Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
File: IvtSiroBjxQvRETMzJcjc2zU5LY.mft (raw, json)
Hash identifier: 9/sa49qWfpBkCi0p+9k8nTBt4Ve/cRMw6sEQ+UicCVY=
Subject key identifier: C8:5F:0C:8E:97:D5:B7:2C:1E:30:B2:8E:79:41:B4:D1:19:38:80:EF
Authority key identifier: 22:FB:52:8A:BA:01:8F:14:2F:44:44:CC:CC:97:23:73:6C:D4:E4:B6
Certificate issuer: /CN=22fb528aba018f142f4444cccc9723736cd4e4b6
Certificate serial: 01988E0F9795C08ABB741D7D1F0FAC2269E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
Manifest number: 120F
Signing time: Sat 09 Aug 2025 09:00:43 +0000
Manifest this update: Sat 09 Aug 2025 09:00:43 +0000
Manifest next update: Sun 10 Aug 2025 09:00:43 +0000
Files and hashes: 1: 4Qe9-T0nXWoVHW9lPtNAFV1MJeQ.roa (hash: MEUx9Qe02B/09ozBtbyk47nH68xJFm0Hu6pf18Q/8p0=)
2: IvtSiroBjxQvRETMzJcjc2zU5LY.crl (hash: ZEWtsi/qxU1DbVk11z3213MNhVHibmBndpLpoTZnzKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:0f:97:95:c0:8a:bb:74:1d:7d:1f:0f:ac:22:69:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22fb528aba018f142f4444cccc9723736cd4e4b6
Validity
Not Before: Aug 9 09:00:43 2025 GMT
Not After : Aug 10 09:00:43 2025 GMT
Subject: CN=c85f0c8e97d5b72c1e30b28e7941b4d1193880ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:75:80:4e:41:90:ed:70:cd:70:36:e3:96:bd:
41:ec:a6:dd:ef:de:20:cd:bd:88:cb:d3:5f:13:7d:
ad:24:64:ef:7a:0e:af:90:16:57:dc:71:09:cb:20:
0d:97:32:be:3d:62:8d:5d:b4:60:b1:81:19:9d:00:
d0:8b:b3:a8:bf:53:5d:d4:cd:ce:f6:d5:c5:f2:41:
aa:4f:17:14:79:6a:35:e5:fa:d3:2b:91:88:5a:2b:
97:ba:64:2f:08:df:47:a5:f4:b0:cd:6c:48:a6:d1:
84:ca:c5:b7:1f:4f:61:6b:cd:3e:1e:6b:40:7c:ce:
5f:a1:6d:09:c3:b1:77:3d:87:8d:8c:6f:0d:52:ea:
12:f8:93:36:61:3a:2c:7f:fd:b9:63:70:52:2d:62:
74:63:ce:51:8c:89:0a:28:ad:71:da:41:e5:4e:f8:
b4:dc:d0:62:e4:e8:c8:d2:68:6d:cf:1b:74:02:53:
36:12:1e:49:65:29:cd:b9:1b:eb:5b:fe:ae:84:01:
ed:6e:26:fd:51:c2:52:1b:39:ec:02:f0:95:d1:dd:
f7:1e:eb:8d:c5:fe:0b:6d:d8:96:12:ac:02:81:f4:
81:2e:6c:54:26:36:b7:7f:c6:c6:e2:45:d3:e9:ff:
dd:e6:d0:ff:24:33:9b:b6:7f:2d:c4:3c:82:3b:a0:
49:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5F:0C:8E:97:D5:B7:2C:1E:30:B2:8E:79:41:B4:D1:19:38:80:EF
X509v3 Authority Key Identifier:
keyid:22:FB:52:8A:BA:01:8F:14:2F:44:44:CC:CC:97:23:73:6C:D4:E4:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvtSiroBjxQvRETMzJcjc2zU5LY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/381d69-2c41-45a8-90d4-6ae90b247592/1/IvtSiroBjxQvRETMzJcjc2zU5LY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d1:77:78:19:19:14:c8:aa:ce:13:a2:cd:4d:49:af:12:7c:
2b:4c:31:ad:58:fd:35:9d:1c:0d:01:87:53:51:f4:7e:f0:8e:
c8:0f:92:39:0c:25:3a:6d:6a:2a:8c:f0:88:72:03:93:13:20:
48:c9:21:5a:b6:79:10:9e:c4:e8:59:59:7d:2e:38:ea:db:fe:
f8:9a:53:bb:bf:3b:5e:c7:af:dc:4d:36:b9:cc:31:7a:23:d7:
42:8a:97:02:1b:f8:c0:9a:32:3c:00:aa:d6:d8:05:da:c5:41:
e5:34:61:cb:1c:bf:cc:0c:ae:e1:aa:c4:58:12:82:27:6e:d1:
ea:85:26:8d:54:71:b2:4a:df:5a:41:c6:b2:b2:59:4c:dc:ef:
cb:b8:11:d6:4c:35:bf:a9:ed:68:f2:6d:89:d5:d7:e5:c1:40:
88:ba:74:61:92:8b:c8:59:b3:b9:f0:c3:09:78:2a:da:2a:72:
16:cd:ad:78:7f:c1:77:33:b2:c8:03:60:d3:43:e8:d9:91:95:
6d:82:bf:99:e3:e2:72:d1:24:f3:5e:84:0b:71:69:66:33:7c:
b3:55:1d:02:15:df:f1:9e:49:cf:28:71:2d:57:5d:8c:83:b4:
77:f1:e3:3a:6d:eb:88:b6:56:f7:d2:89:3c:10:5a:27:aa:ef:
06:1e:63:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:26 2025 by rpki-client