Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
File: iGUv5lKWbXKKUnrubkPEhcaTn0U.mft (raw, json)
Hash identifier: 2dflKgV/xhKrT1TsQEPcV/zGv+OxQByIcng9SDLhSIg=
Subject key identifier: 09:14:5F:4C:BB:B6:87:2A:9C:72:71:E6:B4:FD:05:15:07:8D:59:E0
Authority key identifier: 88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
Certificate issuer: /CN=88652fe652966d728a527aee6e43c485c6939f45
Certificate serial: 01985268824BF0FDB2F4299754FAC32F5717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
Manifest number: 132A
Signing time: Mon 28 Jul 2025 19:00:37 +0000
Manifest this update: Mon 28 Jul 2025 19:00:37 +0000
Manifest next update: Tue 29 Jul 2025 19:00:37 +0000
Files and hashes: 1: 1b_wV0k49kuwRrhHplXiK2XiroA.roa (hash: RH2MIMTVkHxoiPuLQAUrE2Rqg6UxaLBroHReV0YDdhs=)
2: iGUv5lKWbXKKUnrubkPEhcaTn0U.crl (hash: S5m4ncs1e0LpoBeWzYoOKecxG+u5LaOQz30j//dkP4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:82:4b:f0:fd:b2:f4:29:97:54:fa:c3:2f:57:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88652fe652966d728a527aee6e43c485c6939f45
Validity
Not Before: Jul 28 19:00:37 2025 GMT
Not After : Jul 29 19:00:37 2025 GMT
Subject: CN=09145f4cbbb6872a9c7271e6b4fd0515078d59e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0d:e9:21:7a:16:5f:21:0e:0a:78:2b:07:a5:
00:aa:e8:a1:e7:97:84:a3:b1:ec:59:58:86:a0:cd:
bb:c5:f7:40:ab:d4:a5:55:97:3d:3a:1a:07:97:6a:
2d:43:58:ca:a0:dd:20:85:40:cb:51:1f:24:a2:4d:
5d:36:29:96:44:b3:fe:de:b8:9f:9b:93:e8:4b:0e:
e8:99:c3:68:a4:05:d4:42:eb:40:b6:9b:f9:b9:1b:
7c:32:38:dd:c9:ff:a4:03:90:3f:d0:f2:f1:4e:d7:
af:dd:1d:5b:5f:d6:03:df:62:ec:8e:bf:08:4c:0e:
3e:22:50:46:39:f5:90:6e:ad:3b:0b:e3:a3:ea:1e:
74:df:72:ec:9b:d8:fa:d1:f9:26:f4:f7:85:0c:47:
c6:7e:80:5c:59:a9:35:c5:f5:c5:45:38:f9:bd:26:
e3:a1:8e:40:ed:0b:a2:2e:ba:5d:08:ee:de:cc:6c:
95:09:d0:4b:c9:7d:ba:b5:87:c8:34:04:b6:30:6c:
63:39:94:94:88:97:f7:ce:8a:90:80:8c:d0:5e:4a:
8e:af:b6:f6:43:59:9c:95:fd:02:de:6b:6b:a3:11:
b9:84:6a:70:05:d8:ef:25:f7:1e:be:f1:dc:28:72:
38:62:63:19:b9:cb:a2:8f:10:94:ee:cf:f2:95:39:
d8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:14:5F:4C:BB:B6:87:2A:9C:72:71:E6:B4:FD:05:15:07:8D:59:E0
X509v3 Authority Key Identifier:
keyid:88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:5f:ea:81:48:a3:3c:55:f6:04:0a:08:e2:28:b0:f0:9e:5f:
d3:d4:92:53:ee:c8:06:5f:e2:d3:fd:d0:9b:b3:0d:86:0b:ab:
8f:0c:24:4a:df:49:42:95:73:4e:97:5e:74:2c:31:9b:b2:f6:
4c:77:e8:fd:a7:fc:c6:9a:64:11:02:6f:ba:b8:fc:5a:88:25:
f5:65:20:70:16:c3:f2:55:77:f2:2c:b2:21:71:f4:c5:09:de:
2a:08:6c:4c:02:dd:53:1d:d5:0c:2c:46:67:37:79:28:4f:91:
c7:30:d2:5d:db:f9:78:c4:d8:66:e0:66:72:cc:cd:df:06:a2:
bb:f8:60:b0:ac:01:fd:75:41:e2:38:d1:82:81:8e:73:5c:0b:
5a:45:81:da:a0:69:4a:19:6d:a4:fc:9a:d7:f5:38:f6:62:59:
e4:70:60:c5:4d:8d:9a:7e:c5:bb:13:59:77:7b:9d:17:01:67:
b4:67:70:99:77:d5:1f:17:6c:4e:3a:8a:8b:ae:ba:99:dd:7e:
99:84:64:d9:cb:c0:31:3d:fe:6f:72:1b:a8:74:ac:04:7b:68:
cd:6b:9d:e6:b1:6e:42:6b:58:00:8e:9f:81:78:84:2d:81:c3:
e3:c4:5e:98:37:86:5a:1d:a5:b5:44:fd:55:99:d8:03:ef:ce:
01:27:fd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:54:52 2025 by rpki-client