Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft
File: Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft (raw, json)
Hash identifier: uIQsGpplv1Je+VhoaFyM8SD0uz+XGdoVea6zKeTuxW8=
Subject key identifier: 5A:86:8A:DD:C4:59:EA:04:09:AE:80:C0:F4:49:79:F8:63:EE:35:E8
Authority key identifier: 23:28:72:F4:31:AD:A9:B6:82:6C:5F:08:97:EC:4E:53:42:09:2E:98
Certificate issuer: /CN=232872f431ada9b6826c5f0897ec4e5342092e98
Certificate serial: 0198481B933D1807AAE6ABD56C5D330BC126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft
Manifest number: 0360
Signing time: Sat 26 Jul 2025 19:00:23 +0000
Manifest this update: Sat 26 Jul 2025 19:00:23 +0000
Manifest next update: Sun 27 Jul 2025 19:00:23 +0000
Files and hashes: 1: 48SAL-XLUksWWK1voy4rKInz7oY.roa (hash: gFJO835mNcJuKRXk34iwBhwCN0pZ40KaHdrECvT9LmA=)
2: Iyhy9DGtqbaCbF8Il-xOU0IJLpg.crl (hash: EZBWJgQlDRRU/whNdJbHwT0QoGO8f8VljJraNkQ+ngc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:93:3d:18:07:aa:e6:ab:d5:6c:5d:33:0b:c1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=232872f431ada9b6826c5f0897ec4e5342092e98
Validity
Not Before: Jul 26 19:00:23 2025 GMT
Not After : Jul 27 19:00:23 2025 GMT
Subject: CN=5a868addc459ea0409ae80c0f44979f863ee35e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:de:86:e4:1a:c5:4b:4a:79:93:1b:f5:95:d5:
1a:a7:0d:d2:b5:d2:39:00:13:6f:1d:b4:d5:08:14:
52:a7:23:6f:58:71:53:b1:84:ac:78:90:34:01:5c:
da:71:e8:35:c2:bb:bb:65:78:1f:ed:b1:ee:63:7f:
7e:c8:93:91:cc:18:72:d1:b0:ce:5f:4c:f5:e5:49:
11:f9:d8:cf:fe:f2:7c:24:eb:0c:e6:35:cf:6a:e8:
49:ec:7f:c9:3c:fc:e0:5b:f7:be:58:2f:00:21:ae:
e3:46:73:c9:39:c5:f7:3f:27:f0:b6:26:d8:b8:9d:
82:88:bb:fc:fd:a1:3e:a0:c0:a5:cb:cd:55:64:5d:
c2:61:29:24:52:9e:79:a1:cf:c3:b7:90:fa:7c:a0:
16:00:ef:f0:c3:6f:ee:ab:a5:f7:4a:68:75:c5:18:
a9:64:87:25:b4:09:28:f8:6c:d6:f7:30:88:5b:e7:
44:93:e5:14:fa:e7:60:71:81:b7:37:75:7e:43:3b:
1d:3e:d3:c0:ec:04:5c:c8:65:af:36:54:6d:61:06:
20:73:87:fc:71:a4:c7:eb:d2:96:37:ca:e0:d1:22:
5b:f3:bc:07:3c:06:52:17:37:09:a6:df:04:0d:4c:
79:44:eb:64:4b:ac:4b:39:bd:0b:f4:8e:67:8d:a9:
87:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:86:8A:DD:C4:59:EA:04:09:AE:80:C0:F4:49:79:F8:63:EE:35:E8
X509v3 Authority Key Identifier:
keyid:23:28:72:F4:31:AD:A9:B6:82:6C:5F:08:97:EC:4E:53:42:09:2E:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7472f9-b403-42e0-b306-71aa63125128/1/Iyhy9DGtqbaCbF8Il-xOU0IJLpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1b:f1:2a:cc:26:69:12:17:84:a1:9e:67:d6:eb:5d:97:b0:
22:d1:2d:85:4b:e2:24:36:4d:5b:95:62:c8:24:41:3a:43:17:
11:46:e7:77:f5:30:19:2c:87:a0:1c:48:ea:1d:80:54:04:1c:
14:6d:e5:f9:1f:14:b0:d3:54:87:77:0d:2b:d3:f9:e4:36:d5:
71:ef:e5:01:f8:67:bb:7e:0b:01:50:39:f9:5d:e6:14:df:9c:
1c:6b:a0:c4:7c:a2:7d:a3:d3:e2:8f:a6:f3:21:2c:99:50:b2:
42:0a:2f:2b:a7:dc:e2:83:7a:2c:88:94:55:55:3a:22:52:da:
7b:03:1e:0c:80:13:99:f6:11:17:2a:8e:42:39:3d:8c:35:af:
e4:bd:81:bb:f7:f3:6d:2a:cb:ff:1f:d4:d1:38:08:c4:89:f6:
9e:3b:7a:a1:d0:fc:6b:b3:a3:e5:61:d0:6d:af:de:d2:21:c7:
d6:77:fb:93:45:84:51:c0:53:08:ce:fa:0c:34:53:12:d3:dc:
15:57:65:68:dd:ba:50:8f:8f:d4:b1:6c:14:89:0c:39:8b:fa:
27:1f:00:be:48:78:3b:80:9d:4d:e8:5e:dc:66:44:a0:4f:a5:
96:7a:bd:30:17:e4:1a:71:70:7d:bf:41:00:b2:af:2f:22:bb:
93:c5:6c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 22:32:24 2025 by rpki-client