4bdO/2Q=)
3: Yn3cTmXIbvNO5rDZUMkU20vEcu4.roa (hash: iGrYsnlws/ojR0+NVYUlir1CfMVL/ZNyCA/PzakH0rc=)
4: Z_2-Zbi4vsdnVpg2d_lnWwbhvN4.roa (hash: 8GDUJ7ZhRwTXBlYLdtF6LAMc571ge2c8D8UbSUf3lg0=)
5: gKn9w2HjuJeDuvDGB4i7KMCUEOw.roa (hash: 9RL0o8ItMk9D70n/zJYOrxlmErXzvmrmjIlOb2QhCXA=)
6: vobE3yEGfIGL1cB1AJTldnCRmXE.roa (hash: wMXrPRBz6jhuzSeDkQhA2W+belZhJmWY3V+ZCFJ8/9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:38:97:41:ff:61:25:df:21:72:ea:c7:11:a3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Validity
Not Before: Aug 6 02:00:58 2025 GMT
Not After : Aug 7 02:00:58 2025 GMT
Subject: CN=3b9bed41dd9f19dcf4813263cf11bc0526d01626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:97:f7:cd:38:94:02:42:a4:a1:17:0a:12:07:
bb:cf:bf:dc:f5:f3:40:61:d7:09:e4:e7:4d:dd:39:
1f:fe:98:e4:d6:e1:b1:8c:0e:ef:61:77:af:09:78:
fd:25:9a:34:73:14:39:77:4f:25:0e:4b:eb:5c:c5:
98:29:5a:33:2e:c8:45:07:bf:c6:01:9f:60:48:27:
c0:75:11:c0:bf:d0:b6:7b:1e:c1:87:54:51:6e:d6:
83:d4:ed:f5:5c:9c:c1:dc:1c:8e:73:41:40:e5:54:
e3:f3:0a:d3:3c:aa:11:36:9f:9b:52:41:82:40:46:
14:2d:34:c6:90:68:e6:87:50:8b:f6:8a:71:ce:20:
eb:e3:b0:8d:d2:0d:8c:85:b7:e9:03:be:ee:11:23:
b4:cd:5e:5c:c9:3b:d6:c6:3e:04:4d:04:4d:78:ec:
68:b4:f5:c8:81:eb:3a:90:2c:06:68:16:39:39:ff:
fd:51:ef:37:91:d6:d7:7b:ed:23:06:c7:d1:f3:32:
19:ac:0c:d8:77:43:3b:ab:18:a5:ad:5f:2c:da:c7:
68:5f:b1:ce:42:24:31:ca:bc:d5:37:8f:51:e8:22:
08:67:5b:1e:cf:6e:b4:72:70:cf:38:19:2b:5c:59:
7b:04:df:0f:a2:cd:a6:ad:ed:32:b9:66:9f:ef:d7:
31:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9B:ED:41:DD:9F:19:DC:F4:81:32:63:CF:11:BC:05:26:D0:16:26
X509v3 Authority Key Identifier:
keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:02:0c:0d:8e:04:c5:ba:66:c2:f1:08:44:49:e1:3f:8e:d4:
55:3e:d5:74:f1:df:1c:bf:34:4b:03:90:c4:16:40:16:3d:6c:
61:24:20:a3:91:d5:3a:2a:54:1e:4a:c8:f7:d7:cd:b4:12:af:
9e:7a:23:f1:ba:07:ed:ed:a5:e4:e7:6b:c4:f7:94:01:1e:93:
40:17:6d:74:33:c9:b8:38:62:d7:a2:fd:4d:f7:d9:83:3f:ab:
43:86:28:56:8e:89:76:53:1e:3d:c3:98:72:40:c0:13:dd:02:
89:c8:c3:d2:dc:4f:4b:53:99:6e:2d:be:5e:b8:cd:83:73:ae:
cb:9a:37:63:be:3d:cc:ea:74:e1:33:e6:34:94:15:ba:12:55:
69:84:9e:1b:53:ef:9f:17:7c:a3:e2:11:7c:f3:e9:62:23:54:
21:3f:98:c7:47:40:a0:a9:6a:70:c0:6d:18:fa:df:13:a8:a3:
5f:a7:d3:1d:9a:c6:99:de:28:0c:42:aa:ee:49:e8:26:71:ed:
01:78:a2:a0:80:98:43:73:e0:62:2c:69:51:96:2d:da:d8:9f:
fe:89:c5:79:6a:eb:cc:62:46:61:5f:46:5e:7b:19:83:38:a5:
5d:0b:16:5a:05:f9:53:f4:d4:b2:4d:d0:66:92:29:d7:83:7a:
51:97:e6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:13:57 2025 by rpki-client