Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
File: IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft (raw, json)
Hash identifier: UeLkZRKQQXhN7PR16BLsPmvimnG2ZVA/8RsaOZKfhXM=
Subject key identifier: B5:F8:7F:92:26:89:DF:5F:48:94:BB:EE:B8:F4:58:3C:4E:03:2D:68
Authority key identifier: 22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC
Certificate issuer: /CN=2213007596493802fb93a326731fd3329eae2dac
Certificate serial: 019873E3F46603B108D6C069F663175B2A6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:02:55 +0000
Manifest this update: Mon 04 Aug 2025 07:02:55 +0000
Manifest next update: Tue 05 Aug 2025 07:02:55 +0000
Files and hashes: 1: DjsbeUScAR9EUfRE070QFYOZXx0.roa (hash: Jj0CL6iZxJ5XW4ZpctnqFGBbj6Ygbs9fspzlTAigxwY=)
2: IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl (hash: KF7Id1SnwmHbxo6CEQ/gvfRGMhl3HrH0IZQGsNNGYTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:f4:66:03:b1:08:d6:c0:69:f6:63:17:5b:2a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2213007596493802fb93a326731fd3329eae2dac
Validity
Not Before: Aug 4 07:02:55 2025 GMT
Not After : Aug 5 07:02:55 2025 GMT
Subject: CN=b5f87f922689df5f4894bbeeb8f4583c4e032d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:6c:3f:11:93:62:72:df:6b:0c:a3:b8:cf:
71:aa:76:8a:23:a9:2e:03:91:be:95:b3:f1:23:70:
00:e4:8b:05:2e:6e:b7:8b:97:5b:df:cb:3d:5d:d9:
53:67:bf:d9:df:d8:66:8c:1d:41:e3:62:d0:58:b5:
51:51:00:5d:af:b1:50:b2:e9:3c:0f:4d:9b:08:1e:
8f:41:7e:ab:80:e6:7e:6d:d0:d9:99:cb:9d:18:75:
ce:ff:b5:a1:0a:89:54:c4:f0:a4:1b:42:25:89:a2:
59:e9:af:05:0f:5a:bf:7e:3d:7f:2c:4d:49:4b:46:
7f:31:0d:64:b0:32:96:d5:37:3e:c6:3e:e1:88:07:
d9:7f:00:5b:7f:fc:c4:c7:bd:7e:f5:46:43:15:11:
e8:4a:bd:7f:80:7f:52:3e:20:04:91:ee:45:d5:0a:
20:cd:3e:96:2f:1f:c9:52:54:93:f3:f3:bd:7d:b5:
25:1e:02:2b:51:e8:2c:7c:c9:99:e4:a6:2f:62:be:
60:5a:63:15:67:22:ad:ed:d5:28:f7:32:38:d5:5e:
55:12:c9:c9:52:25:c5:ea:67:2a:0e:92:d6:ac:7c:
9b:17:94:cf:57:38:20:75:4b:63:be:05:64:1a:7e:
f7:1a:1e:94:f3:6a:b1:86:ac:10:5e:c8:86:e6:fe:
64:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F8:7F:92:26:89:DF:5F:48:94:BB:EE:B8:F4:58:3C:4E:03:2D:68
X509v3 Authority Key Identifier:
keyid:22:13:00:75:96:49:38:02:FB:93:A3:26:73:1F:D3:32:9E:AE:2D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a80963-3089-4ac4-af4f-3c8717414d80/1/IhMAdZZJOAL7k6Mmcx_TMp6uLaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:7a:99:92:d6:53:03:ae:fb:cb:1b:d3:d6:d0:4b:46:e0:c6:
f6:dd:43:5f:57:9d:b7:9c:bf:0b:ae:a8:27:04:28:9d:0b:46:
3f:a4:2b:7a:50:cf:b2:b8:d1:b0:41:2c:f2:2e:78:f7:27:ff:
16:dc:a5:34:b0:55:4b:b0:28:29:6b:8d:14:59:c8:ed:2a:4c:
07:7d:e5:ae:0d:21:9a:ea:34:ea:50:6f:11:db:bd:a8:57:7f:
c7:fc:cb:5b:bb:33:7f:ac:05:7c:b9:f4:54:e1:82:8b:5f:f9:
10:c5:b9:14:1c:6c:1d:66:b7:03:92:77:72:bb:dd:b6:a3:43:
29:2d:35:25:80:f1:25:7c:bd:a0:8a:90:a8:b6:83:1e:ea:ba:
24:eb:73:d0:c6:45:60:28:dc:2a:76:16:be:69:72:04:20:79:
e2:27:9e:ca:b1:67:90:76:f0:9a:64:40:fc:24:62:81:99:65:
50:34:6c:5a:95:db:d8:e3:3f:72:f6:84:ab:89:7d:7a:4a:c7:
ec:79:ea:d6:18:fa:23:1d:e0:d9:30:fa:64:ea:01:a0:81:f9:
07:1c:32:97:d3:91:4a:29:fc:63:f2:f5:ab:5c:2c:73:f9:7c:
2e:e3:ca:51:a1:4b:a0:d5:1e:da:1c:4e:23:d8:5b:26:5b:fc:
67:36:a4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:31 2025 by rpki-client