Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
File: IhHwQD6XRloB3RRbwVB75WVxDU4.mft (raw, json)
Hash identifier: sAnz/hOjwZXChQAr09ZtQSjHMVXgivkl8pnidgqpxxA=
Subject key identifier: 89:58:BF:9C:9D:48:D5:EE:2F:05:25:BE:EC:8A:56:F3:C7:ED:28:6E
Authority key identifier: 22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
Certificate issuer: /CN=2211f0403e97465a01dd145bc1507be565710d4e
Certificate serial: 01987E2E84D603A0A9CC7BD52B9218E40B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
Manifest number: 06CF
Signing time: Wed 06 Aug 2025 07:00:34 +0000
Manifest this update: Wed 06 Aug 2025 07:00:34 +0000
Manifest next update: Thu 07 Aug 2025 07:00:34 +0000
Files and hashes: 1: 0Td-ytKd7IQkV6ppvSRDV5Vu3uc.roa (hash: vadykyjqf/87L2UrE0dzG3fnpUitaYJ3rncrWvmznpA=)
2: IhHwQD6XRloB3RRbwVB75WVxDU4.crl (hash: sNaFEsi1HlISqp4ogdcjtafA9PdZ3yoWxLcV5KST3/M=)
3: klqt66FL_fbr6-S9maCaJ71u_2M.roa (hash: veL+ZGa8+a7DgdnASURYCHEXm47JFKP1LXkF9cJkBfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:84:d6:03:a0:a9:cc:7b:d5:2b:92:18:e4:0b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2211f0403e97465a01dd145bc1507be565710d4e
Validity
Not Before: Aug 6 07:00:34 2025 GMT
Not After : Aug 7 07:00:34 2025 GMT
Subject: CN=8958bf9c9d48d5ee2f0525beec8a56f3c7ed286e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:83:e9:18:b1:8f:11:aa:0b:ef:fe:64:00:
47:80:c9:06:dc:17:a8:8b:7f:b6:0f:d2:a8:e0:6a:
e1:68:27:13:04:43:82:5d:41:5c:ef:d5:df:27:cb:
b7:f3:95:37:54:f6:bb:7d:94:71:2d:bc:fd:fc:bf:
6b:da:f1:c7:c4:04:f7:1f:2d:6e:c7:14:3f:76:1a:
a5:43:c9:37:74:82:b7:68:96:bd:44:1f:7b:5e:17:
e2:f3:c8:2b:57:e9:ee:c2:97:a9:6f:9b:73:ab:6d:
a0:3b:96:32:ff:54:77:7a:c7:5f:e9:c8:47:70:37:
65:46:3f:90:f6:fa:ca:d4:0b:b8:69:34:24:f2:08:
07:0f:48:5e:cd:75:ae:0f:fd:3a:45:f4:bb:17:48:
7f:2f:20:9a:84:a6:2d:66:8d:9c:a2:5c:47:73:aa:
e9:3b:0e:8e:17:18:85:0b:74:d5:35:c2:82:60:03:
24:c2:fc:b7:8e:8f:78:61:35:89:7d:7d:78:56:02:
6c:8b:d1:9a:93:0f:98:18:a2:3d:06:0d:fa:40:64:
15:5a:97:c7:c4:d8:50:e5:5a:ab:d9:27:35:94:20:
7e:85:0c:df:4d:41:be:c2:e7:ab:f2:91:69:e9:c8:
d7:4b:01:d5:22:13:0b:06:e6:f6:d3:1b:5a:16:a1:
52:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:58:BF:9C:9D:48:D5:EE:2F:05:25:BE:EC:8A:56:F3:C7:ED:28:6E
X509v3 Authority Key Identifier:
keyid:22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:10:e8:1f:d2:c4:0e:be:2a:7a:cd:b4:b1:bb:e3:5f:7e:3c:
83:97:d3:4d:bd:89:4c:46:f3:21:51:aa:75:cb:51:2e:7c:82:
4b:03:a4:15:d5:45:3c:30:d7:72:97:c7:5e:be:39:e2:33:f6:
7f:5d:38:01:40:0d:bb:50:d2:22:c0:98:41:14:d7:5f:8f:70:
8b:ab:66:8d:15:09:81:6c:7a:21:68:12:5f:68:6d:5a:17:54:
30:a4:87:07:33:8f:f8:b6:66:a8:47:cd:5a:19:aa:9b:15:16:
57:bd:f0:0a:54:6b:b5:09:4b:b1:c5:e8:58:ef:42:9c:19:67:
e8:9c:02:03:89:54:d2:9c:d7:85:15:8e:79:f1:8b:6f:7f:49:
ed:bf:e5:a8:84:4c:9b:4c:7f:b8:98:13:b7:96:ec:38:9f:da:
e6:19:08:ce:a3:32:ed:62:b8:f4:23:8c:34:78:4c:e8:5f:88:
4e:1d:d8:1b:e3:c1:93:73:98:c6:16:e3:63:90:f0:64:06:49:
8f:c5:1e:5c:fe:eb:ca:85:54:89:f5:90:e3:54:ec:34:2f:a2:
d6:d7:da:7f:5d:9c:bb:70:e6:f9:4f:73:02:11:83:94:3a:a8:
99:24:fd:8e:4c:05:8b:7b:50:50:db:e7:0f:b2:90:99:d7:86:
fb:d7:d5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:03:30 2025 by rpki-client