Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
File: IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft (raw, json)
Hash identifier: ofp9yLeIWMWsQnU6W5dinMZezIKlkPl/Lmu2oNODUlU=
Subject key identifier: 22:6D:B9:57:E7:BB:A5:50:1F:BE:6A:6C:18:E9:E7:6C:5A:BB:F5:5D
Authority key identifier: 21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
Certificate issuer: /CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Certificate serial: 0198469B09DC15F0703F4596E4F7E19CD32A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
Manifest number: 1153
Signing time: Sat 26 Jul 2025 12:00:22 +0000
Manifest this update: Sat 26 Jul 2025 12:00:22 +0000
Manifest next update: Sun 27 Jul 2025 12:00:22 +0000
Files and hashes: 1: EJEuDnvuXiXSyssiuX3zmzznLmY.roa (hash: Oz6+eDgQ3iUmX8LJR3oXdjyr343hyansN3/KTvsHwJc=)
2: IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl (hash: HXBFZPINJMWSDEpFiky6S2fK5YbZ6nHWzHQP31TkY3I=)
3: nrEMql0zV0P3dpHmZH6RSxKuJFg.roa (hash: 1gVFTzoG8NuAbMx8im63wNse5kBK1gIOddqrPu/oX6A=)
4: oCdnapI8_jAqvSx-q8QqfeZBfpI.roa (hash: 4dP+f2erpGi6jIqWI+u+ltnYaQjR1Rx/ox+mHYa6aIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:09:dc:15:f0:70:3f:45:96:e4:f7:e1:9c:d3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Validity
Not Before: Jul 26 12:00:22 2025 GMT
Not After : Jul 27 12:00:22 2025 GMT
Subject: CN=226db957e7bba5501fbe6a6c18e9e76c5abbf55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5a:80:7c:80:4f:4e:39:11:93:69:b4:98:99:
ff:bb:41:6a:11:96:ef:d7:3a:54:b5:a9:a6:d5:80:
fa:da:5e:d6:fa:f6:67:a5:8b:e9:2c:81:d9:12:25:
4a:18:15:0c:b7:a5:23:94:0a:be:64:92:5d:18:51:
98:be:76:9f:1c:53:54:4b:b5:ba:1d:07:a9:76:39:
6a:42:c4:a7:7c:48:8b:b0:37:ff:02:f8:f2:06:0a:
9e:8e:51:c0:44:6e:47:7e:a3:ca:13:f2:92:73:34:
7f:b9:eb:d6:42:39:66:a2:c5:64:78:d3:00:da:d2:
f4:67:7e:b1:23:e6:64:5c:74:6e:83:e2:76:ca:fe:
a6:b2:c2:db:84:c8:5c:72:fd:14:6c:ad:4b:1c:1c:
70:1a:b3:0c:db:dc:73:e4:5a:c8:e9:c1:b1:e8:96:
38:66:b5:71:22:f4:93:01:1b:c6:97:56:3e:00:49:
75:88:aa:4a:4b:cd:f5:fe:ab:94:26:a7:0f:a9:6b:
be:a7:05:f1:e3:4c:a8:7d:63:6a:84:99:43:d2:97:
98:4a:86:63:ea:fa:23:c7:07:56:73:bd:74:43:92:
21:42:5f:5b:9e:d8:4b:f8:f7:6f:18:4f:e5:23:8c:
6d:55:db:89:b2:82:5a:91:19:51:10:15:83:2a:5d:
d3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6D:B9:57:E7:BB:A5:50:1F:BE:6A:6C:18:E9:E7:6C:5A:BB:F5:5D
X509v3 Authority Key Identifier:
keyid:21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:34:24:e4:b3:48:89:23:62:9d:7f:00:56:05:cc:23:25:59:
91:2d:8c:ee:54:6a:84:e8:7a:13:50:a0:3f:0e:c4:c1:1e:fb:
67:0b:43:c2:99:48:0d:8a:38:3e:de:2a:da:7a:51:a8:fe:89:
11:9e:a7:8d:d6:4b:32:54:8a:1a:76:4c:5e:a4:48:e2:19:23:
40:26:c0:01:93:00:3f:a2:0c:fd:9b:03:49:d4:26:e7:1b:e5:
80:3f:cf:17:a9:0d:33:29:07:82:ab:28:0f:1c:95:ee:6e:ca:
83:00:f4:1a:af:7c:0f:74:45:b3:fe:f2:ea:c1:78:12:aa:1a:
78:bf:3a:0c:3e:8b:6f:b4:cc:11:63:e3:5f:2a:4b:e2:68:59:
b0:75:32:94:8a:ec:ba:b3:ec:e9:c7:66:fd:5b:70:8b:b2:0b:
d7:9e:f5:88:dc:de:d1:b5:a7:68:a6:bc:06:0c:39:36:ff:9b:
19:8e:e8:0b:9e:1c:74:a3:38:00:57:d6:84:49:af:7c:67:b3:
4b:d6:bc:ef:1a:df:9d:e7:45:b5:40:c2:d7:c6:d8:57:50:5a:
d9:3d:61:f3:44:cb:f7:5d:7b:ae:a4:4c:07:3d:8d:3d:66:3f:
0b:4e:ec:59:b5:f4:e0:86:72:30:23:73:c8:44:ba:7b:35:8c:
4d:d6:a9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:05:50 2025 by rpki-client