Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
File: IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft (raw, json)
Hash identifier: GS3aW3H9lJaPgdu1n2VxulhqfBxySyR+ZCOo4K5EM5U=
Subject key identifier: E1:24:AA:8E:CE:26:C5:E8:D9:92:50:3B:EE:85:06:A7:CE:AC:42:D8
Authority key identifier: 20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57
Certificate issuer: /CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757
Certificate serial: 01987DC0D9D989565B6E8DB50ED75C83FC48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 05:00:47 +0000
Manifest this update: Wed 06 Aug 2025 05:00:47 +0000
Manifest next update: Thu 07 Aug 2025 05:00:47 +0000
Files and hashes: 1: EoTaeWkOJz05rIXfnxtfbquyeqw.roa (hash: YVkUO2wCaslx/q3WOT6glv2Y26dcalE699S2nCt2534=)
2: IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl (hash: BQwrwA4eogrByBmTNHKgXQKmyuE5yvG5a2rvIbyW7wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:d9:d9:89:56:5b:6e:8d:b5:0e:d7:5c:83:fc:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757
Validity
Not Before: Aug 6 05:00:47 2025 GMT
Not After : Aug 7 05:00:47 2025 GMT
Subject: CN=e124aa8ece26c5e8d992503bee8506a7ceac42d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a3:81:36:a1:09:01:37:b7:f1:14:9d:97:5b:
94:c0:1d:67:3d:70:03:77:aa:2d:a9:61:d5:b4:15:
4d:a4:bb:c5:28:8a:57:67:14:6b:be:d4:81:ca:c9:
63:89:0b:89:53:c3:c5:ce:dd:a2:f0:25:c0:ed:68:
51:b5:6a:ff:62:0c:14:75:49:f0:21:ad:33:f4:9f:
57:c2:9d:b9:a6:60:ce:33:f7:64:fe:79:06:43:d7:
84:3e:00:11:15:8d:77:1b:e0:44:b7:6a:f6:0d:e2:
7a:37:1e:fb:91:30:91:6d:8b:ba:26:3b:22:92:e3:
08:71:40:e8:c0:f4:1a:92:a0:cd:79:9b:77:f9:ed:
a0:e4:1b:f1:15:b3:fa:c6:94:6a:f3:6f:ad:f3:a1:
aa:dd:1f:b9:83:11:5e:7a:d7:64:93:93:ce:d8:25:
22:30:5a:c4:9b:fa:a8:1f:35:94:d5:05:f2:67:52:
b7:e5:22:5a:3e:b4:26:22:01:bf:b8:ab:16:51:ef:
4e:7a:a1:20:9f:b7:0e:85:c8:fb:ef:70:13:d4:91:
f8:d0:ae:3f:7e:c0:05:b3:35:9d:9d:11:ad:34:9a:
e9:f6:ab:50:5c:6b:3b:7d:b5:62:dc:c8:1b:23:ed:
31:a9:11:63:d7:af:29:6b:2e:99:d9:8c:03:46:93:
16:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:24:AA:8E:CE:26:C5:E8:D9:92:50:3B:EE:85:06:A7:CE:AC:42:D8
X509v3 Authority Key Identifier:
keyid:20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f1:1c:60:e8:7d:a0:37:89:23:45:e1:a1:e8:8c:bf:93:fe:
ec:05:ed:79:7a:c5:0c:fc:fe:df:73:0a:ad:b1:7d:c0:65:4c:
a9:96:c8:3f:67:97:48:c2:fc:66:cd:d2:e5:46:25:37:94:f2:
12:f4:b5:5b:9f:0e:60:aa:85:47:19:e7:f8:e1:99:f0:86:d7:
3b:cc:6d:1b:29:95:ea:eb:cf:6a:20:0c:8d:58:7c:65:74:e5:
1d:c2:40:8b:83:69:45:5c:1d:e0:3d:32:ce:47:a2:34:d6:31:
b2:fc:b0:6e:ff:a7:6a:99:9d:05:4b:7e:8b:d9:02:7c:3b:62:
94:c2:be:71:54:26:33:5e:b8:c7:ba:db:e2:0c:51:e6:9b:a5:
e3:31:a6:61:06:7c:fa:f3:12:e2:13:30:80:49:94:6e:86:b0:
90:bc:ad:32:d5:5a:38:59:cc:08:b2:9f:75:14:35:91:a9:e1:
fc:33:d3:99:3e:fb:2e:6f:b9:95:5d:99:d2:7a:fb:f5:2d:a9:
41:91:d3:27:4a:54:ed:d6:cb:40:b6:d2:eb:e3:c6:a9:49:9c:
5f:dc:11:bd:40:f8:63:af:62:65:48:03:25:bb:32:6a:c3:28:
38:4f:63:aa:46:fa:91:ac:cc:a0:ef:5e:a4:0b:85:54:3e:6d:
3f:7d:2e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:16:39 2025 by rpki-client