Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
File: iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft (raw, json)
Hash identifier: v1ywCSZ+b2dez8v+OuTKwLTDMSWBjcXOtKElnl6zaL4=
Subject key identifier: 7A:90:16:DE:75:35:9B:B0:ED:D3:57:B3:B3:22:9B:AC:9E:4D:C5:98
Authority key identifier: 8A:A1:FE:9A:4C:03:D0:15:AE:C9:74:E2:D2:97:09:A9:79:EB:82:F1
Certificate issuer: /CN=8aa1fe9a4c03d015aec974e2d29709a979eb82f1
Certificate serial: 01987ED38E666F1E34BEC7A908D447ED4115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
Manifest number: 0EEC
Signing time: Wed 06 Aug 2025 10:00:50 +0000
Manifest this update: Wed 06 Aug 2025 10:00:50 +0000
Manifest next update: Thu 07 Aug 2025 10:00:50 +0000
Files and hashes: 1: 03mz0LQjzt1ORtulSs8-RgKcMnM.roa (hash: o7HH4upfGHhmSB89uCr8oSYNHbC8ZdA+S7MeD1sbYe4=)
2: 2Qr14eAD37nuU_5fo7_UeplXIWU.roa (hash: usgUNw1aFsserU4Vh7SHZUsSrOPQTJ2Wa8CALhVnFWI=)
3: XcS7NtVySUtUzIKZEZ4PM2dCvo0.roa (hash: RI3/B49k5u7aP42xJ7PCHqmPzqodpebWnjl4/ch5Tn4=)
4: iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl (hash: 5n3oeDmeCyQfv7VtI2m0g9Qu3ka/YQXeusqjhlzERxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:8e:66:6f:1e:34:be:c7:a9:08:d4:47:ed:41:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa1fe9a4c03d015aec974e2d29709a979eb82f1
Validity
Not Before: Aug 6 10:00:50 2025 GMT
Not After : Aug 7 10:00:50 2025 GMT
Subject: CN=7a9016de75359bb0edd357b3b3229bac9e4dc598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:06:3d:fc:1f:4d:88:e1:a3:64:5f:d8:2d:66:
52:5e:c6:ca:3e:d9:80:d5:83:8c:46:88:09:65:ad:
24:e2:bd:82:76:28:1c:73:d2:17:1e:17:29:ca:1f:
65:5e:3c:60:78:f6:54:79:c0:f6:f7:11:6d:a7:87:
ad:b3:3c:e6:77:af:96:52:42:a4:c3:86:e4:2a:5e:
91:bb:53:dd:d9:f3:2c:e0:75:49:42:6d:cd:e8:a2:
f8:e6:19:19:05:a7:90:f4:08:38:d9:22:5a:e8:52:
7a:29:09:0b:95:34:5a:bd:ed:7c:0c:4f:ec:34:02:
87:e0:8c:1e:6f:c4:cc:90:63:69:29:ed:9b:e3:0c:
09:37:8f:7b:e6:20:1d:6f:ef:fb:d7:d6:3b:f3:d1:
13:14:df:68:a5:b5:ef:38:c5:92:e5:aa:34:25:99:
42:10:ed:63:0b:65:d1:20:4d:e7:0a:04:59:dc:0e:
4a:c8:d5:01:fc:7b:f3:d5:fb:12:60:c0:1f:3b:51:
0b:35:d4:49:bd:97:10:dc:5d:11:81:58:96:94:c3:
10:f4:e7:86:96:c7:45:d5:58:54:50:55:11:2d:50:
a2:7d:ce:06:d1:c4:c0:76:22:e4:a9:ec:bf:75:22:
62:35:bd:20:50:de:df:8e:f4:73:62:47:22:78:7c:
84:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:90:16:DE:75:35:9B:B0:ED:D3:57:B3:B3:22:9B:AC:9E:4D:C5:98
X509v3 Authority Key Identifier:
keyid:8A:A1:FE:9A:4C:03:D0:15:AE:C9:74:E2:D2:97:09:A9:79:EB:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a9:12:5b:8b:d1:a4:43:c7:22:ea:9a:05:71:dc:0d:b0:c1:
14:52:84:68:e4:60:e7:ce:6e:80:fc:ee:ac:e2:b4:0c:1f:a4:
15:ab:c5:dc:9d:50:30:b0:cd:c6:ba:79:8d:8d:60:10:7f:f2:
00:c0:c9:1c:7d:25:be:23:88:88:cd:60:60:eb:36:f9:af:32:
47:f7:90:70:52:e3:91:37:26:aa:55:06:79:2b:f4:d0:a4:8a:
b0:1b:e7:d1:de:86:0a:4b:d6:f2:c9:71:1d:69:9f:5c:a7:98:
8d:bc:26:e7:2d:d2:c9:3d:8d:be:c3:d1:f7:21:15:59:8c:e4:
31:aa:ec:bd:40:5d:96:d3:2a:c6:9a:d2:be:d8:16:c0:f4:5c:
53:d2:f2:cd:1e:33:f4:16:be:31:d5:56:14:5a:d5:5c:5d:47:
9d:80:5b:fe:09:ed:5a:96:f8:78:0a:02:9d:7d:3b:20:67:45:
44:28:af:1d:e5:99:fb:47:60:1b:1e:da:47:a1:28:6a:c1:a1:
99:7c:d0:e1:21:15:25:df:eb:f5:36:a4:27:03:3f:ee:35:c5:
ca:37:1a:f9:89:32:69:21:5a:43:22:63:31:ec:f4:fa:92:4d:
92:08:53:11:67:da:43:9a:1e:f8:8e:ea:58:af:fa:fc:3e:bd:
56:a2:21:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:17:23 2025 by rpki-client