Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
File: IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft (raw, json)
Hash identifier: jWYV7/hK2uLHXkNBEszfbGUBbWGbB4qOOoLCx08NLO0=
Subject key identifier: D7:CC:12:D0:E7:09:9A:50:36:CB:26:56:80:1A:5F:65:BD:23:80:96
Authority key identifier: 21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
Certificate issuer: /CN=215a409d27b9a69346324004694da11beae02dbb
Certificate serial: 01987487411858D436E45B05E82AA2E1E916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
Manifest number: 0EED
Signing time: Mon 04 Aug 2025 10:01:17 +0000
Manifest this update: Mon 04 Aug 2025 10:01:17 +0000
Manifest next update: Tue 05 Aug 2025 10:01:17 +0000
Files and hashes: 1: 5Nxb95AjDYyihX948d4SpKIggZQ.roa (hash: LXnf6zKJW6C6S9ESb5TMXAjwJki5kjy7RI6/DxC0q14=)
2: IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl (hash: qdUoaMJx/uB5KJeQ04vQ6VKpEPk4GXlpbJ0VJHLUnT4=)
3: g00WlqoayNMboio4aQJxi5oYUAs.roa (hash: Hyc0gnAg44yWXRt2jBl8ZFxFJUhWTRX2EA3Xr0Vxj/g=)
4: lZSfaFLQsnTkwdvn0B3rZGkqRuA.roa (hash: QyBiQ/S33Pxg+43BukzMj/PPueurFOtFulFm03RWAS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:41:18:58:d4:36:e4:5b:05:e8:2a:a2:e1:e9:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215a409d27b9a69346324004694da11beae02dbb
Validity
Not Before: Aug 4 10:01:17 2025 GMT
Not After : Aug 5 10:01:17 2025 GMT
Subject: CN=d7cc12d0e7099a5036cb2656801a5f65bd238096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a8:b1:8c:1c:58:e0:cc:1b:84:84:04:9b:db:
0b:05:8e:41:f2:5e:28:bf:92:87:0c:91:de:90:09:
b1:ed:e7:b0:a1:37:a6:a7:fb:af:79:9e:ae:78:1f:
a8:42:2f:54:8d:53:6b:a1:23:0c:9b:fd:94:5f:bf:
a0:28:33:84:d6:0e:9d:77:e3:43:e3:2d:b9:d8:76:
1d:28:14:03:3c:e6:28:20:0c:ba:41:86:ad:3d:f2:
60:92:63:1f:a6:70:64:3c:bb:df:81:7b:46:06:72:
35:22:bd:1d:fe:af:8c:c9:3e:a2:ca:24:b4:ed:5c:
95:70:b9:90:71:0c:bd:47:25:60:98:82:7c:f8:95:
44:fe:89:14:84:88:37:de:06:6b:5e:8f:48:86:e6:
ff:cc:58:e1:d6:eb:6b:e8:0b:19:98:50:79:03:dc:
48:30:6c:d9:f2:b6:0b:25:79:50:28:aa:d5:2c:e7:
39:89:b5:e6:a6:21:e4:42:6e:86:64:4d:f4:b3:a8:
5f:72:b5:a6:79:29:77:98:76:56:85:5a:9b:72:a9:
0b:d5:7c:8a:77:6b:19:7f:5c:eb:3c:06:b4:da:bb:
33:81:cb:db:96:90:37:8b:85:fd:37:9e:37:4c:e7:
3c:9c:9c:87:21:78:d1:d4:76:7a:8d:c8:4b:dd:7b:
f9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CC:12:D0:E7:09:9A:50:36:CB:26:56:80:1A:5F:65:BD:23:80:96
X509v3 Authority Key Identifier:
keyid:21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:53:77:0a:74:6e:b1:8e:47:13:a0:1d:15:38:a4:63:48:e8:
55:48:8f:51:7d:dc:36:31:25:75:f7:44:37:e5:f7:0f:f6:55:
41:e0:81:51:22:97:de:2b:77:60:33:5e:0c:4c:25:68:d8:1e:
9c:64:f7:36:e6:31:b7:59:97:c3:c1:0e:1d:6c:7a:de:94:a0:
92:9d:25:1a:8b:90:20:ae:48:ca:b2:ac:ea:00:e1:74:eb:97:
8e:66:e4:f6:d3:6f:cd:55:8a:91:2a:30:49:42:a1:14:4c:41:
95:63:e7:ce:c9:7c:8b:4b:ef:29:dc:f0:c9:f7:0b:18:90:5b:
2e:51:69:92:11:3b:67:29:c8:01:ee:74:1e:cd:8c:de:bb:a6:
01:97:fb:21:d0:fa:33:b9:b0:d0:3d:97:a8:71:65:3f:a7:bb:
1d:67:f0:ca:d7:61:c6:a1:19:9f:8d:ad:50:6b:02:f6:7d:a0:
fc:27:cb:32:0a:77:69:36:3c:d6:7f:ee:05:0d:d4:0e:b3:ca:
c0:a9:78:07:28:1c:1b:83:78:be:f6:3a:2b:cb:5a:2a:d7:03:
7e:7b:37:2c:55:a1:a0:e6:70:b3:e9:ee:e7:53:9a:c5:cf:63:
37:a7:09:44:e0:08:5a:86:53:d9:26:47:9f:22:e5:4a:51:44:
9f:51:98:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:13:36 2025 by rpki-client