
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
File: IE19hlKpn8F__y197MSeVWqg64A.mft (raw, json)
Hash identifier: ID+g7V+q3EYrjqZrt+hBx0Neswg+gn9etu+h/12Ei9A=
Subject key identifier: 34:48:87:9C:B6:46:FD:94:0B:F4:20:A4:98:DE:C7:1C:5F:FA:39:A0
Authority key identifier: 20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80
Certificate issuer: /CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80
Certificate serial: 01988AA10A3DE5F08EB256BEEAC0DD9CCCAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
Manifest number: 0327
Signing time: Fri 08 Aug 2025 17:01:06 +0000
Manifest this update: Fri 08 Aug 2025 17:01:06 +0000
Manifest next update: Sat 09 Aug 2025 17:01:06 +0000
Files and hashes: 1: IE19hlKpn8F__y197MSeVWqg64A.crl (hash: dCZ/T217GiDehtvUpYHitMyB1U5A8iUS++qfHLhS4TI=)
2: qVpN4Y8KxLODwpDOgLN11KilqHg.roa (hash: 09hTebOsoFtxumaEhzqwE7uj7IeLGjUIKeNrykM3gp8=)
3: tdhuYGIdy-7BcAqbVeS6RaDWjiM.roa (hash: Sh6aeKnHHbg/58/2+xd9mufW5cUQ13QaLyf7FAUXcc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a1:0a:3d:e5:f0:8e:b2:56:be:ea:c0:dd:9c:cc:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80
Validity
Not Before: Aug 8 17:01:06 2025 GMT
Not After : Aug 9 17:01:06 2025 GMT
Subject: CN=3448879cb646fd940bf420a498dec71c5ffa39a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fe:a1:ba:ef:a6:2c:5e:81:21:5e:21:3b:88:
27:29:22:92:c9:e3:46:7d:8a:9e:41:3c:a8:e6:c7:
e7:89:62:eb:39:d8:b3:3b:53:00:30:bc:c0:09:a4:
6d:2d:d4:a9:d7:72:8f:c5:23:4d:fd:3c:76:75:7e:
9c:b9:17:b1:94:29:f5:d5:a3:ce:bd:20:15:fe:df:
54:b3:ce:32:05:18:d0:de:59:5d:0f:a0:3e:dd:46:
00:45:96:64:90:79:02:31:34:97:6e:dc:cb:11:32:
28:a8:84:ce:70:5d:20:93:1d:ec:a2:c9:df:9f:70:
1b:23:df:40:ce:94:6e:43:e0:65:32:64:31:90:2c:
4f:5e:b5:66:3c:3f:ef:1f:78:2c:fe:a3:0a:64:a0:
c1:ca:a0:bb:3d:74:7e:44:03:24:57:cc:07:6e:a6:
ad:54:b6:11:aa:96:5d:71:31:26:a3:00:87:55:9f:
5e:9b:4d:7e:5a:f3:f5:12:24:fc:b3:92:8d:f3:dc:
df:dc:ea:3c:88:75:11:de:18:62:9f:72:ad:6b:4c:
12:aa:78:a5:a8:13:4d:88:a2:4f:8d:77:44:f6:da:
4e:29:3d:58:1b:32:81:5f:da:e0:0b:60:45:c4:cc:
ed:99:c6:ca:56:3a:dd:73:8e:37:9f:ea:e9:87:bf:
b0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:48:87:9C:B6:46:FD:94:0B:F4:20:A4:98:DE:C7:1C:5F:FA:39:A0
X509v3 Authority Key Identifier:
keyid:20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:e1:3f:2c:23:80:19:4f:ef:89:e6:8c:e6:76:3c:1a:db:40:
1e:91:da:35:c6:59:0a:bd:12:fa:47:bf:4c:12:0a:9c:a9:bf:
6e:98:74:17:3a:9f:51:d1:ad:77:03:cb:3f:34:3c:7a:0a:9c:
75:ba:25:4d:66:16:84:14:5a:7e:8d:44:de:19:29:a4:7f:e9:
7e:ac:61:94:ab:74:26:05:af:65:37:27:69:8f:0f:6d:0b:cd:
0d:18:e3:0f:91:e5:73:a6:ad:00:4a:8d:80:58:14:f5:2c:aa:
c6:6f:13:3a:28:a3:87:31:fb:82:97:4a:77:6f:41:9b:3d:52:
cc:c7:16:f2:5c:95:39:4b:a1:62:6c:8a:9a:e3:0c:7a:53:92:
80:3e:c5:4d:c5:81:7d:74:1d:1e:32:e5:67:c0:72:2b:eb:01:
7d:97:5d:3c:20:08:a5:2b:7e:2f:e8:ba:53:94:27:1c:2c:ef:
b2:9c:8b:41:df:a0:85:fd:58:71:2d:db:53:b9:56:e7:a2:fa:
de:28:5b:ba:27:c9:96:01:e7:c6:1f:db:9f:84:b5:5f:00:41:
f3:be:86:de:26:09:cf:e0:5d:98:34:7a:09:d9:af:70:4b:31:
cb:9e:0a:53:96:c9:4c:ba:78:f4:5a:c8:6a:f7:db:fa:02:cf:
59:13:f0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:57:39 2025 by rpki-client