Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
File: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft (raw, json)
Hash identifier: z2jmQDtkFG8OAJlka/0cdjD7z0B5PgaiU374T85hvgI=
Subject key identifier: 14:79:15:2C:BE:DD:43:FE:CD:46:CF:B9:D7:C1:27:C6:C5:A4:2B:06
Authority key identifier: 98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
Certificate issuer: /CN=988296c50d94bbed225f2867231fa5093debea91
Certificate serial: 01984475AF006B5223C89FCB4E24D2D539EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
Manifest number: 1243
Signing time: Sat 26 Jul 2025 02:00:19 +0000
Manifest this update: Sat 26 Jul 2025 02:00:19 +0000
Manifest next update: Sun 27 Jul 2025 02:00:19 +0000
Files and hashes: 1: UjP5WMZKRBsvIlHnzhDHFBUyi78.roa (hash: pQ6/nnpLIpK2rwKH9JMJUyXoOlk8zghaFAetdmitLfY=)
2: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl (hash: q9g/ORTCSZm9O04kXcUnzA5c8z1RYdhUInYEWLdxrik=)
3: oFqjjYPuOysZm8IvX2HFnZ2yMN8.roa (hash: xodF+0GY/o0dnV+Pf3SoupYGcpVAvzY6q/h09Jx9Nzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:75:af:00:6b:52:23:c8:9f:cb:4e:24:d2:d5:39:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988296c50d94bbed225f2867231fa5093debea91
Validity
Not Before: Jul 26 02:00:19 2025 GMT
Not After : Jul 27 02:00:19 2025 GMT
Subject: CN=1479152cbedd43fecd46cfb9d7c127c6c5a42b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:d3:32:4f:c4:a5:fa:ab:54:4b:c9:81:17:
db:f4:d6:66:d5:26:60:a1:95:e3:a8:7e:cd:79:ff:
12:32:c0:df:ec:58:27:bd:f4:0c:3c:a6:de:5b:0c:
d2:f6:02:25:6f:b7:0e:eb:1a:df:30:e8:2f:43:03:
f5:09:0a:0b:d4:c6:06:20:3f:2f:88:ed:9d:77:25:
a1:91:01:9b:d3:2f:d7:9a:fb:f2:f3:07:83:c5:e6:
e5:c4:d1:e0:ce:99:03:8f:f3:e0:35:2e:5d:93:3e:
b8:f5:0e:fd:09:5c:96:b3:da:20:9c:16:95:42:06:
2f:77:8c:11:c8:d6:f9:c6:19:8b:16:42:ea:01:17:
81:ca:60:3d:6c:82:bd:0c:fb:f7:50:8b:cb:2d:23:
ba:98:ff:59:d5:a4:b2:61:20:9d:53:63:f6:6f:d5:
85:bc:03:eb:27:36:5b:ad:8e:66:af:7c:6e:d8:9f:
8e:97:f1:5e:87:c8:d4:b9:86:df:4b:2e:e9:46:ad:
8d:17:45:54:7c:0d:4b:04:2f:b3:a8:de:5c:60:40:
d5:f0:5a:80:62:ad:9c:46:68:ab:d4:1a:d6:e7:0e:
eb:7f:37:53:08:6e:7b:d4:f4:72:89:85:bf:7f:d7:
00:79:12:14:01:96:a1:14:15:9f:8e:f5:3d:e3:8f:
4d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:79:15:2C:BE:DD:43:FE:CD:46:CF:B9:D7:C1:27:C6:C5:A4:2B:06
X509v3 Authority Key Identifier:
keyid:98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:78:cb:a7:9b:b6:ab:4b:7e:03:b7:6e:fd:ef:2b:52:df:b3:
a0:f9:ae:15:69:97:df:e0:b5:99:41:55:16:82:c6:cc:54:06:
3c:52:da:ed:a3:7c:f9:ac:9a:e3:1f:72:53:98:46:68:98:a8:
c2:d8:46:f6:47:c8:13:a7:00:b9:57:1e:c7:a4:2c:62:72:3d:
b6:dc:72:f4:7c:3d:f1:be:4e:cd:e7:21:2c:ec:45:47:f6:1b:
6d:f3:ed:73:7b:5e:c0:fc:af:a9:d4:52:a9:34:2e:e3:c9:48:
ed:59:32:14:1c:f4:bc:6c:96:2f:4a:43:1c:7f:bd:c2:83:7c:
48:b6:8e:aa:7c:95:8e:66:d5:64:cd:d9:24:ea:0b:cc:35:96:
fb:d3:62:4e:d4:68:c9:93:93:bc:32:24:ca:d8:cc:a1:58:4f:
5b:f1:d6:08:11:d5:c4:57:49:b5:7e:e4:8d:37:7c:11:38:35:
5c:35:3a:cb:ab:3c:9c:6c:5b:3c:ac:68:26:a6:68:73:d9:25:
df:24:aa:e8:11:1b:96:62:df:4d:f9:45:52:3c:49:e2:0e:87:
61:65:b9:3c:6e:f4:59:c5:7e:3d:e0:26:33:9a:c8:48:b2:4e:
2e:6e:38:4b:67:84:11:bb:41:c1:0f:a2:62:04:73:06:92:fa:
e1:ea:85:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:49:11 2025 by rpki-client