Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
File: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft (raw, json)
Hash identifier: erk93aSwLNf0tz8D7rZF64fpLFP5dPsycLCF0sgcTlM=
Subject key identifier: 24:4C:5B:16:9D:B3:DE:72:DD:6D:BF:C4:F0:3D:C4:31:B6:AD:88:D5
Authority key identifier: 22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
Certificate issuer: /CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Certificate serial: 019838714E039A54F3A5D9D6F2D7699F2961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
Manifest number: 10DB
Signing time: Wed 23 Jul 2025 18:00:06 +0000
Manifest this update: Wed 23 Jul 2025 18:00:06 +0000
Manifest next update: Thu 24 Jul 2025 18:00:06 +0000
Files and hashes: 1: 0qW5Y4yA32z4Dny6mIJ-qLW2XWk.roa (hash: q9HOhDrTziiN8dHNBG3tLes1wQlniZAzuxjJOEin3Rw=)
2: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl (hash: A2FmSxhrJ5/Pz7x8mtAhxFc4Shr2ENmfS2uIK+Qo7FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 18:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:71:4e:03:9a:54:f3:a5:d9:d6:f2:d7:69:9f:29:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Validity
Not Before: Jul 23 18:00:06 2025 GMT
Not After : Jul 24 18:00:06 2025 GMT
Subject: CN=244c5b169db3de72dd6dbfc4f03dc431b6ad88d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e1:46:13:e1:9e:a9:c3:d1:1f:f5:31:fc:83:
f9:87:f4:4a:56:c7:ef:18:bd:a0:29:5a:1c:cc:15:
b1:07:7d:da:d0:92:cc:6d:4f:6c:31:7d:9d:39:e2:
0c:14:81:6d:75:08:aa:52:8e:1a:c1:6f:72:e3:0a:
2f:50:77:2d:4e:27:a1:e1:36:ac:64:54:38:4b:ce:
29:7f:3c:5d:28:c4:29:53:a6:14:69:d0:d4:54:d8:
48:c2:8e:a8:0b:8c:7b:ba:d4:a4:8a:14:4d:96:9f:
84:e6:f6:06:46:3b:e9:f8:3a:79:bc:65:0c:8c:ed:
1a:7d:f8:96:86:14:4c:d0:06:65:44:a8:1e:29:0d:
ba:19:81:56:7d:d7:0a:6f:17:ce:7b:01:39:1d:fe:
b7:5f:e8:f2:bf:b4:6d:54:1c:d3:7d:53:5f:31:af:
51:3b:af:08:18:c3:4b:ff:0d:f8:75:4c:10:aa:66:
01:04:59:15:b7:0c:c2:2a:00:0f:05:f4:65:33:e3:
49:89:2f:4d:f5:3a:6f:a1:4e:e7:04:9e:cd:84:26:
6a:a6:5b:79:22:af:fc:bf:2a:8a:9a:77:ed:a0:fc:
99:3a:da:74:67:52:12:76:a8:fd:34:8b:19:30:ca:
d8:83:e3:cd:61:53:da:d3:9f:fd:bf:e9:40:db:d7:
32:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4C:5B:16:9D:B3:DE:72:DD:6D:BF:C4:F0:3D:C4:31:B6:AD:88:D5
X509v3 Authority Key Identifier:
keyid:22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:43:98:74:0b:58:52:00:f2:57:32:89:16:73:66:dc:04:b6:
e9:af:09:91:08:8b:4b:ad:ef:65:77:77:c1:1d:4f:54:b2:4f:
b6:ae:6b:c2:f5:4d:fd:a7:80:4a:43:87:d5:96:a5:15:90:73:
82:a3:d2:50:32:0f:f4:dd:a7:e6:10:2e:36:25:5f:e3:b6:f9:
1d:dc:b0:4a:d4:33:d0:66:0c:83:8a:7e:af:f4:6a:e4:d4:20:
c9:99:bb:50:27:aa:a0:64:66:29:54:c9:ee:f5:58:84:e8:0a:
b3:8b:8f:6c:15:21:c9:24:35:a8:1e:77:c9:c6:75:35:bb:ea:
f8:c3:22:92:ef:8b:f4:59:2b:1c:48:b2:bc:69:b9:b8:fd:8d:
6e:f9:a1:27:d0:c3:f9:6e:ec:5e:84:8d:b3:90:70:5e:da:93:
89:fd:da:ed:e3:55:fe:22:a9:75:e6:6f:fe:8e:aa:50:f4:09:
7a:f4:c9:9c:40:15:9c:f6:05:ae:97:bd:aa:e6:e4:80:50:e7:
74:af:6b:f5:c3:28:32:af:e5:76:df:b8:cd:fb:5d:bc:6d:f9:
73:89:65:ad:2e:02:07:09:00:b5:14:25:7a:9b:58:06:cd:9c:
d1:56:de:60:2c:99:8f:7d:c2:fd:7d:c0:00:20:ea:cc:43:d5:
da:ac:1f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 02:57:43 2025 by rpki-client