Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft
File: iydIPcFsMY5a__gyKTDIF_0ZLJE.mft (raw, json)
Hash identifier: MnUJE+QIchiqxwRQ5oZ0b+xG6geJ+3N8/r4Wdq8eqFA=
Subject key identifier: C2:C5:58:FC:CD:73:5A:F9:5F:6D:E3:36:64:B0:56:D4:76:A8:B2:6B
Authority key identifier: 8B:27:48:3D:C1:6C:31:8E:5A:FF:F8:32:29:30:C8:17:FD:19:2C:91
Certificate issuer: /CN=8b27483dc16c318e5afff8322930c817fd192c91
Certificate serial: 01984A417ECEA7B4500485F8F9E98A0C4DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iydIPcFsMY5a__gyKTDIF_0ZLJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft
Manifest number: 0961
Signing time: Sun 27 Jul 2025 05:01:02 +0000
Manifest this update: Sun 27 Jul 2025 05:01:02 +0000
Manifest next update: Mon 28 Jul 2025 05:01:02 +0000
Files and hashes: 1: WG1KTWwRB1pYbj2P1y-YbJWElMQ.roa (hash: /RcbZ2ujStzbSPjPDGEz6Qg57WsDieIVmjOcowRraSQ=)
2: iydIPcFsMY5a__gyKTDIF_0ZLJE.crl (hash: FvGf42F/3C6iUUR1kW+nQXLiJsEVr5FzuPTB1RKohdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iydIPcFsMY5a__gyKTDIF_0ZLJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:7e:ce:a7:b4:50:04:85:f8:f9:e9:8a:0c:4d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b27483dc16c318e5afff8322930c817fd192c91
Validity
Not Before: Jul 27 05:01:02 2025 GMT
Not After : Jul 28 05:01:02 2025 GMT
Subject: CN=c2c558fccd735af95f6de33664b056d476a8b26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fa:c4:9b:af:d6:97:6a:2f:23:0e:19:39:00:
2c:4b:17:5b:a1:aa:2b:71:7b:e6:cc:f8:72:1f:dc:
94:5b:d5:9d:e7:6b:0e:4b:66:1b:31:47:70:2b:25:
59:a2:70:75:a2:3f:f1:10:b4:aa:8d:aa:af:7f:12:
c7:f9:e3:6b:17:b7:61:40:b0:4b:d4:7c:59:b6:1e:
ca:94:86:32:54:b5:8f:43:a6:44:e9:52:ff:ff:6a:
21:3d:e5:1d:68:9a:cd:f1:7b:a0:84:60:90:d6:08:
5d:5c:8a:d2:72:5b:36:57:9c:32:32:b9:ca:0e:62:
5e:98:d6:95:85:f5:b5:df:fa:97:2c:cc:d6:d5:59:
37:84:ba:0a:79:63:33:6b:1a:87:51:47:d8:9b:07:
33:0f:88:11:9b:06:bd:fd:2a:1b:bd:4e:fc:c6:7d:
90:2c:df:b8:2c:9d:4a:dd:cd:54:30:6f:27:68:e1:
11:07:d7:84:56:35:45:e7:c9:b1:95:dc:fe:b0:3d:
d8:51:dd:55:27:97:66:f0:bb:64:2a:73:d8:c6:56:
73:a2:6f:f8:40:48:3e:c2:45:fd:6c:17:ea:57:3e:
d6:70:53:bc:e9:b1:a2:af:5f:af:c0:de:21:c6:55:
61:ba:ad:6e:7a:10:5e:74:9c:4d:4e:33:09:92:1d:
5e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C5:58:FC:CD:73:5A:F9:5F:6D:E3:36:64:B0:56:D4:76:A8:B2:6B
X509v3 Authority Key Identifier:
keyid:8B:27:48:3D:C1:6C:31:8E:5A:FF:F8:32:29:30:C8:17:FD:19:2C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iydIPcFsMY5a__gyKTDIF_0ZLJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:67:ec:d6:39:9c:75:ba:bb:c3:50:45:4d:43:ce:1c:42:e9:
3e:cf:dd:d4:79:f3:7c:19:e1:68:14:7b:8e:fa:1a:2f:9a:cd:
4d:6e:27:e6:aa:cb:e9:c4:4e:4d:2b:24:94:cc:f3:8f:f9:a5:
af:8c:6d:5a:e1:fd:fa:22:3f:a0:44:90:d3:20:0d:c0:18:df:
27:a4:d0:c8:80:5a:ea:b8:f3:f7:aa:bc:dd:46:e6:e8:42:96:
1c:49:39:97:b8:37:61:79:03:a3:b1:bd:1f:5d:67:ab:a9:09:
15:17:67:e7:a2:92:c5:45:36:2d:41:59:b4:be:a9:cb:35:83:
2d:22:64:97:30:a8:62:ee:09:35:05:d8:52:18:11:b3:fb:f6:
23:a9:32:d4:d2:68:87:31:0a:b0:47:b2:bf:82:60:1a:71:43:
7a:fb:2f:cc:13:46:cc:47:29:d9:34:fb:d1:97:7b:c3:05:61:
0c:7c:b7:20:fa:a5:82:83:32:ac:79:df:e2:dc:79:ea:39:a2:
d6:af:5e:02:15:58:2b:55:de:fb:d6:35:38:52:96:f4:90:04:
25:86:9a:ae:c1:cd:9e:eb:02:cc:17:b2:07:db:cd:ec:7b:b2:
d4:88:8d:08:ef:61:b3:c3:d3:aa:00:33:60:8c:b9:9f:f8:bb:
0f:eb:11:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:23:25 2025 by rpki-client