Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
File: IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft (raw, json)
Hash identifier: OJZoORUW1dJn449smK/bgZHX7iDkdQrJzMfz7WcntJI=
Subject key identifier: C4:ED:8B:4D:29:8C:A2:96:E6:A9:41:35:A2:DB:CD:99:37:D4:42:D5
Authority key identifier: 21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61
Certificate issuer: /CN=218af26f9a36653f4d996719d4a410fe84af4861
Certificate serial: 019873066F6C60A7E55592D98E441AB52B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
Manifest number: 04DB
Signing time: Mon 04 Aug 2025 03:00:58 +0000
Manifest this update: Mon 04 Aug 2025 03:00:58 +0000
Manifest next update: Tue 05 Aug 2025 03:00:58 +0000
Files and hashes: 1: 8aRFc9FMZuB39L9ezbDQe4rTWqI.roa (hash: d0kPdTmIfua7sOVHFgh6TKa6BfDr4mbqEziPITcO1vw=)
2: IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl (hash: NRH+pkBOGszD+vi/mJBbhJCry21PGsvsiWF0qGlfz9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:6f:6c:60:a7:e5:55:92:d9:8e:44:1a:b5:2b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218af26f9a36653f4d996719d4a410fe84af4861
Validity
Not Before: Aug 4 03:00:58 2025 GMT
Not After : Aug 5 03:00:58 2025 GMT
Subject: CN=c4ed8b4d298ca296e6a94135a2dbcd9937d442d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9a:91:29:29:fd:0b:71:ad:83:0e:07:7c:20:
7e:d4:cc:18:e4:f3:48:0f:80:f5:93:23:fa:98:2c:
35:8e:c1:46:af:5a:c7:97:56:3e:9b:07:9b:b4:67:
6e:6a:e9:48:0a:6f:6c:cd:2a:09:17:d9:c9:88:22:
1e:e4:1c:fa:a1:38:fa:a2:46:1b:37:20:92:26:68:
57:2d:ed:35:19:f0:87:b5:05:7c:aa:52:8a:0b:61:
9c:c1:fe:19:b1:05:a3:64:9d:7f:e7:2d:0f:a4:7b:
63:29:73:3d:7f:03:4d:1e:ca:21:36:83:aa:48:51:
78:04:72:8f:87:bf:cb:64:96:de:06:8d:c1:68:04:
b1:5b:2d:26:bb:21:e9:01:54:72:95:9b:d0:f9:bd:
e8:ec:2f:c0:92:21:3b:d6:e2:bd:a8:8a:1c:26:d9:
89:59:7c:22:bc:0f:d0:8f:72:69:01:7d:74:c7:22:
5b:e7:77:96:d4:01:34:2d:6f:5c:40:db:3e:6f:53:
cf:e8:94:e3:64:97:59:4b:d4:bf:b1:80:61:d7:73:
c3:d8:1d:f2:a3:5e:15:5f:a4:39:4d:e5:35:d1:51:
60:4b:64:80:61:fe:ba:ae:b6:5b:b8:d5:4e:66:a1:
92:9c:4c:ee:bc:11:a0:f6:73:18:d9:1f:ea:26:34:
f0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:ED:8B:4D:29:8C:A2:96:E6:A9:41:35:A2:DB:CD:99:37:D4:42:D5
X509v3 Authority Key Identifier:
keyid:21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ba:42:5a:47:89:75:f9:94:2d:ab:04:75:eb:b2:dd:7e:71:
45:4e:16:5e:f6:b0:06:88:6d:14:2e:6a:53:7c:36:19:b9:4b:
dc:c9:9a:c4:52:b6:8d:3b:97:d1:6a:77:78:dd:57:14:86:f2:
5d:ef:c4:ee:3f:77:1f:2e:9c:ae:50:41:34:01:b7:b4:19:4b:
9d:0b:6d:14:1f:44:fc:d1:62:d0:af:80:af:14:ef:ca:a9:04:
dd:cc:0f:75:10:ec:11:d1:3b:91:45:43:21:14:48:f7:db:85:
0a:b5:95:26:33:fa:29:59:ef:d5:83:8e:ea:ea:9d:12:aa:5e:
01:c8:6c:93:6a:87:13:d4:43:80:67:26:42:5a:01:44:0f:f5:
5e:73:83:11:7f:ad:27:05:4c:4c:e8:00:4b:f3:d1:94:f4:f9:
d0:c8:c0:c1:f7:b6:fb:cd:06:90:09:fb:07:0d:e7:34:cf:7c:
d4:8c:1a:2f:43:33:bc:4e:78:59:74:25:e6:40:6e:3f:9b:23:
88:8c:2c:ab:23:17:f2:70:60:1c:54:fa:7d:3e:d0:f3:ae:c1:
61:0c:75:47:1a:92:c4:da:fc:0f:60:a8:5e:f2:60:94:1b:16:
36:e6:6f:e6:da:36:4e:29:af:1e:0d:79:be:df:41:84:89:ec:
28:12:54:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:35 2025 by rpki-client