Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
File: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft (raw, json)
Hash identifier: 8jVVq/i2pqfBmxRS2kF+9A/Tdg3FsQWaEEivSRLkF8o=
Subject key identifier: 4C:95:96:B7:7B:FA:56:B1:3E:CD:0D:69:92:15:11:9E:8E:0B:31:8F
Authority key identifier: 22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
Certificate issuer: /CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Certificate serial: 019844E3E07CCB68E32DEEDAAFF5E6B3810C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 04:00:41 +0000
Manifest this update: Sat 26 Jul 2025 04:00:41 +0000
Manifest next update: Sun 27 Jul 2025 04:00:41 +0000
Files and hashes: 1: DE9IUhyQDVKAZFd3LetU9Q2xs6k.roa (hash: 4yKIJoSmqEpGXf1pIollJ7FnnZ1pkmaGTlVLtjz3pSc=)
2: H8-4BKw4Tio0v7fBDDkOvu0xYf0.roa (hash: KAd/cINuj3Zmkb8yZBl9rfV147mzpewaBmWKPtSwHrI=)
3: Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl (hash: dKRB5SAcrG+VIUJpWK6cAQBgMzBfCSALQQLsgfJoppg=)
4: j_UhRom1_CjoZ8ktPpSsCzemlX0.roa (hash: p3RE9tXJ28D2EkcXNDeylKcBqqXVLJJQRP9qM16ttXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:e0:7c:cb:68:e3:2d:ee:da:af:f5:e6:b3:81:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=220f413fb0af0bd8fe130820d3049d0e71ed4bb0
Validity
Not Before: Jul 26 04:00:41 2025 GMT
Not After : Jul 27 04:00:41 2025 GMT
Subject: CN=4c9596b77bfa56b13ecd0d699215119e8e0b318f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:22:3c:e8:47:99:ca:9f:3f:ee:6b:83:26:
d5:a4:41:4d:88:9d:ab:16:84:86:1d:e1:50:65:92:
63:cd:3d:63:d0:8f:da:20:1b:4e:34:ed:77:14:43:
63:99:c2:63:09:e9:09:0b:a9:b4:d1:ea:0d:80:96:
4a:9d:d0:2c:d1:06:45:1f:6c:cc:9e:f7:a4:da:b5:
bc:78:2c:ba:d1:c6:17:1d:1e:5e:f7:11:a3:e1:6a:
f9:90:6f:8a:30:2c:88:2d:3f:b8:b5:fd:20:75:fb:
9e:fe:a8:48:41:5b:f7:21:1d:a1:bf:e2:15:40:82:
f4:c4:f5:94:d2:53:eb:08:a2:0a:32:c2:f8:05:aa:
85:b0:38:13:65:a9:e9:22:cc:6a:30:8d:a1:79:87:
b5:b6:ad:60:af:b4:b5:87:32:f6:ab:05:b5:d7:1d:
63:dd:95:cd:43:23:47:fc:0f:38:6e:8e:19:72:8c:
0a:58:04:02:80:1f:9d:63:79:96:53:2f:14:b8:5e:
70:02:bd:ac:76:d0:64:f1:12:99:c3:71:db:e7:b0:
7c:a6:51:ee:cc:72:79:c1:c9:fb:38:f8:57:3e:77:
6f:84:17:90:5c:ee:38:7e:f2:c3:9c:57:53:79:46:
e8:df:81:08:31:a6:bd:0b:97:a9:ca:d6:be:cb:9b:
fb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:95:96:B7:7B:FA:56:B1:3E:CD:0D:69:92:15:11:9E:8E:0B:31:8F
X509v3 Authority Key Identifier:
keyid:22:0F:41:3F:B0:AF:0B:D8:FE:13:08:20:D3:04:9D:0E:71:ED:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db357d-b170-40a5-a669-82eba0cb3b0d/1/Ig9BP7CvC9j-Ewgg0wSdDnHtS7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b8:1a:61:48:15:7a:06:95:32:74:9a:e4:b3:b0:a7:6e:f8:
49:73:0c:70:f6:56:12:11:1d:d6:94:a6:79:1a:c7:ad:42:f4:
09:09:ba:f0:9e:fc:a1:72:6c:15:fa:96:93:d8:b9:1d:a9:76:
e0:ee:23:82:e2:d0:ee:40:d3:19:c2:65:1d:5e:89:c3:06:26:
42:f5:c1:4f:d1:2a:a0:57:12:6d:3d:54:80:da:e8:2a:e5:a4:
9b:2e:3a:13:9d:cb:2a:64:74:f5:53:75:92:ac:bb:fc:84:69:
7a:3b:01:70:54:ba:78:2d:6b:32:c9:5f:34:ab:58:6b:70:60:
e3:07:7c:5b:3e:82:6b:f4:63:e4:69:d4:1d:10:5d:66:1e:56:
d0:61:a4:de:dc:a1:23:83:3f:f4:aa:0c:03:d3:e2:5b:2d:4b:
63:f5:22:88:02:61:da:4e:2e:2c:e8:cd:cb:a7:3f:9d:79:ac:
a0:0a:d9:ee:7a:14:43:8b:7e:2d:30:63:41:9b:4c:ff:3c:c9:
39:23:c0:23:63:ee:63:d6:d9:ed:f4:00:55:58:ab:c5:e7:21:
2c:74:f6:ee:d1:55:b8:ea:02:23:98:c0:25:e4:fe:92:b3:d4:
c7:2f:c8:91:74:2e:ad:aa:65:c2:00:40:84:f0:0c:ba:82:9b:
e4:75:b7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:34:43 2025 by rpki-client