Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
File: iXA6mCNRKxjRduNi6gI8qCR4TSI.mft (raw, json)
Hash identifier: Uqf+XmkOmlXxaMjgT5wAgaWUdxPoKD6TIE5h5UcMT1w=
Subject key identifier: A4:D4:52:D2:52:48:CC:38:F3:4D:4E:D6:9E:82:E7:E1:9C:03:7F:ED
Authority key identifier: 89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
Certificate issuer: /CN=89703a9823512b18d176e362ea023ca824784d22
Certificate serial: 01989780E3A453D09D6BE16E1B7DFA2E862F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
Manifest number: 1629
Signing time: Mon 11 Aug 2025 05:01:02 +0000
Manifest this update: Mon 11 Aug 2025 05:01:02 +0000
Manifest next update: Tue 12 Aug 2025 05:01:02 +0000
Files and hashes: 1: 8InkRh5Wj50wupapEt3xMMDv2FM.roa (hash: FzSOMTztxVGNTuOuFeKpaH88eAgODwYDPG7DI36h4Cg=)
2: iXA6mCNRKxjRduNi6gI8qCR4TSI.crl (hash: kxqVDOsXp4l24V4qLyOk1AymxiPwvrIatu2VQkxhmro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:80:e3:a4:53:d0:9d:6b:e1:6e:1b:7d:fa:2e:86:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89703a9823512b18d176e362ea023ca824784d22
Validity
Not Before: Aug 11 05:01:02 2025 GMT
Not After : Aug 12 05:01:02 2025 GMT
Subject: CN=a4d452d25248cc38f34d4ed69e82e7e19c037fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:17:01:7b:ee:36:44:f2:09:8c:cc:cf:ce:53:
83:2d:64:c8:4e:89:86:2a:20:28:8a:0b:1a:cf:1c:
7b:6a:fa:25:1d:e8:a2:b8:24:3f:c6:1e:b2:75:9d:
72:6e:49:e9:71:26:53:3a:e7:93:9e:e2:8e:49:0e:
dc:0e:aa:9c:ba:ab:aa:10:3b:05:0d:5a:d4:d6:06:
d0:de:25:ef:0f:98:97:b8:9e:e5:44:ac:8d:ab:fa:
59:84:6e:25:8f:84:b1:02:bf:b6:86:f6:1c:de:42:
e8:da:ee:02:26:e6:f5:a7:20:11:3c:62:87:38:b6:
52:95:66:98:dc:e0:00:84:7c:be:c2:3e:6d:24:6f:
44:8a:48:d0:46:bc:eb:ae:6b:db:3f:c7:01:67:d9:
58:63:d7:8b:93:d1:ca:d2:34:d4:ca:dd:fb:26:fe:
4d:2f:e0:1a:76:22:26:e7:82:97:46:49:48:69:f7:
57:0c:81:75:d4:07:da:50:74:f7:bc:fb:83:9f:9d:
f2:11:fd:ac:bf:8c:0a:d1:f2:e0:b3:f6:cb:fa:4a:
ff:58:6a:84:ba:ee:49:12:a9:6c:ad:ad:f6:2b:05:
ec:17:1c:ea:39:90:24:fa:32:80:1d:4a:8d:1c:13:
95:e7:07:4d:b3:cb:90:f6:eb:55:a3:65:9d:a9:3a:
7e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D4:52:D2:52:48:CC:38:F3:4D:4E:D6:9E:82:E7:E1:9C:03:7F:ED
X509v3 Authority Key Identifier:
keyid:89:70:3A:98:23:51:2B:18:D1:76:E3:62:EA:02:3C:A8:24:78:4D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXA6mCNRKxjRduNi6gI8qCR4TSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/681e1e-7f3f-4ea8-af30-522690be548d/1/iXA6mCNRKxjRduNi6gI8qCR4TSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:00:1b:c4:4e:de:45:ec:f3:67:b7:8b:c7:07:37:34:ed:d3:
81:6a:c5:86:9f:a7:eb:f6:04:16:4e:69:a2:ba:71:43:7b:a8:
9b:59:a4:f9:17:e5:f6:d9:a9:3a:4d:76:fa:15:9a:d7:08:45:
ed:7e:f9:74:c5:ff:a7:c6:36:f0:b7:2d:18:a6:81:80:5f:91:
8c:ce:3b:62:eb:96:a6:af:11:ae:a0:fb:2b:48:e4:88:79:98:
65:0a:2b:da:49:d0:b1:2f:4d:48:02:5e:99:b8:54:a4:72:1b:
2b:76:6e:e0:90:3a:17:f2:ac:af:2c:bd:e8:17:c9:b7:b0:fd:
d0:68:d5:6d:2a:95:38:54:f7:b8:9b:65:a9:2a:96:09:5c:db:
b2:21:15:15:d0:85:1e:b4:83:e0:27:d3:04:86:50:25:6e:ea:
08:c3:00:9a:1c:24:9d:52:f3:46:8f:7c:e8:e4:87:87:04:41:
12:69:84:63:12:3f:29:40:97:31:b0:6d:ca:a7:03:07:fc:5f:
d3:e4:8e:1e:b7:de:ee:33:2a:4e:7f:92:f0:e7:26:65:94:9c:
f5:81:7d:a0:7d:c5:15:28:b8:38:09:79:fb:75:7b:88:a1:91:
1f:f7:4b:c4:a3:b2:d7:ec:de:d2:d2:3f:0f:50:5f:41:6e:e7:
19:c7:45:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:19 2025 by rpki-client