Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
File: IacXNhMJ0pOTUcnYuiFz24MZqI8.mft (raw, json)
Hash identifier: MPD/+f7j3FuOH0izUZc94OL5n3RavFrsAC/9D1HARQE=
Subject key identifier: 5D:63:4F:46:F2:CE:EC:5F:CF:32:6B:35:4E:1D:9A:53:38:D5:4A:DA
Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f
Certificate serial: 0198955B493FCE1B931E4F94AD3F171442E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
Manifest number: 0E45
Signing time: Sun 10 Aug 2025 19:00:44 +0000
Manifest this update: Sun 10 Aug 2025 19:00:44 +0000
Manifest next update: Mon 11 Aug 2025 19:00:44 +0000
Files and hashes: 1: IacXNhMJ0pOTUcnYuiFz24MZqI8.crl (hash: DpusfcC/6YfY80AlxK4EOgis6O4CU376J8JsxHyKM1E=)
2: PeD0qOPxUYxeVA81pP9--xNVIzU.roa (hash: fJvgODfg2m2y6FUhDf+GL6D88mfLwM4rg59sQSq2L84=)
3: qwmmpmJft8mwuiEXYTlzhJQuep0.roa (hash: Q0Z/E8v8Q7W2fm0rXhwdPc4pFVbeDlufQTIsqxx5ZeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:5b:49:3f:ce:1b:93:1e:4f:94:ad:3f:17:14:42:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f
Validity
Not Before: Aug 10 19:00:44 2025 GMT
Not After : Aug 11 19:00:44 2025 GMT
Subject: CN=5d634f46f2ceec5fcf326b354e1d9a5338d54ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0d:5c:af:47:82:8f:f7:82:fc:8f:e9:34:32:
d9:ab:86:fd:df:a7:a4:1b:d2:33:e5:f1:00:fd:8f:
7f:71:74:89:3f:1a:0f:96:d2:2f:eb:ae:04:47:b6:
54:4b:46:cb:4c:51:b6:83:e7:7e:2e:7c:7f:0c:95:
ef:92:a3:c4:d7:4f:43:d0:79:97:6d:c5:b7:02:04:
fe:d5:e1:57:7b:07:e9:e1:81:cb:be:b3:85:f8:74:
2c:84:bd:e9:27:e3:96:04:b7:c6:df:08:7d:44:e9:
be:b7:fe:5a:4a:65:0b:4c:e5:ae:46:25:02:34:62:
c3:25:c8:56:2b:57:36:3a:d3:5a:c7:a6:1d:fb:c8:
8c:74:47:9f:45:51:28:19:7e:10:8f:d2:59:56:da:
3b:97:02:db:1e:1e:0c:d5:68:fe:64:d9:df:14:07:
7d:d1:2c:39:52:90:fb:44:1c:48:15:1a:a5:ea:f0:
ec:df:81:0d:60:41:ed:48:f9:99:ca:da:cd:85:b4:
55:8f:4a:23:8e:83:65:3c:98:6a:23:ca:72:a7:9c:
51:1d:b5:48:00:92:1f:c5:f7:c8:74:02:48:0e:58:
35:4e:38:5f:f0:2b:1a:99:49:dc:0b:d2:0d:32:b7:
f8:2e:de:9d:f7:24:82:d6:c7:c2:d7:0e:03:66:5e:
55:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:63:4F:46:F2:CE:EC:5F:CF:32:6B:35:4E:1D:9A:53:38:D5:4A:DA
X509v3 Authority Key Identifier:
keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f6:18:ef:70:d9:ec:34:6a:5e:c2:be:1a:47:1f:54:fc:1d:
60:0a:17:1e:a4:93:04:e4:09:59:c5:02:f2:4c:24:bc:f1:f5:
6a:49:51:b6:ff:db:ca:40:40:9d:c6:15:00:d6:e1:fd:92:d0:
c5:48:75:a2:18:44:ea:65:cc:8e:ce:6e:f5:d3:97:1a:56:ed:
f5:8d:a7:ea:b2:aa:9f:d4:6c:3c:96:31:19:de:f2:c9:4f:c0:
0f:01:82:27:85:69:89:91:09:48:be:0e:e6:58:b3:c0:a0:2e:
0f:5c:23:3c:e2:c4:b7:2a:86:4a:ad:67:cc:44:40:08:bd:05:
f3:23:f9:1c:5a:2b:39:52:c0:94:a3:c5:03:4d:a6:8a:a0:27:
cd:bb:a8:e3:68:9f:0a:6d:09:00:3c:09:69:c1:cb:e4:8b:52:
7e:80:fb:63:58:09:19:3b:76:8f:73:5a:30:73:96:91:98:79:
ac:39:22:c6:93:c2:a5:bd:5c:13:94:74:0f:0f:9b:fd:98:2a:
af:64:80:89:c6:04:1e:b6:14:c8:8e:eb:8b:bd:80:c1:78:f9:
da:be:25:f2:dc:c7:26:31:b2:28:5c:07:67:96:d0:78:77:69:
e7:ce:b3:c3:b7:96:c1:7f:c1:51:ac:e6:b8:0d:22:31:27:a1:
63:33:0f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:54:42 2025 by rpki-client