Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
File: iuE5rwiZ9da1syWBNz7aMDfqMMA.mft (raw, json)
Hash identifier: jvqfJwuorHANn3Etwp3gRMADqOaNhmnNQKUCbPJxbtU=
Subject key identifier: A3:8B:39:7C:CC:AE:24:CF:06:8B:D4:D6:06:7B:C3:32:CD:0A:74:06
Authority key identifier: 8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
Certificate issuer: /CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Certificate serial: 01984399BE7EC97FAFA003884993D63D1599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
Manifest number: 0CB5
Signing time: Fri 25 Jul 2025 22:00:05 +0000
Manifest this update: Fri 25 Jul 2025 22:00:05 +0000
Manifest next update: Sat 26 Jul 2025 22:00:05 +0000
Files and hashes: 1: NGjcJESkWKoe17DLj5CiFkjFkhs.roa (hash: GPilr/syUwSnDgvatxbmfR2uNG9m+2J2hRVuK9V/K4A=)
2: iuE5rwiZ9da1syWBNz7aMDfqMMA.crl (hash: h4I1ar8LbmPvVhKU11zY4SNh6arC/Y0o72wQpfAyP58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:99:be:7e:c9:7f:af:a0:03:88:49:93:d6:3d:15:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Validity
Not Before: Jul 25 22:00:05 2025 GMT
Not After : Jul 26 22:00:05 2025 GMT
Subject: CN=a38b397cccae24cf068bd4d6067bc332cd0a7406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:27:36:5f:9d:5e:36:0d:7b:f3:fa:94:e4:
c0:ea:56:7e:4d:26:b7:b1:4b:e3:25:20:cb:8e:c9:
03:46:a2:62:8c:b5:93:bc:22:6e:23:af:81:c1:92:
7d:68:db:e1:d1:f2:3e:3d:fa:4e:0f:9e:86:c7:b6:
03:94:91:a5:0d:45:3d:7f:ce:8d:1a:19:93:3d:e9:
b8:56:e5:3b:7a:ce:61:9f:d7:6d:26:43:c4:a2:b8:
d7:7c:4a:65:f4:4a:5a:a2:05:3e:04:06:13:30:c7:
38:d8:3c:da:91:f0:c0:9e:c8:c7:e1:0b:cd:35:82:
1a:bf:00:45:00:ce:b0:b3:be:07:18:d1:94:c7:8c:
f4:a1:2c:0c:77:4a:61:28:13:2a:fa:39:25:39:05:
2b:08:ff:1e:20:d5:7e:ec:8a:b4:32:30:dc:d9:9e:
15:5c:70:ed:e1:5b:c9:9a:ae:0f:ed:72:bc:6e:11:
39:6c:fb:6b:d6:8b:8c:ac:17:af:ef:b7:bb:4b:e9:
e0:ed:86:08:59:fc:35:25:95:50:d4:49:71:08:95:
fd:43:66:50:68:aa:05:7f:11:4a:43:48:4a:0d:e8:
08:0a:8b:98:ea:63:0c:df:83:c9:56:ff:92:d9:07:
55:83:3e:41:50:99:43:c3:37:73:73:08:8a:53:cf:
5e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8B:39:7C:CC:AE:24:CF:06:8B:D4:D6:06:7B:C3:32:CD:0A:74:06
X509v3 Authority Key Identifier:
keyid:8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:93:c0:96:09:89:f2:f6:a1:77:dd:b6:6e:bb:ff:ae:39:da:
80:0e:0f:4f:df:37:55:92:87:89:2c:b2:36:f7:f6:ec:1b:1c:
7c:24:0f:e4:a0:35:66:65:95:f8:bb:ac:0f:b4:a4:0e:fe:64:
47:61:cf:16:60:01:59:9f:4d:3e:79:00:24:1a:b1:04:1f:7a:
4b:f8:f0:25:df:7e:47:11:ac:6d:b5:f3:64:e9:ce:94:90:ab:
13:16:c4:da:65:e3:0f:d6:ed:1f:67:90:f1:b5:3f:60:c0:ba:
28:b2:d4:2c:51:aa:39:26:d7:e6:9d:45:e9:ef:7f:5a:bf:8e:
bc:9c:fc:42:35:bc:0c:dc:22:ef:fc:f3:cf:3f:26:58:1c:57:
89:a6:81:a6:7d:19:f2:ca:af:bd:37:b7:15:d4:91:83:3e:63:
b9:77:79:62:97:8e:8c:75:7e:57:28:07:b0:7b:14:c5:b3:74:
d5:eb:f3:73:74:e6:03:03:11:1b:d2:80:47:a7:11:0c:9b:13:
2d:15:77:e7:30:f0:99:80:5d:62:af:a0:0e:6f:86:ef:f2:15:
78:9c:89:97:38:e1:57:d7:2f:26:ca:cc:ad:ae:39:32:0d:f3:
1b:e8:89:e4:78:5b:9f:c7:ea:40:ca:c1:79:fc:f3:72:88:4e:
b6:20:fa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:17:11 2025 by rpki-client