Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
File: ifnCFo0tgt39inBjfUQBivMLH5c.mft (raw, json)
Hash identifier: NGE6mYEj8PRI7pawlZ8TmHbGjaUriPFFcQbH/41FbcM=
Subject key identifier: 97:EE:65:42:21:35:47:DD:6A:F8:11:00:2A:2B:63:29:3E:BC:72:44
Authority key identifier: 89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
Certificate issuer: /CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Certificate serial: 01987C0A26FC19AB3E736B422ED9BCDC7651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
Manifest number: 0153
Signing time: Tue 05 Aug 2025 21:01:36 +0000
Manifest this update: Tue 05 Aug 2025 21:01:36 +0000
Manifest next update: Wed 06 Aug 2025 21:01:36 +0000
Files and hashes: 1: ifnCFo0tgt39inBjfUQBivMLH5c.crl (hash: tNklyz0IDUVuCyNpxy2rqN9ccSTXSXz6dnme5Yjv5Fo=)
2: spqKrZZlSshpL2qYZip0d0WaBBs.roa (hash: nNDCN5SzdqIQPR24IlLa7l1TyfR2hVXqn06sMz/jemo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:0a:26:fc:19:ab:3e:73:6b:42:2e:d9:bc:dc:76:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Validity
Not Before: Aug 5 21:01:36 2025 GMT
Not After : Aug 6 21:01:36 2025 GMT
Subject: CN=97ee6542213547dd6af811002a2b63293ebc7244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5c:60:f8:7c:0f:4e:de:33:ad:78:4c:2a:45:
3b:11:26:40:3e:30:11:6d:ee:a9:79:bb:33:2a:4e:
1b:5b:c0:45:67:7f:36:9c:be:14:60:bb:74:32:3f:
ed:f9:dc:04:6f:7d:53:8b:79:b0:ff:57:f2:0a:48:
5f:fd:5e:e3:ae:e9:d1:9a:6b:23:95:fb:56:a5:6a:
61:84:b9:fa:88:0e:c7:3b:6c:dd:5e:43:2e:0e:3d:
0f:09:19:61:99:25:55:ff:ef:23:e8:e5:78:04:72:
4c:3c:27:0a:ba:d5:41:f3:52:ea:04:56:cd:c6:11:
29:36:89:b2:6b:45:88:2c:55:de:6c:cf:00:bf:e2:
21:d9:96:7b:27:95:7a:60:35:a5:34:b3:fd:33:77:
95:ff:39:09:bd:ec:9c:cf:a9:f6:44:0c:23:7d:45:
58:63:0e:11:8b:f9:a7:ed:7b:00:8a:28:85:2e:7d:
90:a7:53:7d:30:e7:84:7b:ba:ca:c1:ec:8b:12:4b:
ad:bf:0b:e1:db:53:af:66:12:66:7a:c3:f5:85:3e:
57:de:f5:af:66:21:7a:d4:9c:d5:dc:7c:d4:07:31:
cb:25:a4:27:e3:12:8c:af:26:fc:0c:d9:03:0d:03:
b8:37:05:0b:e7:62:27:92:6d:f5:1a:48:e7:63:c5:
91:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EE:65:42:21:35:47:DD:6A:F8:11:00:2A:2B:63:29:3E:BC:72:44
X509v3 Authority Key Identifier:
keyid:89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b3:08:4a:d9:a2:f8:cc:14:81:30:56:60:96:66:88:fd:95:
6e:db:09:14:a7:d1:b9:9f:e1:eb:f0:52:89:59:4d:92:7c:9b:
25:99:83:f3:85:ef:59:80:fb:bf:dc:13:fe:2c:8f:2e:cb:b7:
0f:7d:6f:39:3a:51:44:f4:11:65:74:cb:68:18:7c:76:f9:9e:
99:a6:35:49:a5:53:a5:97:d4:8c:38:49:b7:97:5a:5e:ba:e0:
fc:1d:44:55:df:74:1f:ac:58:3d:15:60:b2:70:1e:2f:ad:24:
13:0e:b8:ca:51:2a:54:6d:b1:af:ea:6a:6d:13:89:e2:7d:86:
4e:34:5c:31:73:fd:69:df:d8:8c:16:d2:68:9b:26:56:1c:52:
1e:2f:87:f9:76:3f:5a:ee:d1:e3:0c:2a:dc:3a:bc:b1:bd:f5:
c6:86:87:ab:34:8f:72:9b:a1:b7:1b:2f:07:e0:ee:41:0c:6c:
e0:46:a6:33:a0:e2:c1:9a:e1:bc:53:c6:f2:c4:59:fa:bc:c9:
f6:4d:06:cd:b8:c5:d2:40:d1:2e:a4:f0:fd:79:3f:4b:1a:a2:
ad:35:7a:e3:10:df:26:66:fa:0a:7f:7c:5e:a6:d0:61:bd:8d:
60:4d:00:91:f7:df:1a:2d:ca:a6:3c:0d:27:d7:86:da:df:cb:
3b:36:d9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:57:12 2025 by rpki-client