Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
File: IEmVw2J_eqzf4jkV5ELj05AGMa8.mft (raw, json)
Hash identifier: lNBicpEdw3ltQouruxi+kkueqkREad5dOu9vk+3/Q04=
Subject key identifier: 92:78:24:A6:43:1C:7D:BB:09:BD:05:BA:55:CF:53:A9:73:A0:D4:B5
Authority key identifier: 20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF
Certificate issuer: /CN=204995c3627f7aacdfe23915e442e3d3900631af
Certificate serial: 01988BEA9DDD4C1B921A895011680CB2D55A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
Manifest number: 06D1
Signing time: Fri 08 Aug 2025 23:01:05 +0000
Manifest this update: Fri 08 Aug 2025 23:01:05 +0000
Manifest next update: Sat 09 Aug 2025 23:01:05 +0000
Files and hashes: 1: 9-7PXLkycA5xYo3u8CzH5ezxMXA.roa (hash: LxSeuXbVik2u1NmfM2g79qr+/r9wrH4InvPIstg23Fs=)
2: IEmVw2J_eqzf4jkV5ELj05AGMa8.crl (hash: aFEfAipbLTxrjRihsjW12ExuBTxrwfNYcfDGuPyHjqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:9d:dd:4c:1b:92:1a:89:50:11:68:0c:b2:d5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204995c3627f7aacdfe23915e442e3d3900631af
Validity
Not Before: Aug 8 23:01:05 2025 GMT
Not After : Aug 9 23:01:05 2025 GMT
Subject: CN=927824a6431c7dbb09bd05ba55cf53a973a0d4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:29:b2:12:80:56:0d:38:73:fb:d9:b9:30:8e:
f1:b5:5d:da:bb:73:52:54:69:e7:9e:e6:ca:fe:5b:
17:de:c3:9b:10:03:55:f7:86:ab:aa:88:5a:f3:a6:
f4:11:b2:30:b8:d7:d6:8d:f7:ee:77:96:0c:55:6d:
5e:f0:46:23:11:59:5a:ce:4d:6a:05:7f:0e:c4:89:
e5:b7:8d:56:ed:ff:39:33:86:3c:7b:25:a5:07:f7:
0c:f9:a4:79:2a:9f:93:34:70:28:8e:5b:7c:5a:1d:
35:fa:27:ae:a7:20:be:ee:e5:cb:5d:6d:62:8d:b3:
1d:f6:f4:a5:d0:b0:39:13:76:8c:f7:97:4e:fa:14:
e9:cf:ff:3a:7c:f7:a6:26:a9:25:c4:61:31:40:ac:
62:82:30:30:9b:82:40:2a:1e:df:71:69:30:43:f6:
8f:e8:61:88:4d:3b:4a:ea:4d:ca:fe:68:28:5c:0e:
2b:7d:29:a8:11:d1:17:dd:f2:d6:36:5a:ee:e7:dc:
11:28:ac:e9:3f:16:a9:0a:3e:a6:eb:02:2f:5e:33:
57:b0:38:32:df:09:4d:1c:f1:1e:7f:83:00:0c:5e:
18:be:e9:94:c7:6d:d3:2c:be:66:66:93:8d:3d:09:
76:01:ca:5e:51:7e:7b:14:27:2b:6b:4e:88:22:a7:
1c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:78:24:A6:43:1C:7D:BB:09:BD:05:BA:55:CF:53:A9:73:A0:D4:B5
X509v3 Authority Key Identifier:
keyid:20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:5b:58:1c:4c:ea:23:a9:fc:9f:4a:80:cc:da:41:ae:7a:a4:
23:2e:29:af:62:11:a9:24:14:df:2b:b2:c5:7f:98:03:1d:50:
85:4b:fc:65:42:32:17:91:6f:9b:c6:68:13:7b:80:ec:25:35:
0d:30:a3:e8:47:64:ab:55:b7:60:fe:db:d1:2b:c9:38:32:f3:
a9:cf:65:26:01:01:50:2d:a6:67:55:5d:fe:3b:90:c0:5f:4c:
b8:cd:a5:4d:2f:02:bd:ec:84:30:92:02:f4:40:3a:e6:35:13:
56:21:99:b6:e9:3d:cd:e6:a7:64:e6:8a:8b:37:cd:6f:76:84:
fc:33:92:b0:1d:b6:ac:2d:87:44:68:27:82:21:6d:ca:51:9f:
cc:77:02:14:22:94:bb:77:e8:fc:d9:2b:85:84:25:c8:b9:a5:
35:0c:d9:71:20:5c:e4:6f:df:94:d2:8d:07:06:a2:7e:81:99:
3c:07:3a:7c:83:2b:89:68:3c:9f:24:3c:63:36:c1:d9:16:e9:
06:32:14:9e:48:62:cf:0d:bc:a1:4a:3c:b9:42:b8:aa:95:37:
d4:cc:00:7d:75:99:57:5c:0c:f8:94:95:91:85:b1:a1:1f:a7:
fe:a8:a4:3c:8c:ff:0b:9e:ad:d0:fe:67:1e:a6:68:e1:66:8a:
28:67:28:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:56:38 2025 by rpki-client