Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
File: IO7gXaGD3uK4EYFBlWRiySQNeHY.mft (raw, json)
Hash identifier: aL8lJ8I72GA/EoQF7cskKbk5DdFi0kN0WLdIsMy6lsw=
Subject key identifier: 3C:FB:0E:4A:E3:48:DD:AE:B6:7E:A3:EE:2B:65:9E:2F:F7:6C:7B:03
Authority key identifier: 20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76
Certificate issuer: /CN=20eee05da183dee2b8118141956462c9240d7876
Certificate serial: 0198744FD9136862F7358826A900D9FF220C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
Manifest number: 1422
Signing time: Mon 04 Aug 2025 09:00:46 +0000
Manifest this update: Mon 04 Aug 2025 09:00:46 +0000
Manifest next update: Tue 05 Aug 2025 09:00:46 +0000
Files and hashes: 1: IO7gXaGD3uK4EYFBlWRiySQNeHY.crl (hash: YHIobtqJg4piOgp2G9Cf/RGh5NfKD9G5o5LnT1wButE=)
2: UOhBO5tiijOD2pDmpEzGmcmWS0c.roa (hash: xgr3YICoBLMfkC1gTEslMu1vKZNde/9vfYQRW1pAxzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:d9:13:68:62:f7:35:88:26:a9:00:d9:ff:22:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20eee05da183dee2b8118141956462c9240d7876
Validity
Not Before: Aug 4 09:00:46 2025 GMT
Not After : Aug 5 09:00:46 2025 GMT
Subject: CN=3cfb0e4ae348ddaeb67ea3ee2b659e2ff76c7b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:27:0d:0a:8d:ba:81:f1:c2:57:5a:ab:77:
05:27:e3:9b:23:44:56:b0:05:a0:d6:00:a3:f7:fa:
c1:06:d8:24:0e:f3:81:40:8e:17:f3:05:fb:18:30:
23:bd:24:91:0d:36:9a:7e:58:42:93:68:c3:df:38:
d1:34:8b:32:ed:8c:c5:a6:5b:49:06:24:b4:37:1f:
75:07:c0:d9:1c:fa:78:4a:97:e0:80:c7:3b:95:6a:
ac:a8:2a:cd:7f:77:1a:3f:0f:4e:07:27:3a:d3:24:
df:76:cc:d9:95:c0:86:c7:27:57:20:73:62:3c:ac:
63:bb:49:9b:42:ec:28:29:6f:0c:7a:1e:a4:ca:7d:
3f:26:89:f5:48:ca:1c:9d:e8:ef:a4:70:f9:c3:7e:
de:c8:11:be:6a:51:e7:98:03:fa:b9:77:52:84:e1:
97:24:68:3d:26:10:fa:cd:81:b5:cf:05:78:d6:46:
4f:21:4f:2a:11:e2:b5:86:d7:2f:0c:3b:34:31:f5:
88:a4:a0:47:4e:b0:ee:67:7b:e7:21:b0:fd:a6:82:
2f:35:f7:8e:22:21:1f:19:7e:dc:23:47:b0:5f:b1:
b0:99:73:25:c7:0e:1e:9a:9c:6d:67:99:03:ad:5c:
02:68:fe:c9:dc:3d:f1:61:14:45:07:03:21:13:09:
9f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FB:0E:4A:E3:48:DD:AE:B6:7E:A3:EE:2B:65:9E:2F:F7:6C:7B:03
X509v3 Authority Key Identifier:
keyid:20:EE:E0:5D:A1:83:DE:E2:B8:11:81:41:95:64:62:C9:24:0D:78:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IO7gXaGD3uK4EYFBlWRiySQNeHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cfc0d1-d095-4b1b-9b5d-3985299fad6d/1/IO7gXaGD3uK4EYFBlWRiySQNeHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:d0:3b:8d:6f:8b:06:81:99:f2:fc:1b:66:6e:68:33:30:04:
45:9a:bd:6b:45:20:3c:4d:51:8d:d1:3b:55:05:eb:d8:e1:f6:
e3:3c:8b:2e:45:82:fa:57:f9:44:e5:17:e7:28:6e:de:4b:b4:
d8:30:0c:5e:03:dc:41:71:53:4f:7d:f4:54:90:3f:9f:04:14:
54:7c:27:aa:11:5d:33:b2:85:ed:ef:fd:0d:5b:0f:56:7a:a5:
07:5a:25:83:2a:2a:4d:c4:f7:c8:5e:43:16:a9:14:ec:8d:bc:
01:55:a1:42:2d:2f:94:5d:04:ec:75:3f:b8:47:7f:cb:6c:86:
83:03:9d:e0:6c:f0:59:0f:19:f9:d8:bb:37:36:65:43:15:5c:
02:6c:53:2e:a7:48:9a:95:1d:80:24:76:e7:b0:42:f9:36:27:
44:1e:81:9e:ab:79:22:24:2e:44:9b:5e:14:a8:ef:97:3f:b3:
f7:0c:5f:ef:d7:5a:7b:9b:ed:88:7a:c4:18:07:c8:1b:f5:05:
da:49:e3:eb:92:34:d7:74:14:b2:ab:ad:02:4f:ec:d8:86:cd:
f3:13:b1:47:25:43:82:a9:11:e1:f2:36:3c:59:d0:05:56:e6:
15:cb:63:6a:99:ef:fe:f9:e1:8a:c9:fb:56:56:b8:ff:8b:c7:
82:f2:32:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:22 2025 by rpki-client