
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
File: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft (raw, json)
Hash identifier: P8qXtQ4toBpxVSzlCRs181nec+TgVs8Wj1mTLCo9NcQ=
Subject key identifier: 11:0E:46:CA:C7:42:F9:52:70:0E:C7:61:C4:EE:32:14:D4:65:2F:70
Authority key identifier: 23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
Certificate issuer: /CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Certificate serial: 0198808B519BCAC3E0E639FD8413360A48FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
Manifest number: 0B99
Signing time: Wed 06 Aug 2025 18:01:10 +0000
Manifest this update: Wed 06 Aug 2025 18:01:10 +0000
Manifest next update: Thu 07 Aug 2025 18:01:10 +0000
Files and hashes: 1: IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl (hash: yyzRxcDvqO+XK66GOEIeYXGkoOydOxHRxKjysgz3BBk=)
2: LCSxsz-FQ4GzwZw8Odnzg4_wz4s.roa (hash: cOtRnPje7E9WAoJFvY2RM5FM1p4R+PS2ZqyaTPw4hic=)
3: WWsWrGhHJPhxsXXJtUhA3vzECwE.roa (hash: LLPjYgAmQluoQLBe3s0wxjIyXNJ82uAq8ra1WEAoLDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:51:9b:ca:c3:e0:e6:39:fd:84:13:36:0a:48:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2330e26060913c758137488bfd7ab1bfe9e10ae2
Validity
Not Before: Aug 6 18:01:10 2025 GMT
Not After : Aug 7 18:01:10 2025 GMT
Subject: CN=110e46cac742f952700ec761c4ee3214d4652f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:11:6b:c1:3b:05:82:53:49:5e:25:5a:91:5c:
40:4e:fa:39:1f:44:fe:bf:54:37:9f:88:4e:45:12:
25:f9:2b:af:e7:39:6d:4a:62:db:fe:31:01:ca:3f:
18:86:a3:9b:00:62:da:4d:c0:b1:c0:a0:3a:ac:46:
c1:62:2c:d8:f3:ef:a4:a8:e0:7c:ef:d9:f9:3b:3d:
34:42:80:07:9d:1d:61:64:3a:0f:8c:a6:0c:81:a9:
3d:50:d6:a0:d1:47:02:1c:a4:41:94:49:f8:3b:f0:
bd:fa:ac:5c:ad:4f:12:9b:49:4b:45:20:02:e8:b9:
3a:02:5f:34:3e:a1:d9:93:d5:5a:b1:9e:49:f1:2e:
a1:04:98:df:0d:87:2b:ce:ce:03:d2:c3:6a:5f:91:
ee:5b:57:99:22:e2:e8:9c:58:14:5f:7e:b3:c7:85:
c4:e0:40:f5:07:c0:00:99:c5:9e:df:63:b4:01:76:
3f:81:3a:b9:40:df:5f:cc:0a:76:aa:4d:8f:49:1f:
71:3e:64:d6:ae:05:ea:3c:69:f4:22:e4:ab:38:40:
26:97:96:b8:b9:57:71:01:fe:83:04:c0:48:13:fe:
18:10:fa:c9:e4:0b:09:a2:df:6c:fe:63:ec:56:f7:
fd:81:52:09:b4:bc:9a:c8:93:b7:eb:e3:24:df:a1:
09:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0E:46:CA:C7:42:F9:52:70:0E:C7:61:C4:EE:32:14:D4:65:2F:70
X509v3 Authority Key Identifier:
keyid:23:30:E2:60:60:91:3C:75:81:37:48:8B:FD:7A:B1:BF:E9:E1:0A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4690c0-0b91-4322-94b9-706782cfa03b/1/IzDiYGCRPHWBN0iL_Xqxv-nhCuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e2:e4:d0:c2:ea:bc:ad:bf:a2:c3:d1:7c:ea:02:86:97:a1:
85:08:71:06:2d:0f:e9:d5:bd:7a:26:bb:ed:05:9d:2e:c2:ad:
46:6f:ed:f4:46:6a:0b:fc:fd:a1:db:bd:51:e5:86:27:c4:ec:
22:73:e0:8b:42:52:c0:8f:33:ac:b7:93:45:38:a8:97:a0:11:
a8:13:69:2f:15:4e:2e:19:17:6c:e0:13:76:ed:62:75:18:fe:
1b:c1:53:13:cf:d0:fa:e8:ff:36:d7:93:c9:92:36:15:27:4b:
47:ae:ad:65:97:93:e9:20:55:66:36:52:16:2a:25:b6:ea:ee:
e1:63:60:1b:10:57:e7:ad:c5:af:fb:e3:19:f3:d9:57:6c:f1:
43:f6:64:46:ee:8e:8b:4a:c4:32:7b:78:79:d0:8b:b7:ba:5a:
7f:e5:b3:91:e4:44:88:d1:64:08:eb:a2:8b:08:28:f3:e6:47:
df:f3:35:0e:68:46:3f:27:4c:f6:58:d4:f9:84:4e:25:7c:d5:
96:fe:bd:04:68:c9:41:ae:6d:91:09:d2:84:7d:94:12:07:27:
65:e6:f9:7d:44:5b:c5:a4:82:82:fa:96:1e:89:06:8b:c2:db:
c7:fa:9d:08:31:b5:fc:ce:0a:bb:11:07:e7:48:4f:33:33:ee:
20:f5:fb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:29:19 2025 by rpki-client