Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
File: Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft (raw, json)
Hash identifier: oYSjaOlVoIjQWmLQMFLyVtLkGq/8FgCOzQzjOuW5dug=
Subject key identifier: 11:2E:41:A0:1A:32:D9:C7:8F:19:CC:F5:F2:F5:46:8A:B9:BA:31:00
Authority key identifier: 23:2B:BC:6F:51:CC:E0:1A:EA:AC:BA:80:F2:D0:D2:64:12:E4:7F:93
Certificate issuer: /CN=232bbc6f51cce01aeaacba80f2d0d26412e47f93
Certificate serial: 01988844CD9EB3567FE54713444E46F5798A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
Manifest number: 0A2F
Signing time: Fri 08 Aug 2025 06:01:06 +0000
Manifest this update: Fri 08 Aug 2025 06:01:06 +0000
Manifest next update: Sat 09 Aug 2025 06:01:06 +0000
Files and hashes: 1: Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl (hash: Xgj1xXhA3Lz+6tVCiT2isjf+cuVcQ+k1jkvc4HK3qEE=)
2: W7lSiLgEWw1PU3RjMuVHViCtMd4.roa (hash: Z1eudaBmI9GAn6czSjHaqw3jDN0IX6tghnkKM1CKFjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:44:cd:9e:b3:56:7f:e5:47:13:44:4e:46:f5:79:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232bbc6f51cce01aeaacba80f2d0d26412e47f93
Validity
Not Before: Aug 8 06:01:06 2025 GMT
Not After : Aug 9 06:01:06 2025 GMT
Subject: CN=112e41a01a32d9c78f19ccf5f2f5468ab9ba3100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:04:02:37:0f:e0:4b:ea:ad:e4:92:79:a3:27:
26:cb:f7:fc:10:fc:04:15:84:f4:76:a6:0c:76:75:
d1:74:d1:66:c0:76:a5:d3:35:5c:b8:b7:05:62:3d:
cb:0d:7c:da:b2:b3:c0:31:ae:fd:da:91:c0:47:fe:
05:b6:a7:80:52:45:9f:da:f2:59:13:9f:d9:f0:50:
17:f8:d3:29:0e:08:40:7d:f1:d0:00:c8:ce:8c:ed:
32:91:13:a4:49:61:b7:4e:1b:2d:5c:17:af:3e:ee:
e3:e0:5c:be:9e:34:c7:fa:fa:38:1f:9f:e4:1d:26:
99:32:62:f0:3b:4e:63:f7:88:ae:b3:ad:9c:80:62:
30:d0:da:ff:3a:b9:bc:54:6b:70:05:64:1f:55:98:
12:b8:a3:04:41:46:ea:98:7d:3a:c5:f6:d0:3b:88:
87:67:40:6f:2b:b1:5b:47:0d:fc:5c:f2:20:83:6e:
40:43:ee:7b:d9:4e:92:7c:35:45:c7:89:eb:8c:5f:
5b:87:8c:9a:e3:ee:94:57:03:d5:5f:fd:e0:ab:c0:
6c:ba:8a:09:2f:2d:f8:bf:57:bf:97:f3:6a:b2:b7:
84:83:e9:43:8f:f5:0c:cd:33:52:26:a3:4c:26:90:
94:53:63:b6:de:a6:30:cd:ec:db:b4:ce:e3:12:10:
0c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2E:41:A0:1A:32:D9:C7:8F:19:CC:F5:F2:F5:46:8A:B9:BA:31:00
X509v3 Authority Key Identifier:
keyid:23:2B:BC:6F:51:CC:E0:1A:EA:AC:BA:80:F2:D0:D2:64:12:E4:7F:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7916e5-2463-4e0e-ba6d-5314accb0612/1/Iyu8b1HM4BrqrLqA8tDSZBLkf5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:23:46:13:42:22:32:2b:0b:3c:50:ee:2e:ee:26:18:4c:a2:
72:90:78:22:16:c2:11:09:4b:2d:ea:62:35:b7:f1:64:b2:ab:
52:e4:60:c0:b4:fa:e9:48:6a:11:12:71:e5:35:e7:8a:33:19:
38:e6:79:09:d5:4b:9d:b7:23:d1:9d:07:c2:b4:08:72:af:4a:
85:d1:9b:d4:57:43:8d:79:e9:7c:da:3b:53:17:bd:f7:c8:06:
df:b2:bd:25:c7:fe:d1:91:40:e4:88:ad:d1:35:45:9d:02:2f:
b0:9b:22:eb:ee:1f:ad:6f:aa:21:03:46:75:d7:04:2f:9b:6a:
d9:d9:33:20:a3:87:63:bf:7e:7d:9b:2a:f7:11:64:71:7e:e6:
ed:94:69:08:e5:c7:07:e8:67:71:55:20:e0:b8:3f:eb:aa:ba:
ad:bb:74:46:63:cf:0d:7a:37:22:47:08:05:d7:05:3c:16:9a:
cb:c8:da:b7:98:dd:a4:60:7a:2f:22:b0:32:54:12:35:6a:26:
7a:27:10:b4:fb:a3:96:e8:a3:49:6a:48:c0:1d:06:2b:42:d9:
2f:2e:bb:2c:33:7c:13:c1:d3:83:f5:30:cb:e8:53:23:a9:6e:
dc:b7:11:86:44:9f:69:20:4b:fc:90:fc:a4:01:8d:4a:e4:e4:
cc:a1:9f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:04:06 2025 by rpki-client