
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
File: IeQhptlumdY_fPtJnKcRfIIwTqo.mft (raw, json)
Hash identifier: Bu2YkJ/QRNgtT5VXD9OwvSwjjXs6R7eFiqI6mkP+s84=
Subject key identifier: 32:EA:19:49:3F:11:71:5A:CC:7C:5C:5C:C5:80:EB:B5:D0:61:BD:B1
Authority key identifier: 21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA
Certificate issuer: /CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa
Certificate serial: 019873746838791A034C37E8C653126052E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 05:01:05 +0000
Manifest this update: Mon 04 Aug 2025 05:01:05 +0000
Manifest next update: Tue 05 Aug 2025 05:01:05 +0000
Files and hashes: 1: 1-6OkkXT7C4FLfpQRzLeEPIkuUNA.roa (hash: D8MJaVpCwQ0fVODdot0Xw5y5hbPJWv55WnQMX0Z/dxE=)
2: IeQhptlumdY_fPtJnKcRfIIwTqo.crl (hash: 3k2p6MOxE3+cMaW4L0JuAOdjX5mfpLzYtNtC6hCQnzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:68:38:79:1a:03:4c:37:e8:c6:53:12:60:52:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa
Validity
Not Before: Aug 4 05:01:05 2025 GMT
Not After : Aug 5 05:01:05 2025 GMT
Subject: CN=32ea19493f11715acc7c5c5cc580ebb5d061bdb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:8d:d8:b3:86:36:fa:41:a4:85:6f:f2:8a:
60:92:51:2e:bb:8f:07:69:24:4d:e2:f9:59:6b:28:
e6:99:a8:60:94:a8:3b:e4:59:7b:65:17:b2:f1:e9:
3d:6f:40:f8:d5:db:84:1e:89:99:ed:1c:4f:1d:b2:
04:13:79:c0:6f:7a:a1:b0:e2:ab:ee:fd:e6:75:e5:
68:c8:04:2f:17:65:58:2a:c4:ec:22:4a:45:fc:9d:
7a:99:06:3b:58:b4:0f:a1:a6:fc:41:e1:78:f6:6b:
16:cc:88:07:b1:bb:61:23:1d:bb:e6:64:8d:50:0f:
17:6b:21:fe:d3:51:7d:9b:45:ca:ec:9f:a4:bf:cc:
e2:52:70:b6:b2:2a:8c:2c:78:c8:eb:9f:f1:a1:53:
20:6a:21:c1:96:05:b2:0a:b9:a3:1d:cd:70:36:11:
24:e2:79:56:83:ea:e3:99:4b:98:17:f3:e0:f2:05:
a1:ac:78:ee:e3:19:99:22:0f:6a:11:30:aa:2e:da:
ac:07:2e:58:2d:1c:6c:c2:41:7c:3f:7a:0d:3f:01:
6c:5b:1b:c6:c7:f3:22:8c:7a:76:b4:fd:d3:3a:20:
2f:63:e1:31:e1:6c:0b:a4:d2:b1:d4:9f:5c:3f:60:
1f:6e:88:a2:3d:c0:e7:23:f2:6a:73:65:94:a9:5e:
f7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EA:19:49:3F:11:71:5A:CC:7C:5C:5C:C5:80:EB:B5:D0:61:BD:B1
X509v3 Authority Key Identifier:
keyid:21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:44:5a:73:ae:4b:2e:f0:a1:21:07:a1:74:c8:33:33:65:cf:
a6:cc:a2:d0:5b:5f:e3:c6:63:65:c7:f9:81:3d:8b:00:35:13:
46:6b:cf:78:73:0c:c0:29:a3:44:b9:e0:3a:69:99:8f:0a:a1:
0c:ff:c1:d1:8a:02:8c:2f:ab:5c:8f:2d:b4:48:4e:87:6d:5b:
4b:6f:6c:c1:05:75:e5:69:c8:38:30:8d:ed:d0:a6:a5:b6:81:
f5:04:14:1e:f8:ca:a6:23:a1:29:17:5f:ad:1f:9f:ce:8f:25:
99:48:f7:20:ad:6b:73:b6:38:6d:54:90:e4:09:d4:fc:65:f9:
ec:a0:75:56:18:39:f8:d1:d9:6a:e5:b3:ed:a3:91:c0:22:1c:
60:e8:a3:2e:17:76:77:9f:fe:24:be:86:a9:eb:ed:83:98:fc:
f4:f5:18:b3:f6:a4:61:58:27:fe:9a:ea:47:2b:50:67:38:41:
4a:43:84:cf:14:24:2e:43:82:fc:21:30:29:2c:e1:61:90:1e:
ec:79:f5:c5:e2:8e:d9:dd:ec:ce:32:74:1b:66:b6:1e:fb:fe:
c6:35:06:ae:3c:16:ce:7d:cb:d1:d5:a6:2b:6a:b6:44:d7:70:
1d:1d:2c:8a:ec:64:07:ce:91:cf:48:2b:94:bb:aa:15:08:46:
5c:79:f7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:22 2025 by rpki-client