Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
File: _i4izBWFntSgeEv9CFhLPI-yn5o.mft (raw, json)
Hash identifier: bONoEdwyK7EiJXuY/v4q0UIVfDoZ3+Ahk50ZP23i8S0=
Subject key identifier: DB:B3:33:6F:FC:72:D4:B1:4A:5A:6A:22:7B:63:1B:90:C5:F0:83:4F
Authority key identifier: FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
Certificate issuer: /CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Certificate serial: 019872CF14E797790624160B197E6BB955FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
Manifest number: 0C4A
Signing time: Mon 04 Aug 2025 02:00:30 +0000
Manifest this update: Mon 04 Aug 2025 02:00:30 +0000
Manifest next update: Tue 05 Aug 2025 02:00:30 +0000
Files and hashes: 1: 3GJal5BlkwMpqI0aUPXNpdisEd0.roa (hash: N1IIZPB15h65xX22ALfpxQG++svVYLQW4hUhjHJNwow=)
2: _i4izBWFntSgeEv9CFhLPI-yn5o.crl (hash: ZvPIlgdbgw3KphLMSwNPpQjNWaSmdSacxoW4P1rXhnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:14:e7:97:79:06:24:16:0b:19:7e:6b:b9:55:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Validity
Not Before: Aug 4 02:00:30 2025 GMT
Not After : Aug 5 02:00:30 2025 GMT
Subject: CN=dbb3336ffc72d4b14a5a6a227b631b90c5f0834f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:13:a4:8e:0c:34:11:78:85:c1:33:30:36:ae:
76:58:40:d0:0e:32:1a:ec:01:9c:58:04:88:ea:a2:
a2:c4:c6:c9:e1:6e:4d:bc:e9:1a:61:ba:2e:7e:14:
3b:da:e6:00:31:dd:06:4a:b8:59:d2:02:ae:99:8f:
db:6a:a4:01:ed:c8:ba:8c:63:c3:22:4c:16:81:21:
38:84:7c:b7:83:49:6f:3b:84:c8:3a:29:04:32:69:
6e:89:0d:07:a5:b4:47:84:df:d3:71:43:d7:e8:9d:
f7:55:3a:0c:df:a1:58:4b:ec:b5:39:3f:a8:f7:e3:
d6:7f:82:19:f4:1c:c6:91:9e:11:44:8b:20:77:8a:
e9:53:e7:62:50:02:2c:36:a0:c5:67:de:2f:62:04:
ba:5a:1f:eb:ed:2b:54:93:10:c5:ed:38:35:ee:2f:
39:a6:34:ff:e8:09:81:ed:a0:29:82:ae:86:fb:ff:
f2:21:6c:b1:b6:4b:cd:0c:a9:6b:1f:98:98:a6:08:
ea:2d:04:ac:3b:92:ad:72:ad:e8:fd:10:3e:57:0d:
53:a3:fa:50:c0:ab:24:10:73:71:6a:e0:6d:d3:2b:
3a:98:83:40:54:53:6b:81:f4:a5:1c:b1:7a:e9:ab:
3a:16:78:ea:6e:1d:e0:05:1d:40:7a:a0:18:63:32:
54:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B3:33:6F:FC:72:D4:B1:4A:5A:6A:22:7B:63:1B:90:C5:F0:83:4F
X509v3 Authority Key Identifier:
keyid:FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1a:7c:25:5a:1f:80:74:2e:0c:0f:2f:2b:f5:49:8d:fc:bd:
3d:83:0e:57:ec:b0:d6:60:7f:a5:0a:25:9a:ff:14:cd:3f:e1:
c0:60:cb:b9:79:b2:23:c6:b7:e3:1e:ec:da:78:56:e2:57:25:
ce:37:10:f0:9f:c1:44:ae:db:51:fd:20:bf:a0:c6:29:99:bb:
28:b3:9d:9c:61:d4:e2:c2:30:2a:c8:03:89:f8:f5:ff:c0:56:
59:6c:f1:9f:cc:96:21:3b:25:62:e2:a1:5d:c3:85:ee:7c:fc:
f1:70:04:36:6e:81:93:a5:4b:7d:68:b2:47:32:18:0a:cd:26:
08:70:f6:28:29:8d:c0:a1:2d:d0:10:4c:26:bf:f7:83:67:78:
60:92:be:50:6c:06:6e:eb:0a:f2:05:e4:24:fe:7c:cb:1b:1d:
dc:ff:8d:6d:e4:41:fb:27:7d:c4:48:a9:5c:3d:96:a7:0b:34:
b4:d2:46:3a:ff:29:3a:f0:9f:d2:5c:7b:55:d9:3a:9e:6f:41:
b6:25:c6:cf:54:c4:df:67:35:4c:e6:11:d2:04:a7:17:c0:a2:
61:56:1b:d3:6a:25:c1:8c:1e:6f:65:ac:11:58:d3:5a:6c:e9:
3b:7e:7d:25:01:77:2e:b3:dd:4a:a9:c2:ed:98:03:1f:02:21:
a6:96:74:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:51 2025 by rpki-client