
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
File: ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft (raw, json)
Hash identifier: KjyyQDCbFOcHyV0FYkSy4HLJNWvBkC/sUq3/qDEuqIc=
Subject key identifier: C2:D7:1D:CA:19:C7:97:13:64:03:48:03:8C:F2:6C:FF:C3:4C:3B:97
Authority key identifier: 8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
Certificate issuer: /CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Certificate serial: 01988BEB00F7080637BB47E48D80B50DE4F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 23:01:30 +0000
Manifest this update: Fri 08 Aug 2025 23:01:30 +0000
Manifest next update: Sat 09 Aug 2025 23:01:30 +0000
Files and hashes: 1: SZpd9qPeF2_UcZ0BFTiD1uQx6CE.roa (hash: 4d7c/yFsOUlnwxOih4L4b458874C6mb5/7y63/As6E0=)
2: e6NTQMQbAc2rRpYIgSE0b5QlitQ.roa (hash: AW2JD/AMZP/3NkMYPVumCDsjg07AD98EjBhRoynRE5I=)
3: ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl (hash: Q5MwPwHwadAE08spCn+alxxpnrMf1VPQC/qV6lPXHJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:eb:00:f7:08:06:37:bb:47:e4:8d:80:b5:0d:e4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Validity
Not Before: Aug 8 23:01:30 2025 GMT
Not After : Aug 9 23:01:30 2025 GMT
Subject: CN=c2d71dca19c79713640348038cf26cffc34c3b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1f:1d:9b:7e:f6:17:93:0d:ac:24:01:f9:53:
fd:1f:2d:de:42:20:11:e8:40:4b:9e:ca:78:c2:0c:
67:0d:e1:3d:0d:fb:ba:29:cb:6a:d4:4a:fe:8c:9e:
0a:6c:e8:63:76:1f:c0:d7:e1:ab:6b:16:85:f1:e6:
ba:68:1e:67:85:0e:cc:7c:81:5b:ab:c4:6f:b0:b2:
af:4a:fd:8c:74:f0:04:d1:36:fc:91:41:b4:84:b0:
f6:42:67:57:9e:85:58:6a:18:bf:3f:17:34:ae:31:
21:ee:f9:bf:86:63:9b:a3:f1:d5:34:c6:84:f6:5e:
55:2e:9d:81:09:45:40:9d:8d:1e:bf:5a:9a:ff:fa:
02:5f:b7:de:e9:f3:0b:d1:bc:69:1b:bd:2c:c4:85:
46:fa:83:8a:3c:d7:d6:11:db:76:bd:4e:31:2f:1f:
59:39:6d:50:29:99:98:99:61:a5:67:1b:8e:f2:0a:
66:cb:f9:6a:4b:b2:1d:08:85:3f:90:5a:9f:e5:3d:
2c:b7:e0:09:7f:c7:3c:b9:4e:bb:d4:30:c9:66:15:
52:80:96:d3:10:59:04:76:ec:67:1e:1a:25:f4:39:
32:b3:3a:44:bb:d4:e9:91:0c:e9:f7:64:db:31:4d:
8d:0d:0c:31:ff:b0:c1:a7:8d:3e:20:be:fd:78:3c:
dd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D7:1D:CA:19:C7:97:13:64:03:48:03:8C:F2:6C:FF:C3:4C:3B:97
X509v3 Authority Key Identifier:
keyid:8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:62:14:18:f6:9e:d9:1e:b0:19:60:ad:fa:86:fd:18:55:ae:
ad:cb:7e:5e:18:62:ba:6a:c5:68:4f:70:70:20:cb:04:10:b5:
49:7f:2c:ee:7a:10:f5:04:ae:6c:c0:08:9d:6b:20:2b:fc:d6:
1d:0e:d7:cb:ea:8f:d3:83:78:77:a6:4c:e3:14:11:ed:76:1a:
91:60:2e:74:71:2f:ed:49:1f:c0:7a:40:a6:1d:ca:91:f8:72:
12:4e:59:92:5e:ff:2b:ba:ca:d8:8f:19:05:4b:81:69:ba:be:
be:19:6f:a9:bd:01:c9:a8:09:83:2f:0b:88:94:5e:b2:db:0f:
ac:fa:4f:ea:d4:46:53:d1:f2:10:3b:4d:65:b7:72:b8:ca:11:
0e:2c:66:58:7f:ef:46:eb:5a:3d:c5:39:a0:a6:a8:f3:3d:84:
28:19:4f:bc:7b:54:6d:a1:92:b1:d2:b1:37:38:ab:a8:ea:d6:
e7:81:01:18:eb:5c:e8:6c:a6:23:8f:f6:55:57:e4:d4:32:bd:
33:9b:ac:7e:fb:02:41:52:e5:3a:9d:47:ed:2a:bd:c7:f1:5f:
dc:ae:e1:dd:a3:42:b7:0f:eb:c2:dd:6e:3e:e1:c3:1a:a9:f6:
24:42:3a:8a:24:58:42:fe:71:28:92:2d:b4:2a:10:19:3a:23:
c3:be:e8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:42 2025 by rpki-client