Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
File: Iv9bz3ObBzL7G823F-xxf28csOI.mft (raw, json)
Hash identifier: iFx5AjrBdJAWmWDkUJmQHoYJ8wSwV3GBrTSC1Fvg2vo=
Subject key identifier: 5D:E5:B7:CE:2E:A6:33:A8:7F:2A:56:55:52:FF:EF:94:5D:31:C8:EC
Authority key identifier: 22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
Certificate issuer: /CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Certificate serial: 019844E3580CFFF544FE13E0E267C3627D96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
Manifest number: 13FF
Signing time: Sat 26 Jul 2025 04:00:06 +0000
Manifest this update: Sat 26 Jul 2025 04:00:06 +0000
Manifest next update: Sun 27 Jul 2025 04:00:06 +0000
Files and hashes: 1: Dbw0YKXPol3saHGjQJtz9o_YK0E.roa (hash: SxzLeQKHeNdqB63pBhgkGBN/CeBMjvrLZxTWY/WlAKg=)
2: Iv9bz3ObBzL7G823F-xxf28csOI.crl (hash: +mlSYRKOqCFUc2gpmII/LnQdaTunIZgVEHwXMMnwqxg=)
3: UAWIgik98ovvIJWv4yjj5lBqzOo.roa (hash: jrAxhhr23FpKpzjy0AGBEFjJeK035eZKHkroGqfSgNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:58:0c:ff:f5:44:fe:13:e0:e2:67:c3:62:7d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22ff5bcf739b0732fb1bcdb717ec717f6f1cb0e2
Validity
Not Before: Jul 26 04:00:06 2025 GMT
Not After : Jul 27 04:00:06 2025 GMT
Subject: CN=5de5b7ce2ea633a87f2a565552ffef945d31c8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1e:d4:eb:fc:c4:d1:a6:73:40:96:b5:41:2c:
70:e8:71:31:7d:35:3d:3d:b1:59:23:89:a4:41:da:
f5:55:c1:43:cc:0f:8b:23:b1:7e:cd:ab:ea:95:7a:
50:b3:71:77:57:a4:b4:40:24:b1:3d:5e:df:d6:2d:
b9:6b:bc:2f:6d:b5:89:49:19:45:15:02:95:82:0c:
59:40:d8:f2:87:99:5f:62:96:c6:d7:0b:19:ae:74:
a8:37:48:71:42:36:e9:9c:03:8c:63:d8:03:21:f9:
d1:99:d3:9a:81:3b:26:40:64:29:6c:c2:28:50:2b:
fd:fd:10:5c:6d:09:01:69:d1:ce:c3:4a:ba:22:e1:
e5:57:1c:5d:6b:05:ae:9c:0a:bc:29:94:f3:c9:43:
fa:e1:e8:52:5f:15:42:c6:d9:09:35:08:ca:39:4f:
9e:e0:cb:4a:09:82:9a:79:e3:c0:0d:b3:fe:e3:71:
e8:bb:13:16:21:81:f1:ca:f6:ad:8a:0d:d6:44:99:
8b:99:e2:79:fe:c5:0b:17:af:91:9e:af:26:e7:b9:
84:e1:6b:8d:27:e8:07:52:42:54:18:82:ea:3e:a5:
73:78:f7:87:0c:c1:11:f7:98:79:ec:e2:60:c5:b2:
1f:7f:a4:87:bf:23:06:1b:05:ff:31:24:69:d9:b1:
f0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E5:B7:CE:2E:A6:33:A8:7F:2A:56:55:52:FF:EF:94:5D:31:C8:EC
X509v3 Authority Key Identifier:
keyid:22:FF:5B:CF:73:9B:07:32:FB:1B:CD:B7:17:EC:71:7F:6F:1C:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv9bz3ObBzL7G823F-xxf28csOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7bf0f-691a-4cec-b5ce-7603e5dd5707/1/Iv9bz3ObBzL7G823F-xxf28csOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:52:e3:a6:8a:b2:2d:5a:17:eb:5e:5b:fd:7b:3e:1c:29:e3:
50:90:65:8b:e0:50:3e:08:8e:13:af:c6:50:f4:84:6e:e6:c2:
eb:90:5f:5a:9f:fc:00:4d:d8:2d:25:8e:90:fa:52:7b:09:80:
39:13:bd:96:8d:8e:3d:b3:36:f8:0c:2b:ef:70:14:85:a7:c7:
26:46:21:32:01:d8:63:63:58:02:51:7c:4f:01:cc:5e:2b:7b:
17:7b:e3:ee:c9:c4:8c:97:87:5c:1e:cc:07:14:98:fb:2e:0c:
5b:4e:70:59:57:2a:fb:db:c4:43:74:00:90:bc:c8:b2:88:44:
15:1e:90:a0:fd:1b:7d:17:c2:6f:11:0f:16:4b:34:ca:57:36:
89:58:4b:77:8c:7c:18:4c:c9:a5:34:b8:fa:38:9b:07:6b:3d:
53:c9:6b:c3:0a:77:b7:67:81:21:35:0c:eb:7a:f5:e7:c1:24:
67:1e:47:34:f0:c7:62:40:6e:2f:71:ce:49:30:c5:55:4f:b4:
7b:c0:66:81:f2:9d:e9:4d:94:41:4b:60:68:4b:ec:04:ca:f1:
1e:d5:d1:52:b5:f1:2b:31:7a:f5:dc:20:8f:24:c5:68:ae:9e:
d7:9b:cf:39:28:3d:47:df:ce:aa:cc:4c:b0:a2:5c:87:73:ad:
5b:57:2e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:03:25 2025 by rpki-client