Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
File: iIx7lGQtLku_uVg62UH1HrjEVkA.mft (raw, json)
Hash identifier: IFWQOUeV9tez4bDZWxtY2DC1EhYvXY9QdxXDTeAfkPY=
Subject key identifier: 5A:30:B3:BD:34:63:CE:DD:58:5A:99:5A:A7:A0:39:13:EA:9C:C7:B2
Authority key identifier: 88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40
Certificate issuer: /CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640
Certificate serial: 019847E5192B57EE00F6007C2648053B16B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
Manifest number: 0FFB
Signing time: Sat 26 Jul 2025 18:00:53 +0000
Manifest this update: Sat 26 Jul 2025 18:00:53 +0000
Manifest next update: Sun 27 Jul 2025 18:00:53 +0000
Files and hashes: 1: cuExqJqxDerCAtylcJmCrVbgef4.roa (hash: 598WR0Sv6MZYZg5mTZECmrWO2D4wIr/fUZ49xt8Yu9Q=)
2: iIx7lGQtLku_uVg62UH1HrjEVkA.crl (hash: PIpv/S9ECL5kouxVAtp2i3l7U900w7Dw91T+tj98hsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:19:2b:57:ee:00:f6:00:7c:26:48:05:3b:16:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888c7b94642d2e4bbfb9583ad941f51eb8c45640
Validity
Not Before: Jul 26 18:00:53 2025 GMT
Not After : Jul 27 18:00:53 2025 GMT
Subject: CN=5a30b3bd3463cedd585a995aa7a03913ea9cc7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7c:e9:e1:e5:20:8e:be:7c:5c:de:60:2b:7c:
23:87:84:cb:24:b3:2b:b2:cc:6b:2e:04:db:e0:88:
78:3d:2e:d4:4d:b9:23:eb:4f:58:01:3c:e5:7f:4c:
b1:dd:f1:0e:74:57:02:e5:78:dd:1d:64:63:ce:04:
01:8a:0b:61:9a:99:bd:52:f2:b4:22:70:3d:d3:9e:
e7:2a:be:d7:fc:33:f6:78:7e:4f:6f:02:56:ed:70:
4d:24:7c:07:20:e3:99:30:b6:a8:0e:36:66:03:ec:
9a:4c:d6:00:4b:d9:84:c3:f7:d1:d7:ee:f1:26:60:
7b:26:08:4d:2d:d6:c7:8f:c9:0b:1f:fc:ad:5c:31:
c0:b5:50:ce:4c:11:1c:83:3d:b0:66:8d:e9:26:74:
36:b1:00:e1:e5:80:0f:50:e1:dc:d7:01:ef:7d:28:
a6:f3:b5:e0:df:4e:03:05:6e:ea:df:2a:30:0a:2a:
e1:dd:e7:66:44:fc:05:b3:5b:58:23:f2:ba:cb:a5:
0a:87:ae:19:c5:9e:b1:ec:82:3b:08:ad:e7:3f:31:
26:54:61:af:d2:7e:e9:6d:d8:b0:db:e7:cb:65:83:
3b:52:c8:be:4a:24:eb:67:3e:b3:8d:08:8c:89:35:
b0:8c:53:5a:0d:87:b4:99:77:0e:23:b2:d9:49:1f:
8c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:30:B3:BD:34:63:CE:DD:58:5A:99:5A:A7:A0:39:13:EA:9C:C7:B2
X509v3 Authority Key Identifier:
keyid:88:8C:7B:94:64:2D:2E:4B:BF:B9:58:3A:D9:41:F5:1E:B8:C4:56:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIx7lGQtLku_uVg62UH1HrjEVkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ccbf7a-ec38-44e6-b2eb-7187977e057e/1/iIx7lGQtLku_uVg62UH1HrjEVkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:29:8a:ca:23:a1:52:ba:6e:d3:54:c4:f7:8f:47:e2:7d:2a:
18:03:a8:13:cf:9a:6e:92:f3:c3:08:92:68:7a:f1:5b:96:31:
c6:09:90:6e:7b:94:49:2e:a2:f0:b1:4f:63:01:ef:94:cf:44:
30:4c:33:0e:5c:b7:aa:1e:4c:39:d0:d2:8a:78:b8:a2:58:6c:
66:fe:dd:67:54:45:4b:78:68:c0:cf:d6:9d:2b:fe:7e:36:ca:
f4:96:85:f3:12:12:a6:5a:76:1b:90:fc:48:84:cd:a9:44:2f:
60:30:19:0d:b4:4d:95:6a:91:b2:93:30:db:d7:63:dc:f7:09:
19:73:be:8d:19:3d:11:5d:dc:8e:27:a7:8a:86:32:16:6b:c3:
e4:ff:8d:f4:de:ee:61:d0:d7:bc:6e:16:27:26:0c:c6:4f:06:
69:f2:c7:b6:13:d8:54:60:d7:d2:2e:d5:c4:34:67:af:74:2a:
8f:8d:16:c9:17:b4:d6:0b:e5:5c:34:5c:7d:b9:ee:8c:50:50:
09:e0:cf:71:29:b8:16:d7:1e:e3:fc:91:b5:65:69:5b:cb:c5:
65:df:66:cd:30:22:c6:19:4a:da:17:09:ca:e8:be:d3:5b:0b:
f5:40:c3:a8:90:b3:61:ac:90:b1:a8:ba:82:1b:b1:af:48:bd:
90:5b:2d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:27:28 2025 by rpki-client