
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
File: IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft (raw, json)
Hash identifier: IBvcHxcxgu/fc1BhzmiEzeYeEfbJuMVR4yguT3MM2ew=
Subject key identifier: E1:DB:8F:1D:06:77:1D:40:5C:5E:36:0B:7A:8E:AC:8B:37:4A:6D:A0
Authority key identifier: 21:01:B6:38:8D:64:35:F5:49:90:90:53:82:B4:1D:C9:67:5F:D4:90
Certificate issuer: /CN=2101b6388d6435f54990905382b41dc9675fd490
Certificate serial: 0198744FBA5FA2E32FD047FCF6E1C143A401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
Manifest number: 04A7
Signing time: Mon 04 Aug 2025 09:00:38 +0000
Manifest this update: Mon 04 Aug 2025 09:00:38 +0000
Manifest next update: Tue 05 Aug 2025 09:00:38 +0000
Files and hashes: 1: EAD0diuoZK02qxxsVWWiclAVX5I.roa (hash: kzXgijoQ+OFnt0McFOmyH17ijOy9UUEek/dQbYMoKFU=)
2: IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl (hash: 2z/mMbVe3v6/ZeommdSWcwHr3KF+TybnjlW4w8GsZ6o=)
3: nyGLR8VZWMaY-kU1NUM_fc4iRjM.roa (hash: voylSjHlayiNYZNWUzC6whbKd8QLUjoGC1qGpaQazoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:ba:5f:a2:e3:2f:d0:47:fc:f6:e1:c1:43:a4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2101b6388d6435f54990905382b41dc9675fd490
Validity
Not Before: Aug 4 09:00:38 2025 GMT
Not After : Aug 5 09:00:38 2025 GMT
Subject: CN=e1db8f1d06771d405c5e360b7a8eac8b374a6da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:db:b9:cd:cf:50:dd:88:41:83:49:71:79:
85:91:31:35:6c:d3:a9:cb:03:f3:74:09:a9:3c:fa:
3c:03:53:10:02:ba:bd:eb:6f:37:d8:2e:45:19:ce:
8d:5f:92:76:a2:08:f3:6d:32:d1:de:8e:b8:2b:2e:
7e:1f:b6:03:44:85:ec:2c:87:48:56:2a:33:89:76:
f2:ec:0f:2b:53:b1:9e:8d:a4:db:1e:ee:95:af:8a:
cc:e4:0d:90:2f:86:e9:7e:cf:b4:27:07:5e:4b:0a:
44:df:6b:cf:17:b6:ef:34:89:52:02:eb:08:c7:a9:
dc:ef:ec:0d:a6:5f:e4:7c:0e:b8:b5:ab:a8:7f:00:
c8:df:ff:46:cf:10:d0:52:16:5b:54:b2:09:74:7e:
2c:fc:97:da:00:90:b5:68:25:44:a9:69:9a:1e:aa:
c4:fb:90:19:ba:97:b1:59:e3:6e:51:ca:37:02:42:
15:16:ed:48:74:e8:2c:8c:17:01:33:54:4e:9b:6f:
d9:2f:56:b6:c4:8f:63:fd:67:bf:80:f6:9b:88:5a:
83:26:eb:9c:1c:c0:90:a2:4e:d2:48:97:be:1a:30:
3e:d9:2c:5c:bb:06:1b:2a:fa:90:3c:30:97:16:a9:
65:5d:47:ae:1a:31:d2:ee:98:1f:a8:3c:26:44:5d:
4d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DB:8F:1D:06:77:1D:40:5C:5E:36:0B:7A:8E:AC:8B:37:4A:6D:A0
X509v3 Authority Key Identifier:
keyid:21:01:B6:38:8D:64:35:F5:49:90:90:53:82:B4:1D:C9:67:5F:D4:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:70:1c:78:79:0e:22:17:9b:0e:4c:21:93:75:88:ee:5d:70:
4f:b3:ec:fb:bf:95:54:61:c3:d4:c4:7f:19:e5:54:ea:55:18:
af:eb:c7:47:19:1a:9d:ed:77:4c:df:2f:a9:73:93:e5:2e:9d:
2c:3f:19:a3:b3:61:43:84:c2:e3:6d:77:4d:63:1b:5f:0e:7c:
0a:d3:26:56:65:08:5f:ac:a5:2f:73:b3:06:ee:16:56:44:e6:
e9:b9:ff:83:72:25:b9:9a:7b:cd:08:26:4b:00:54:d3:57:46:
dc:de:f1:32:14:dd:98:49:ed:28:9d:dd:59:14:33:d7:d9:b2:
10:6e:20:55:d5:18:49:06:5a:9a:96:9f:52:f6:4b:19:f7:78:
ef:36:99:e2:01:06:67:61:81:ea:40:c2:5a:1b:3b:ec:ef:da:
53:6f:24:b6:70:a9:fd:91:fd:da:bc:bd:e1:b7:c3:50:e8:b9:
50:43:69:48:82:27:a4:fe:40:38:26:f1:e4:a2:72:8b:54:c5:
87:17:44:5a:48:84:99:41:a1:34:a2:49:cb:4c:b6:14:5a:4d:
85:d9:d1:53:fa:70:fe:8f:24:76:c8:b0:8e:5a:e2:9b:c1:a8:
8a:ae:60:b9:95:8c:b9:ba:5b:c1:c4:7a:45:c1:ff:41:9f:87:
cf:5b:28:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:29 2025 by rpki-client