Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
File: ix22ROoOJ0ndbtAirs0SGUvLlvI.mft (raw, json)
Hash identifier: HmHx+P8Qm7dusrVcQu3nFcR+wj9F6vG0iG0rRarT0fw=
Subject key identifier: B6:28:55:6B:45:A6:18:73:97:43:63:F0:DA:84:58:E8:3F:6C:BC:62
Authority key identifier: 8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2
Certificate issuer: /CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2
Certificate serial: 01987450419CA7F634186D6F07E5843C9E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 09:01:13 +0000
Manifest this update: Mon 04 Aug 2025 09:01:13 +0000
Manifest next update: Tue 05 Aug 2025 09:01:13 +0000
Files and hashes: 1: A41bCmeGcRe18SujefEGCOd0pEc.roa (hash: NjleSysihCL9A6oaK71bgTpnAO+ec2pn28x66pipbdA=)
2: ix22ROoOJ0ndbtAirs0SGUvLlvI.crl (hash: /f8xAhfdwZrgWeKTGAnZJDxo7k/zy8D7ZJzS+h6YO0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:41:9c:a7:f6:34:18:6d:6f:07:e5:84:3c:9e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2
Validity
Not Before: Aug 4 09:01:13 2025 GMT
Not After : Aug 5 09:01:13 2025 GMT
Subject: CN=b628556b45a61873974363f0da8458e83f6cbc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:7c:44:1c:2c:e1:9e:62:9d:bb:f0:a7:9d:
6a:10:1b:55:8f:4d:04:04:22:45:dd:88:aa:8a:37:
eb:51:d4:98:8b:14:03:1b:0e:dd:02:9d:7c:b5:7a:
3d:f1:95:8c:f4:a4:c7:51:96:11:fb:8a:1c:71:42:
1b:64:7f:f9:d6:b9:8f:50:21:50:8b:e7:64:00:8d:
41:47:64:7d:2d:0c:f1:06:86:76:da:d3:eb:b9:bd:
de:f9:f4:16:c7:cb:ea:4b:d5:91:ff:1b:16:a5:d7:
73:94:2a:6c:60:85:dd:20:4e:f6:65:68:2d:ed:99:
49:29:85:09:c3:98:03:2a:6a:66:89:19:e4:b5:7a:
e7:30:f0:8f:d3:7e:fc:79:f4:e2:50:23:4d:da:e0:
7f:9b:f3:c4:6b:c9:8a:eb:ff:0b:a4:ae:e2:3a:76:
80:b7:e1:ca:52:17:22:b7:10:18:d5:be:64:e7:30:
5c:db:45:9e:29:58:33:eb:2e:2b:6b:f0:90:51:71:
8c:97:96:38:b1:de:c8:31:52:16:ca:a4:b8:05:d4:
f7:b0:77:54:7e:44:42:51:32:0c:39:78:c6:05:e0:
d5:15:20:0b:8f:53:9b:59:f5:87:b4:e1:36:21:73:
18:f0:98:34:eb:38:8f:5d:ab:31:68:4b:74:d7:21:
d3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:28:55:6B:45:A6:18:73:97:43:63:F0:DA:84:58:E8:3F:6C:BC:62
X509v3 Authority Key Identifier:
keyid:8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b8:6e:30:ff:65:c0:92:7a:4a:4c:34:7b:d1:d3:b5:d4:32:
36:2a:b0:d7:c2:b7:e0:0d:3a:e4:66:72:0a:3f:f8:5d:14:87:
de:ac:6f:78:f7:c9:8e:29:56:50:24:8c:41:95:8d:0f:f2:af:
56:b0:c0:8b:9d:51:76:78:c6:e9:52:dc:ed:8e:0e:81:f0:a3:
d6:d3:e9:e3:89:b3:85:84:dd:58:95:39:6b:62:ca:08:fd:41:
f1:a4:9c:89:20:22:77:1f:f4:92:3f:a1:7b:bd:f0:25:47:e9:
c3:04:5e:85:12:29:78:b7:62:14:c1:02:41:d8:ac:87:8b:15:
0b:44:39:a4:bf:eb:5a:c9:b0:6c:c8:8e:9b:b9:2f:85:47:0b:
c8:1b:4f:d4:3a:65:ae:6e:80:f8:d9:0e:f8:9a:1c:ac:b4:20:
94:28:c6:11:50:ee:da:d9:5e:32:60:b3:c2:f5:af:5a:f0:2c:
8f:23:20:2f:eb:e3:dc:ad:39:d5:b6:87:bf:91:01:2d:cd:1f:
23:89:f1:42:98:c4:82:06:67:23:0e:ea:31:fb:dc:7a:b3:a4:
79:84:58:c6:81:e3:38:27:82:b1:b4:7d:e5:3e:75:89:5e:cd:
80:fb:ca:8c:fb:88:e4:84:bd:6c:47:f8:3b:96:19:a0:d2:90:
4f:85:e8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:28 2025 by rpki-client