Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
File: IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft (raw, json)
Hash identifier: rk7mnZFDN9PlxKKFO+9Qd7hhwYX7aPlmNP1u3w76AIk=
Subject key identifier: 5B:91:14:AD:1F:79:37:78:CE:1A:C3:2E:63:1E:8E:E8:69:2F:BF:00
Authority key identifier: 21:07:73:55:DF:11:CD:BF:99:2F:90:D6:7E:AA:B9:10:9A:B8:EB:F3
Certificate issuer: /CN=21077355df11cdbf992f90d67eaab9109ab8ebf3
Certificate serial: 019880F93D180D7B0035A737B13D5187B54A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
Manifest number: 0E85
Signing time: Wed 06 Aug 2025 20:01:14 +0000
Manifest this update: Wed 06 Aug 2025 20:01:14 +0000
Manifest next update: Thu 07 Aug 2025 20:01:14 +0000
Files and hashes: 1: IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl (hash: vL48jSYJiA9VnVg9DlOJploqaiu3VsPR1vrU2rKRKVE=)
2: OmRgq5feW-kx9jvx4AAFdyevf30.roa (hash: AB8XLVSpCXGmgkqlgUf55sAgLfrFZhXp5WrR9S6Xa20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f9:3d:18:0d:7b:00:35:a7:37:b1:3d:51:87:b5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21077355df11cdbf992f90d67eaab9109ab8ebf3
Validity
Not Before: Aug 6 20:01:14 2025 GMT
Not After : Aug 7 20:01:14 2025 GMT
Subject: CN=5b9114ad1f793778ce1ac32e631e8ee8692fbf00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ba:1c:47:44:62:05:d6:ed:c0:cf:8f:4f:57:
ab:96:c6:fb:21:17:4d:5f:55:f9:c9:fb:de:41:1d:
3a:68:4a:ce:e7:1f:76:cd:d9:35:7e:d1:1c:38:54:
62:38:a4:76:1f:f8:43:40:54:1d:ac:19:db:f2:c1:
7e:a9:d1:33:cd:0d:fa:bf:8e:2e:0a:05:bf:04:2c:
b1:78:59:92:05:bf:23:ab:06:5a:2d:cf:c8:6f:18:
55:66:48:84:46:17:5e:13:90:e1:59:9e:fc:6d:65:
38:d5:52:93:a9:40:f4:96:22:40:da:9d:a1:67:d9:
08:83:26:67:8d:85:50:f4:8d:b9:7f:47:65:d8:9f:
1e:43:e9:9b:19:e9:c4:7a:51:4e:f9:7e:8b:e4:4d:
69:37:9e:10:48:47:34:ab:23:a7:65:32:92:35:e8:
a5:94:73:da:d9:77:42:84:9a:d5:cf:90:36:1e:bc:
cf:30:d1:c7:04:f1:92:01:40:1a:06:5d:f7:83:a8:
c8:52:0c:47:9a:85:97:b6:97:92:53:e0:d2:25:9a:
e9:6d:fd:ce:02:99:22:30:21:b2:c8:8e:6f:0c:61:
7b:a3:4e:41:48:33:0c:55:a9:ea:58:42:25:ce:c8:
73:e1:dd:a0:7e:cf:c2:b4:2e:58:53:f8:f8:d1:d8:
1c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:91:14:AD:1F:79:37:78:CE:1A:C3:2E:63:1E:8E:E8:69:2F:BF:00
X509v3 Authority Key Identifier:
keyid:21:07:73:55:DF:11:CD:BF:99:2F:90:D6:7E:AA:B9:10:9A:B8:EB:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:2b:9b:a5:ea:30:a7:63:8d:14:06:3c:d2:06:e5:b3:7f:47:
c9:4b:39:6d:c8:6c:dc:8e:33:bb:99:04:5f:ef:1c:0c:2a:57:
38:da:08:c5:e8:82:db:60:d5:eb:8c:22:d1:b9:06:dd:e8:55:
0f:f7:b5:52:05:6f:82:25:38:5b:51:e2:89:9c:eb:59:1c:2f:
97:32:b0:d6:ba:40:28:3f:15:a8:22:60:d4:31:47:61:6a:21:
78:cb:0f:82:03:ea:ba:3c:d5:e3:a5:ec:a5:e0:1f:aa:89:a9:
02:95:ed:2b:fc:b0:6c:27:df:75:b4:ae:b3:1d:f3:94:c8:bd:
1a:e7:c8:f0:37:9e:bf:a0:2a:ba:74:6f:8c:bb:f2:9f:23:1d:
9e:71:1b:3c:15:51:23:97:ce:54:9c:bd:1b:64:84:d0:a8:f8:
0c:17:f1:bf:80:da:a1:6c:38:fe:5e:62:84:67:53:c0:7f:d3:
1b:2a:b6:ec:e7:8e:ca:6a:12:19:01:f7:7d:9d:c0:b0:54:9c:
d6:e3:d4:d7:b2:20:18:2a:95:c8:1b:9e:11:bc:4e:f3:cf:3a:
e3:e1:ae:8c:51:b9:02:2c:d3:1d:c9:96:d1:ad:18:c5:52:24:
35:d1:46:8f:ce:1b:67:da:94:b2:9a:46:f4:86:4a:3a:a0:ee:
7b:4e:5c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:59:08 2025 by rpki-client