Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
File: IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft (raw, json)
Hash identifier: UdRu2PYFevPgSE6bNbIEIQwDGYZD3oZBx2AdX4tjSmk=
Subject key identifier: C8:3D:7C:2E:05:14:B5:63:9C:C5:C0:6F:32:40:0C:DB:92:6B:29:81
Authority key identifier: 20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54
Certificate issuer: /CN=2046367390224a07684d7977f9165a0950f03d54
Certificate serial: 0198733DBD793B9323CA18B702AE2B647A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
Manifest number: 1323
Signing time: Mon 04 Aug 2025 04:01:22 +0000
Manifest this update: Mon 04 Aug 2025 04:01:22 +0000
Manifest next update: Tue 05 Aug 2025 04:01:22 +0000
Files and hashes: 1: ICVbUtHfbHYJwV7ucXI2K_14ylU.roa (hash: d0or5/9y3dY5/PzUShTK41fVXw4MjWFCN4HTk7PqBCg=)
2: IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl (hash: RAzlgh/OFbFEm6tssanp3NweVAkEEsyIePbLTiWnK1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:bd:79:3b:93:23:ca:18:b7:02:ae:2b:64:7a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2046367390224a07684d7977f9165a0950f03d54
Validity
Not Before: Aug 4 04:01:22 2025 GMT
Not After : Aug 5 04:01:22 2025 GMT
Subject: CN=c83d7c2e0514b5639cc5c06f32400cdb926b2981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3c:1e:83:77:27:2d:80:1a:73:b1:2d:39:83:
10:a8:3b:79:37:d4:55:ec:65:d8:34:10:2c:18:1d:
61:49:64:45:50:10:7c:9e:10:5f:06:d8:f2:03:a0:
ef:d9:b3:79:21:11:a9:5f:f8:88:22:3c:21:b9:91:
e6:cb:32:a8:fd:a2:a6:96:f1:d9:79:7c:e8:2b:b9:
64:c5:fe:95:05:10:5e:c2:72:0e:82:73:7c:e5:da:
c7:2e:1c:c0:2f:d6:95:93:3d:85:10:05:56:65:ac:
03:af:65:f8:39:06:1a:71:be:60:3d:85:0f:78:30:
a2:eb:c5:6e:f2:86:f3:0c:0e:c7:2a:67:84:c4:5a:
3a:88:0d:7d:a1:b0:5b:fb:07:a6:4f:ea:f4:b1:bc:
5b:b2:fc:fa:65:8b:b4:ca:72:78:4d:f1:94:e5:02:
01:b4:aa:d2:c1:7f:b7:06:11:20:c6:24:39:4c:0b:
50:b1:37:c4:dc:ea:aa:44:08:c0:c8:d1:5b:f3:9f:
90:2d:d0:ec:52:da:2c:ba:b7:eb:94:25:09:3c:b4:
b0:6c:ba:fd:05:ac:fe:b9:49:b4:14:dc:ee:f0:0e:
41:70:33:d8:23:ca:eb:74:1e:27:9f:91:5c:46:4e:
70:b2:22:57:60:31:13:a7:11:44:9a:c7:57:18:e6:
7b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3D:7C:2E:05:14:B5:63:9C:C5:C0:6F:32:40:0C:DB:92:6B:29:81
X509v3 Authority Key Identifier:
keyid:20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:33:39:50:c7:99:21:77:a6:89:69:ac:e3:5b:19:4d:fa:d9:
38:3a:e6:bc:49:c9:07:d2:92:00:9e:1e:58:96:46:aa:b6:15:
16:48:c7:da:83:7f:9a:82:64:f2:d8:45:50:60:37:7c:7e:e7:
b0:77:c3:4b:da:a8:7a:ac:d7:6e:37:39:fa:07:ee:1b:0e:21:
39:b0:33:56:00:c5:a2:06:00:6a:2e:84:94:f6:51:40:97:1b:
7f:fc:8d:aa:57:7e:b4:2f:5e:6a:f0:7e:02:4f:83:cb:7c:35:
f9:d5:37:19:3d:b5:1a:a3:40:3e:8f:0b:d0:35:49:c4:d5:80:
6b:3e:11:06:13:46:6d:97:6b:bc:4f:62:77:5d:b2:3b:8c:46:
7c:de:cc:02:c1:de:34:0f:a0:7d:73:92:94:d5:b5:9f:e6:08:
d7:48:5d:a8:09:b9:f2:41:32:d5:19:ed:16:64:7c:fa:a6:6b:
a7:89:b8:e3:ad:eb:b9:7d:aa:4b:ed:b6:10:4d:8a:93:47:bd:
ff:72:3c:42:08:36:ae:12:9c:44:2c:45:25:fc:ce:a4:28:db:
95:ca:42:ac:c4:5d:30:40:7d:9f:18:52:a3:01:9e:ea:3a:b9:
96:d7:3e:9d:f4:3a:93:59:5b:6c:71:f2:62:87:d7:32:d5:b8:
7e:2a:40:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:04 2025 by rpki-client