Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
File: IQH0Od66_1iAOV148Lv62Mp2CL8.mft (raw, json)
Hash identifier: HvfFr7oVFU10LmV+DIPBfGf+vJa/LmmUFsNTNzKkhhg=
Subject key identifier: 59:E4:B3:A5:7E:45:CC:9B:C2:4B:7B:DF:6C:D0:CB:B3:CB:90:A9:F5
Authority key identifier: 21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
Certificate issuer: /CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Certificate serial: 01984664346FADB896605B0DA98AA43361B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
Manifest number: 0CBC
Signing time: Sat 26 Jul 2025 11:00:28 +0000
Manifest this update: Sat 26 Jul 2025 11:00:28 +0000
Manifest next update: Sun 27 Jul 2025 11:00:28 +0000
Files and hashes: 1: IQH0Od66_1iAOV148Lv62Mp2CL8.crl (hash: 1pDf34eTDxtt7jk27qtAJ0il3bp/mW5YA3kiEYLZxDw=)
2: maYu8dN9neYyc8DtbRu2KTpDdQk.roa (hash: H5U+8VR9PAI4QlkVpTR8DC6LqpMXq6tJVvxgrK/vIPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:34:6f:ad:b8:96:60:5b:0d:a9:8a:a4:33:61:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2101f439debaff5880395d78f0bbfad8ca7608bf
Validity
Not Before: Jul 26 11:00:28 2025 GMT
Not After : Jul 27 11:00:28 2025 GMT
Subject: CN=59e4b3a57e45cc9bc24b7bdf6cd0cbb3cb90a9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9c:98:09:bc:72:e1:66:cd:aa:2b:bf:33:d3:
fd:e0:5f:e9:4a:9e:8e:37:0d:6c:ff:2a:15:1a:dc:
86:d5:45:b4:d9:8d:d4:d7:ac:0f:2e:90:21:de:9d:
1a:1f:65:f3:f3:95:54:48:f9:ce:d8:f5:d8:9a:22:
b0:d8:97:64:77:a6:9d:ca:fb:11:3c:27:a9:52:33:
7c:97:1d:59:81:8d:d7:cc:5d:4c:d4:35:12:92:6f:
16:32:6e:7d:0c:95:c6:61:71:9e:ca:c5:0d:47:66:
3a:01:38:20:37:dc:64:62:e7:6f:c5:2b:53:c2:6f:
52:27:0f:b0:7d:18:d1:9a:9b:cd:19:49:14:75:de:
d5:44:b1:40:ea:20:5e:48:98:22:a7:b8:7d:6d:3a:
e2:c7:42:51:4b:2a:d3:ca:64:2a:fb:f5:63:a0:29:
06:38:66:d1:72:f7:37:36:fc:61:cf:21:55:2c:cf:
21:78:0d:29:f0:b3:db:79:07:ab:e0:44:1e:0e:96:
c5:57:b9:ab:a9:e9:3a:ee:81:28:fa:70:33:f6:c9:
de:bb:c7:e6:04:4d:95:d8:bf:0a:80:9e:b8:c3:c0:
e2:d4:33:a1:22:0f:18:da:1a:e9:34:ef:b9:b4:7b:
cc:79:23:3a:49:0f:06:b5:9c:37:71:57:1e:08:0a:
9c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E4:B3:A5:7E:45:CC:9B:C2:4B:7B:DF:6C:D0:CB:B3:CB:90:A9:F5
X509v3 Authority Key Identifier:
keyid:21:01:F4:39:DE:BA:FF:58:80:39:5D:78:F0:BB:FA:D8:CA:76:08:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQH0Od66_1iAOV148Lv62Mp2CL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/78c414-9b09-4775-a558-e3defb7e2518/1/IQH0Od66_1iAOV148Lv62Mp2CL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:37:4d:1c:0c:89:b5:56:82:37:a1:a2:45:df:a2:40:b8:0d:
ee:48:0f:c7:dd:32:5f:22:9e:d9:07:21:2f:fa:01:ca:cc:eb:
5c:ca:28:3d:6f:bd:ad:1d:a8:45:52:e3:7a:8e:51:9e:79:d9:
6e:01:ac:64:ad:73:5c:d6:df:70:92:dd:b5:5f:31:1a:64:30:
6b:31:ad:02:92:38:d3:68:d6:09:05:03:a2:d9:2d:63:e8:f9:
07:bc:37:f7:49:26:d5:54:dc:1d:f0:3c:24:f1:09:67:d9:6b:
e5:9e:45:85:d2:a2:2e:d1:ed:93:80:af:c7:8f:cb:43:3f:d5:
74:79:d8:24:6e:8d:6a:e6:32:26:1b:b1:14:38:3e:88:cb:a3:
b3:d7:fd:97:f8:2e:2a:b0:01:70:62:78:96:a5:a1:df:aa:d0:
11:65:a9:03:34:01:7c:3b:4c:fa:0d:f2:36:b7:12:cc:5c:a7:
3a:e3:d8:25:bf:16:12:d0:10:18:12:17:05:a2:4f:65:48:8f:
a7:26:1c:2f:3f:d7:a0:94:fb:02:08:91:9d:ea:48:98:80:d7:
da:44:21:63:03:18:1a:7b:86:0e:a8:32:f8:31:77:3d:eb:40:
86:14:65:51:a6:68:0d:8d:1d:d2:9c:1a:70:96:fd:b5:2d:d2:
9f:16:eb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:56:52 2025 by rpki-client