Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
File: iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft (raw, json)
Hash identifier: rtUhvfRaPB5yZ614u7chBCWEsI3qU67Cu3iV0/K7+Bo=
Subject key identifier: 41:B8:4A:EA:A7:DC:D5:C5:70:27:CA:1F:12:F2:2D:D4:0C:A3:CB:B7
Authority key identifier: 88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
Certificate issuer: /CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Certificate serial: 019831CAD9712D1B3845815A7A6764AD105E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
Manifest number: 1548
Signing time: Tue 22 Jul 2025 11:00:34 +0000
Manifest this update: Tue 22 Jul 2025 11:00:34 +0000
Manifest next update: Wed 23 Jul 2025 11:00:34 +0000
Files and hashes: 1: Qv6t4wP7j-uLsxcfTWHv2ZFQWD8.roa (hash: eR47NrGWjMdNEp9FBa07vBAWwdqKIDeSc8imYvJOwfI=)
2: iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl (hash: wezIG7M6v4dgY83m1+5RW9U/mxopwEZGwA1W90BoxPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:31:ca:d9:71:2d:1b:38:45:81:5a:7a:67:64:ad:10:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Validity
Not Before: Jul 22 11:00:34 2025 GMT
Not After : Jul 23 11:00:34 2025 GMT
Subject: CN=41b84aeaa7dcd5c57027ca1f12f22dd40ca3cbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:45:a6:27:ab:b6:6a:68:e1:76:40:8f:0e:15:
b5:09:11:44:47:fe:ad:77:c6:4b:35:bf:38:f8:da:
ee:7d:34:41:83:80:6b:46:bc:4f:33:a0:b1:4c:40:
d8:6e:a2:16:a1:82:11:53:45:27:9f:8b:8d:13:d2:
71:4c:35:71:41:04:8a:91:8a:26:66:5b:cf:cb:9c:
92:1a:79:c6:88:06:bd:58:53:e3:d0:0f:96:ca:d2:
3a:ff:d0:d7:59:36:ab:94:66:cc:c5:22:95:9b:78:
b4:ec:70:b3:cd:d2:08:81:84:3e:fa:df:68:6e:c5:
72:76:f0:b0:80:f5:d9:51:ef:66:45:67:b8:a7:02:
7f:b1:15:99:8a:02:c5:47:48:48:c9:ae:5a:46:d7:
17:ec:6a:2f:95:1a:a4:85:3d:65:ca:1c:d9:ee:e6:
58:f2:a9:f1:ce:92:8b:cf:49:e0:1f:b4:d6:12:27:
df:5d:72:13:b6:02:85:af:5c:07:2b:1a:a9:52:35:
71:9a:78:73:5c:1c:e9:43:da:b5:9b:78:00:be:9e:
c3:61:06:31:ad:96:f2:9b:61:e7:71:ab:87:45:7f:
15:0b:01:5e:e3:67:1a:cc:16:e1:20:37:c9:a3:63:
c1:07:e5:c5:e7:2b:2e:f3:25:4f:3c:d5:36:19:94:
17:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B8:4A:EA:A7:DC:D5:C5:70:27:CA:1F:12:F2:2D:D4:0C:A3:CB:B7
X509v3 Authority Key Identifier:
keyid:88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:3d:b2:0d:84:8a:34:5e:62:65:69:b6:eb:25:21:2c:95:79:
30:5e:22:ea:1e:6e:26:58:9d:bf:2f:4e:b2:a2:5e:58:18:64:
cc:10:e1:1f:82:46:ca:d0:3e:c6:cd:51:ee:a3:e3:e2:a2:ed:
96:82:7d:94:b9:ae:d0:9a:38:6e:e3:25:61:ec:d5:c0:51:8f:
d8:f0:a2:ec:90:df:0b:1c:8e:a0:44:38:46:bc:95:fa:fc:24:
a1:50:63:b4:e6:7b:25:a8:b9:48:a6:f1:0e:fe:d9:73:0a:da:
94:ec:09:66:1d:5e:21:58:87:ea:8a:56:98:90:2e:2c:a2:33:
04:51:af:ba:57:0e:38:d2:32:a0:e6:10:05:fb:04:d1:49:ff:
72:be:c4:e2:86:25:71:cd:96:96:9b:ab:44:15:d5:47:05:b1:
a9:0c:31:49:87:25:57:fb:b7:55:c7:9a:75:50:9d:f8:28:23:
c7:3b:26:c2:40:7c:80:32:e0:75:9d:47:bc:59:2c:3b:e8:ff:
d7:4c:c6:21:4a:ea:3f:dc:51:07:a4:f0:b4:4d:7a:1e:74:65:
e7:82:14:74:41:54:83:90:73:38:64:70:f0:bb:6f:0a:45:ef:
25:e4:b0:27:52:d5:c5:d3:53:4b:a9:93:29:66:76:b5:8d:47:
50:44:5e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 20:11:16 2025 by rpki-client