Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
File: izGWcRDKvuxKZreAN-Uqh7K8j10.mft (raw, json)
Hash identifier: ZDv88e4xOpVAgUg+5Ub5UoXCImsxN+zLy9rZLnVjirE=
Subject key identifier: AF:B9:CA:90:60:C8:F1:0D:6C:AC:3F:40:DE:EE:35:77:74:DD:D2:CD
Authority key identifier: 8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
Certificate issuer: /CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Certificate serial: 0198462D8FDFE0D5345EDCE391AA66EFC379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
Manifest number: 12FB
Signing time: Sat 26 Jul 2025 10:00:47 +0000
Manifest this update: Sat 26 Jul 2025 10:00:47 +0000
Manifest next update: Sun 27 Jul 2025 10:00:47 +0000
Files and hashes: 1: izGWcRDKvuxKZreAN-Uqh7K8j10.crl (hash: GGl8jXJCvgl6sF8BMGYAw00AOhodTjHlTtMFJ5cu/ro=)
2: pb0HpyJZMsT5W8dfe0VOR5LOW_M.roa (hash: 8ccg9QKMd308GM+mOMPhnrelb3Ldijvww8dEm02A/EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:8f:df:e0:d5:34:5e:dc:e3:91:aa:66:ef:c3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Validity
Not Before: Jul 26 10:00:47 2025 GMT
Not After : Jul 27 10:00:47 2025 GMT
Subject: CN=afb9ca9060c8f10d6cac3f40deee357774ddd2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:42:0c:b9:f7:e0:50:f5:4a:eb:bf:6e:41:e4:
23:02:e8:68:5b:fd:08:e7:8c:22:6e:33:fb:3c:9d:
6e:01:cc:44:49:20:36:af:cb:d5:61:5c:9d:9e:a0:
68:49:a4:f6:3e:0c:51:58:bc:cd:f7:1f:62:85:f3:
02:de:74:cb:f0:4d:77:6b:c6:e3:0c:68:ce:f6:03:
1f:41:79:57:ab:cf:dc:0d:8a:9e:fe:d8:67:1a:c9:
a2:4d:4a:78:9c:3a:7e:13:82:e7:c2:4d:c6:68:2c:
cf:22:ff:89:fd:ca:af:35:5d:75:9e:be:5d:96:34:
a9:91:fa:37:95:4a:71:3f:53:10:cd:07:dd:01:28:
dc:9d:91:9c:70:fa:4b:4b:5c:1b:9c:43:ed:a6:03:
4d:7e:b3:10:58:bb:aa:42:bc:85:c2:af:8c:79:75:
7b:12:f6:48:a0:44:58:fd:01:89:3f:da:0f:41:8a:
dd:1c:94:41:10:e2:68:18:dd:8e:29:88:98:25:d5:
5b:4a:1b:e1:2c:b8:6f:61:75:8e:79:84:60:b0:97:
8f:6a:4c:65:32:4c:41:01:f5:2d:ff:67:c3:7f:06:
e8:ee:77:48:f9:a3:b5:ea:4b:bc:a2:fd:14:20:91:
ae:9a:37:3d:6d:06:65:5a:18:93:54:5e:8d:41:91:
b2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B9:CA:90:60:C8:F1:0D:6C:AC:3F:40:DE:EE:35:77:74:DD:D2:CD
X509v3 Authority Key Identifier:
keyid:8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b1:6e:21:f9:f0:68:a7:b5:b3:1e:2d:9b:09:58:7a:53:db:
17:99:9f:e7:da:d4:3b:dc:f0:32:cc:87:70:3a:bc:bd:3d:b9:
b4:f1:96:a3:55:25:4c:c6:2a:c4:8e:a2:28:b7:ea:f7:fb:25:
4d:c3:5c:c4:8e:58:cf:7d:15:dc:76:15:bc:4c:11:e1:f1:b1:
e8:a3:d3:0c:95:97:81:9b:61:da:b6:54:95:5d:c9:d0:76:fe:
dd:c2:40:7f:0e:8d:22:e1:5b:7f:44:0d:4b:03:1c:75:92:33:
c8:ad:8d:85:90:8e:75:16:03:12:db:dc:45:5d:85:02:4a:06:
f7:45:d3:50:e2:f4:15:9f:96:6c:d2:fe:ab:6c:1b:f1:76:2a:
a6:e1:6a:cb:5c:6d:8f:39:4c:7c:78:b3:3c:99:93:15:ac:47:
23:59:8d:e8:17:8c:7d:cf:4a:0b:e7:6e:b5:42:0a:04:96:a3:
7f:98:14:c1:45:38:25:0f:fb:42:a3:d2:a5:f7:6e:c1:3f:d8:
cb:62:57:13:51:e7:40:b5:4f:10:b1:9f:a7:0d:bf:8f:61:f0:
57:89:67:79:6b:6b:a8:4e:dc:58:1f:f9:9f:3b:9c:4f:66:cf:
13:30:78:5c:b8:7b:18:07:53:2a:b6:ea:97:e0:01:fb:88:59:
33:05:7e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:55:23 2025 by rpki-client