Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
File: 1IVR4mFps7PhJPaWTicC6VdoJT4.mft (raw, json)
Hash identifier: j6TxNolPGZYEiYkuRv1vawBMCgZ5+WWS0RtfewG6ukk=
Subject key identifier: 82:67:D9:7E:02:96:7A:04:89:99:7F:DE:6D:09:CD:AB:B3:60:F5:97
Authority key identifier: D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
Certificate issuer: /CN=d48551e26169b3b3e124f6964e2702e95768253e
Certificate serial: 019881677BABDFB705DA3AE5FA78D64AE8F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
Manifest number: 0639
Signing time: Wed 06 Aug 2025 22:01:39 +0000
Manifest this update: Wed 06 Aug 2025 22:01:39 +0000
Manifest next update: Thu 07 Aug 2025 22:01:39 +0000
Files and hashes: 1: 1IVR4mFps7PhJPaWTicC6VdoJT4.crl (hash: xinyqT2FQCKaQes6BIBIM2vbz7SQXuJTGvEkxj4i9GE=)
2: 1egEAWTQi1OcNU0W_rjr_CRLdbs.roa (hash: LHe616pBcv+bCNyg1cs6z4IxwstMXXlrnpuBdg2aZbs=)
3: 3ojh0vwmWGR8R130UvEk1Ukeno0.roa (hash: /WfyicFmwcjSGtw05lqyqsVoIK9F8QUQc2+NhhBmMwI=)
4: dwkbDumHfM-fJPhQnf3bRCy2PjY.roa (hash: aIk07HBkaBzs1F02NTAQLrtiIZZaDl8SPQXuogtqsw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:7b:ab:df:b7:05:da:3a:e5:fa:78:d6:4a:e8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48551e26169b3b3e124f6964e2702e95768253e
Validity
Not Before: Aug 6 22:01:39 2025 GMT
Not After : Aug 7 22:01:39 2025 GMT
Subject: CN=8267d97e02967a0489997fde6d09cdabb360f597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:45:c0:1b:1d:99:d8:29:3d:6f:0c:2f:3e:e2:
e3:ae:29:30:7b:9f:1d:52:9e:ab:3d:ca:87:70:b7:
1c:ec:60:d8:ad:c9:73:9e:31:27:09:3a:f8:bf:13:
d8:b0:9e:b5:40:3c:dc:39:4d:cd:4d:a0:d5:60:e2:
45:d5:1c:e1:1f:63:38:8e:94:cf:37:a8:c2:60:72:
ac:be:33:8e:d5:29:48:5b:82:06:45:a4:0f:0a:43:
fe:16:ed:d8:65:ce:a5:f1:7a:cb:d7:cc:ef:9a:32:
c2:2d:f4:c2:21:f8:ae:48:67:f9:ca:9e:8a:9f:7a:
a7:6a:f7:cc:8d:c0:15:37:7d:0f:d1:57:d0:9e:ff:
2f:59:80:92:52:e8:e8:97:1d:e4:8b:34:12:ec:06:
0c:62:ce:86:87:dd:0d:2d:30:e5:5e:7d:d9:93:da:
56:76:5c:f6:59:32:f3:29:4e:be:40:2f:df:e0:7a:
7a:3b:66:d1:26:18:e0:b4:35:2a:4d:e4:cb:b7:6f:
e8:20:8c:9f:94:86:93:48:7c:a1:b1:8b:b9:b4:e5:
e8:c1:24:a3:b6:17:d6:f2:80:14:6d:ca:a3:cc:0c:
db:7b:89:e5:24:07:93:28:40:51:fc:ec:1f:60:f9:
f1:f6:5c:da:fc:12:ca:28:80:5a:a9:d0:51:89:87:
b8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:67:D9:7E:02:96:7A:04:89:99:7F:DE:6D:09:CD:AB:B3:60:F5:97
X509v3 Authority Key Identifier:
keyid:D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c4:37:a2:3d:7b:af:26:a0:5e:28:23:42:ea:30:1f:a3:c8:
c7:46:7c:3f:46:5b:68:85:a6:c3:13:92:02:56:84:e2:26:76:
0f:f6:31:d9:18:83:e1:20:28:94:d5:bc:6a:dd:dc:4f:c9:93:
ac:14:cb:a6:d0:30:76:63:f6:79:51:3b:25:8a:fc:22:53:79:
f9:13:40:33:f0:e9:97:4c:e5:68:5f:a0:26:e5:01:59:d8:20:
47:c9:9b:73:8b:02:d2:5f:cc:03:56:a1:e2:16:a5:5a:d2:fb:
8b:e2:be:c8:b9:13:5b:2b:4a:99:44:6d:98:8a:e3:b9:ae:28:
c1:89:f5:f4:ae:ab:40:dc:c6:e5:1d:99:8d:76:5f:ff:31:35:
42:17:85:bb:cf:bd:43:0f:2b:25:e0:ac:3c:57:a4:53:f0:8c:
c0:c2:ef:58:3b:b0:9e:ff:db:2d:7b:f4:dc:ba:23:48:b7:98:
20:eb:cb:c7:25:aa:aa:48:42:46:8e:42:7b:5c:f0:97:e0:d4:
49:d6:33:d1:fc:8f:db:5d:ef:46:ed:ce:06:13:a8:59:dd:b6:
6e:fc:d6:62:cd:ce:29:8b:b0:12:81:2d:4c:14:47:ad:4e:dc:
3e:25:8b:57:06:13:5a:6d:5b:c4:29:75:3c:91:b2:a7:7a:4a:
5b:c1:df:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:55:28 2025 by rpki-client