Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
File: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft (raw, json)
Hash identifier: SOvJdN03L2ptgYK9u88PmhvWRZ0QerLiTqFHp/MPSyo=
Subject key identifier: C0:A1:78:9A:B2:F3:DC:A9:67:9F:26:EE:39:75:0D:5B:8B:84:0C:DF
Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
Certificate issuer: /CN=21a00080cd2cb1bb073903b32b25ad660a366486
Certificate serial: 01987419030A3A39FDAB8E37A0AC7AB52969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
Manifest number: 14EC
Signing time: Mon 04 Aug 2025 08:00:52 +0000
Manifest this update: Mon 04 Aug 2025 08:00:52 +0000
Manifest next update: Tue 05 Aug 2025 08:00:52 +0000
Files and hashes: 1: 1KLC3gBk4V8UlL1q34VPnUxHzZY.roa (hash: PpTqyE9jhdplaM4jeC6bew/Mkzc7lRGupafDYfql5k0=)
2: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl (hash: njSo2UT+KYX30J3szyFdbfWccbPRCfNOhHV9C9EQ5Go=)
3: QdEJ7zpCJnQlkbu72Bn_JyCb_EM.roa (hash: uicaL7GuC1Mghzq3VpHhej/MKa/9KriBzrxlFVoCpcc=)
4: WylnrO-wU58E26AefCAQ7nrb79w.roa (hash: y1OWdCLTeRgES3w6dtbyOUz1ZW2NZGMx2qqGlzUOOl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:03:0a:3a:39:fd:ab:8e:37:a0:ac:7a:b5:29:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486
Validity
Not Before: Aug 4 08:00:52 2025 GMT
Not After : Aug 5 08:00:52 2025 GMT
Subject: CN=c0a1789ab2f3dca9679f26ee39750d5b8b840cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:03:b9:b1:19:bc:77:7a:a3:78:71:de:50:18:
df:3a:32:b5:53:46:5b:17:20:78:fc:ea:03:02:1b:
40:7b:10:e9:7c:0e:ce:c8:31:7f:26:36:e7:2c:d1:
a3:cd:67:4f:a7:7f:95:d9:91:99:d1:c8:6a:46:43:
99:7a:87:49:c8:b8:b4:1c:48:0c:be:ac:22:0c:21:
cd:93:c4:0c:dc:e4:52:33:69:8d:08:ff:81:16:5c:
57:d4:a6:88:62:fb:cc:b1:34:64:bc:06:a0:b2:f9:
94:32:c8:02:cb:89:77:fe:9f:81:12:0d:ed:77:62:
ce:df:e9:0f:44:9e:fe:69:72:00:80:a8:c8:89:61:
f2:c6:e9:88:56:d8:c1:c2:e6:89:4d:6f:eb:b8:e3:
95:e0:ce:64:79:61:cc:ee:10:53:44:9a:08:25:bd:
04:7d:3c:d1:88:87:db:11:f1:6f:6e:84:c6:0d:c1:
f4:6a:f0:43:a6:5f:d4:83:f4:fb:c1:d9:bd:6f:db:
f8:5d:02:20:6c:23:b7:75:d8:c8:e4:69:f2:50:9c:
3c:9a:a9:0b:9f:55:f6:d0:cb:b9:2a:02:fd:1d:5f:
86:4b:0d:d6:32:2d:92:42:74:18:97:29:44:15:44:
79:d4:b9:84:89:7e:8c:b4:58:b8:6b:29:e1:c3:6d:
9f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A1:78:9A:B2:F3:DC:A9:67:9F:26:EE:39:75:0D:5B:8B:84:0C:DF
X509v3 Authority Key Identifier:
keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:84:d4:05:31:28:4d:b2:93:0e:f5:cb:72:17:3c:1b:6d:0f:
f6:7a:0d:75:68:0b:e3:d6:9d:c1:87:48:b5:1f:25:63:a4:53:
b5:01:20:dd:06:7a:8f:97:2b:58:46:3e:6c:b6:8a:67:99:b0:
59:e5:65:b8:a4:bf:f7:7f:c6:28:77:3d:66:b9:8e:28:46:40:
0a:08:c1:fb:79:79:5e:3e:ae:70:0c:1a:3f:1a:48:75:04:e0:
33:b0:31:dd:27:d6:ac:ce:55:e5:07:7e:52:af:ff:b8:ed:ac:
55:f0:70:26:42:0c:d7:b9:cf:8c:2b:0c:16:81:23:7f:be:79:
be:24:40:ce:ae:b0:75:b9:c9:f1:c1:03:b3:4d:77:cd:fe:64:
75:87:ce:7b:69:e9:36:13:77:20:fe:da:fd:78:ae:18:77:4b:
bc:45:63:0e:cd:7c:90:45:ca:d9:9e:75:30:7d:f9:80:23:af:
16:c9:1e:80:0f:c6:4f:2b:89:b3:f2:ab:f4:90:b2:32:9a:f9:
59:f8:34:4f:b2:a5:38:cb:3e:4b:f2:83:59:57:93:8c:03:79:
39:00:03:2b:4c:f2:4f:47:b8:0c:69:b7:8e:3e:6b:b8:9c:a2:
76:7d:91:54:65:79:75:b7:ed:09:ed:af:32:76:23:b7:02:09:
d4:0a:5a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:55:23 2025 by rpki-client