Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
File: IK7ciyobvW03BV7ADo5g9FiOEwU.mft (raw, json)
Hash identifier: gXWOkP7D1K2sySWvomhqT5Leyfz2ll2S0MbQtF36ymE=
Subject key identifier: 5D:65:54:01:54:CF:4D:4A:E2:75:EA:E2:4D:D0:DC:C6:ED:D9:F9:2C
Authority key identifier: 20:AE:DC:8B:2A:1B:BD:6D:37:05:5E:C0:0E:8E:60:F4:58:8E:13:05
Certificate issuer: /CN=20aedc8b2a1bbd6d37055ec00e8e60f4588e1305
Certificate serial: 0198906C63B690B13E84DE1C3454AD0CCFF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 20:01:19 +0000
Manifest this update: Sat 09 Aug 2025 20:01:19 +0000
Manifest next update: Sun 10 Aug 2025 20:01:19 +0000
Files and hashes: 1: 20Yy79DTSfilFFbqcJeVWxZcEUk.roa (hash: Ts6CpvaJSTki03QhEk4q4v0AnVBL0dLMnm27BuNB3Q8=)
2: IK7ciyobvW03BV7ADo5g9FiOEwU.crl (hash: YdAdBAlRzbTN/uTJyaxGFWSZAvfGvkSZvTRjJKLLj8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:6c:63:b6:90:b1:3e:84:de:1c:34:54:ad:0c:cf:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20aedc8b2a1bbd6d37055ec00e8e60f4588e1305
Validity
Not Before: Aug 9 20:01:19 2025 GMT
Not After : Aug 10 20:01:19 2025 GMT
Subject: CN=5d65540154cf4d4ae275eae24dd0dcc6edd9f92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ea:86:91:35:fb:4f:80:f2:ab:c7:bf:0a:24:
8e:99:f9:15:41:cc:68:93:be:a5:95:86:ac:98:8a:
d0:fa:ff:c5:55:9e:1b:2f:a1:00:c3:c5:b4:96:a5:
24:9e:c0:cd:a9:18:5d:ec:0d:b9:29:3c:73:10:c1:
b8:54:4d:fe:e0:42:06:f0:81:14:ef:86:d0:4b:a2:
28:10:1d:55:56:1b:97:df:fc:66:39:21:e5:2b:0d:
0b:bb:50:02:df:0d:76:22:f3:bd:8a:5f:92:31:42:
f1:5a:af:49:0a:27:ae:20:95:91:04:a3:e7:80:a1:
99:f6:2f:fb:d4:25:67:db:91:f0:27:da:41:e2:9c:
96:d0:d8:cf:9c:da:28:5b:30:0b:f0:e4:d5:51:2e:
86:63:b0:cc:9c:75:f1:9c:77:35:11:d3:e1:a2:62:
e7:ea:d1:f3:ff:71:05:26:bf:0c:73:91:6a:83:40:
ca:f3:14:ce:d0:29:ca:95:83:23:a0:ad:3b:3e:51:
81:e4:b9:af:d8:22:63:dd:2c:43:31:67:80:74:20:
0c:d1:eb:34:88:20:24:bf:ad:c5:7e:38:80:57:79:
6e:5e:10:53:24:1d:15:c7:c9:b8:e4:e2:84:dc:41:
10:d5:c6:f4:13:ce:dd:3b:d7:f1:0b:ab:dd:a9:31:
4b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:65:54:01:54:CF:4D:4A:E2:75:EA:E2:4D:D0:DC:C6:ED:D9:F9:2C
X509v3 Authority Key Identifier:
keyid:20:AE:DC:8B:2A:1B:BD:6D:37:05:5E:C0:0E:8E:60:F4:58:8E:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8b:72:6e:45:14:e8:33:e5:26:33:3e:c6:83:f2:30:f7:2d:
88:2e:0c:5e:1f:98:d6:a8:95:6b:5b:bf:79:a2:29:f9:d4:7f:
64:74:76:e2:09:18:22:79:a2:1e:a7:e8:a5:98:26:fb:26:42:
20:ff:b2:70:2d:c4:26:78:27:18:d2:46:32:94:9b:fc:53:f7:
9a:d0:6e:9f:a4:bb:86:59:05:49:21:ea:0e:bb:e1:12:d7:80:
5e:3b:18:3e:73:64:f8:64:b0:9a:70:89:08:c4:8e:04:f8:33:
cb:23:72:9a:e8:e7:df:bf:f7:a0:3c:cb:f1:d4:00:cf:5a:6d:
25:4a:47:8a:bc:75:c9:a1:b4:8c:34:44:a4:93:05:02:c6:81:
45:75:29:c0:b5:4c:01:65:e3:61:50:42:32:5f:3f:7e:c7:04:
39:4d:00:ea:2e:9a:97:ea:05:a8:aa:da:11:9b:74:e1:69:a0:
8f:64:fc:26:39:d4:ad:c4:c6:6d:d1:c5:2d:e2:56:39:d0:1e:
1c:ae:f8:81:69:c8:68:53:12:7c:08:9b:b1:3f:67:6b:df:cb:
88:0a:2d:b7:12:19:22:35:67:f4:8f:31:4d:6c:35:ae:f4:68:
4c:81:ed:95:be:3c:d2:db:e8:d5:90:7e:dd:1b:ae:65:50:43:
5a:64:6e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:39:55 2025 by rpki-client