Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.mft
File: IQm0ddOrXNHMHElnHnf_nbXOGfE.mft (raw, json)
Hash identifier: YWZUBSCi0xjQ+xZXK9jaAUScA8KtNn6kX0KW6bwL+ao=
Subject key identifier: EE:F5:CE:9D:50:7C:D7:79:35:FC:87:3B:78:75:7D:E7:62:59:C0:9C
Authority key identifier: 21:09:B4:75:D3:AB:5C:D1:CC:1C:49:67:1E:77:FF:9D:B5:CE:19:F1
Certificate issuer: /CN=2109b475d3ab5cd1cc1c49671e77ff9db5ce19f1
Certificate serial: 0198801D15DB1072D3DAB60DCBDED8CCE20F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQm0ddOrXNHMHElnHnf_nbXOGfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.mft
Manifest number: 1018
Signing time: Wed 06 Aug 2025 16:00:46 +0000
Manifest this update: Wed 06 Aug 2025 16:00:46 +0000
Manifest next update: Thu 07 Aug 2025 16:00:46 +0000
Files and hashes: 1: IQm0ddOrXNHMHElnHnf_nbXOGfE.crl (hash: 4MPlf/cIaBwJ3p1vp3pKseeXpeOo8Y/44rkGOiHxCfo=)
2: gxfPyS5KakpFEwmfLQLrUMtzDuA.roa (hash: rxllc4raZ48lNaZN0VdX0i2mHb0wFctajLKxvoGGQes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQm0ddOrXNHMHElnHnf_nbXOGfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 16:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:1d:15:db:10:72:d3:da:b6:0d:cb:de:d8:cc:e2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2109b475d3ab5cd1cc1c49671e77ff9db5ce19f1
Validity
Not Before: Aug 6 16:00:46 2025 GMT
Not After : Aug 7 16:00:46 2025 GMT
Subject: CN=eef5ce9d507cd77935fc873b78757de76259c09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f4:dc:ff:b3:41:75:a3:b7:6a:cf:69:15:e0:
b1:5e:20:35:0c:af:39:30:84:c4:32:98:bf:74:15:
1f:31:05:6f:5c:36:e8:6c:5a:70:e8:4e:fd:d2:89:
3e:00:73:6f:fa:e1:84:07:7d:8d:2b:e0:dc:b4:8a:
66:67:e1:c4:86:ad:f7:2e:a9:35:6c:63:b7:9f:a3:
1b:e5:b2:60:db:f4:59:0f:03:ae:0c:4a:5d:5e:cc:
db:85:e3:76:a2:5a:3b:c7:48:c3:dc:20:ea:2a:a9:
22:92:db:19:e9:2d:11:4e:60:61:2e:79:2e:17:df:
c2:ab:bf:e0:6e:0d:d5:2e:33:ba:99:6e:74:93:2c:
34:6f:f1:1a:f4:5c:a5:4c:b9:d4:37:c3:d7:c2:ea:
fa:d6:37:2b:90:27:5b:e6:df:5a:21:24:90:58:0b:
94:7b:c1:fe:20:76:bb:90:8f:2a:77:61:6b:c4:3a:
5a:9d:66:2d:f2:3a:7f:93:dc:33:09:92:80:e4:bb:
48:00:84:ea:e0:31:58:30:ef:2e:4c:ab:63:66:1d:
f9:df:60:17:2d:89:ca:70:7e:3c:f6:9b:7e:b6:8c:
9b:a7:0f:30:0c:aa:38:d9:2c:65:00:d8:ce:29:73:
f5:ec:d7:e5:81:38:70:ff:40:65:19:92:cb:4e:12:
2e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F5:CE:9D:50:7C:D7:79:35:FC:87:3B:78:75:7D:E7:62:59:C0:9C
X509v3 Authority Key Identifier:
keyid:21:09:B4:75:D3:AB:5C:D1:CC:1C:49:67:1E:77:FF:9D:B5:CE:19:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQm0ddOrXNHMHElnHnf_nbXOGfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/505b1a-0298-4e82-9161-09ad3277e84f/1/IQm0ddOrXNHMHElnHnf_nbXOGfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:40:78:58:3e:7e:97:ee:4f:c5:d0:a1:a7:7a:2e:eb:4a:5a:
7f:11:68:8a:da:25:a2:b5:00:8e:ad:03:8f:48:82:cc:b6:df:
71:63:a5:e3:d7:5f:28:39:df:58:3e:46:6a:f2:6e:6a:02:f5:
71:15:68:45:04:2e:7b:37:80:b4:b2:34:1c:c8:5f:90:bc:d6:
14:35:0b:81:cb:d1:d5:64:63:bf:4e:f9:3a:cd:b0:b7:12:a6:
fb:71:76:15:8a:ee:61:78:ea:fb:14:5d:e6:66:e6:bb:99:4d:
0f:91:50:3f:19:fc:d1:97:be:af:10:c6:36:ef:fd:00:0f:2d:
8c:51:27:4c:bd:51:e5:ca:bb:51:08:f8:a1:b8:cd:68:41:f1:
c4:1d:e5:8b:ba:6f:79:e5:3f:87:d9:8a:fa:8f:91:e3:36:66:
d4:3d:79:58:b0:5f:8b:74:cc:83:f1:25:5a:25:74:63:89:e7:
76:94:2c:fb:18:d7:05:13:bb:d7:fd:ac:3e:ad:bc:3f:b6:3a:
0b:4d:cf:d9:05:55:5d:6b:a1:9b:17:cb:96:3a:da:f3:42:24:
f7:ac:94:27:51:69:31:fc:5d:54:62:ec:a1:8a:85:0e:c0:bc:
6e:b6:22:47:8c:d0:97:83:7d:ac:95:0f:02:f1:5b:d4:08:6e:
1f:a6:d7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:44:11 2025 by rpki-client