Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
File: iDHWIdGS-S2wk9kzCSweI2tNSXs.mft (raw, json)
Hash identifier: /BjX5Fus4cG+qE8ylC4CIMsnYHy15vIU5Qe2Y7yIwGA=
Subject key identifier: 01:7D:7E:18:CA:22:C0:DF:03:15:25:DB:A4:CE:8C:8E:25:B0:3F:41
Authority key identifier: 88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B
Certificate issuer: /CN=8831d621d192f92db093d933092c1e236b4d497b
Certificate serial: 01983CBC76A24DBA70A9E54A8163017BBFD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
Manifest number: 15FB
Signing time: Thu 24 Jul 2025 14:00:40 +0000
Manifest this update: Thu 24 Jul 2025 14:00:40 +0000
Manifest next update: Fri 25 Jul 2025 14:00:40 +0000
Files and hashes: 1: 1-6XFLoPOdCVTnXJMZNU0hBiKubk.roa (hash: OxkphaRHymUnb8SN18Gdla2SO6vLVqs5y/4vbMpFmm4=)
2: iDHWIdGS-S2wk9kzCSweI2tNSXs.crl (hash: 2PkDT7cYgswu/nfRISlJJaWQ95yo6ogZDDDHZabS2YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:bc:76:a2:4d:ba:70:a9:e5:4a:81:63:01:7b:bf:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8831d621d192f92db093d933092c1e236b4d497b
Validity
Not Before: Jul 24 14:00:40 2025 GMT
Not After : Jul 25 14:00:40 2025 GMT
Subject: CN=017d7e18ca22c0df031525dba4ce8c8e25b03f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c1:e8:ea:7b:80:8c:0d:b4:4e:3e:79:73:0b:
8d:80:14:c7:8c:a1:57:0a:a5:d7:09:04:2a:f6:d6:
9b:8b:77:6f:17:f6:36:ce:77:8d:ba:42:df:80:5f:
ae:6f:b7:12:4d:22:e1:36:e3:24:89:cf:c3:b7:af:
35:a3:2d:9f:ca:d2:79:f3:7d:c3:b2:23:88:cd:a0:
67:77:b1:36:15:24:15:07:70:08:f0:9c:a8:e5:dc:
d7:be:08:67:cc:0e:3f:84:91:32:c4:09:cb:29:22:
d4:a7:7e:e9:6e:32:dd:fd:33:01:50:a0:51:ee:b1:
9f:84:65:bf:f3:bc:bf:cb:7a:c8:8c:ed:a0:53:65:
48:b0:e1:9c:1d:59:cc:92:01:fe:06:e5:00:06:e5:
02:21:29:c3:06:bb:df:a5:99:3d:f0:7a:02:5a:3a:
ce:af:20:d2:de:27:72:3d:95:bd:27:4a:40:5a:76:
c6:33:8e:96:91:4c:f5:8a:11:66:e3:bc:fe:87:f3:
37:58:7f:04:eb:4f:97:71:46:c1:db:c3:66:b0:92:
8b:6e:85:23:4a:3f:09:7f:eb:b5:e2:e3:1c:32:84:
ac:0b:4a:7c:79:f0:97:54:95:be:c3:7c:fa:9d:d3:
b9:a6:7c:20:47:25:23:bd:57:8a:58:78:41:ce:b6:
7d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7D:7E:18:CA:22:C0:DF:03:15:25:DB:A4:CE:8C:8E:25:B0:3F:41
X509v3 Authority Key Identifier:
keyid:88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:20:a6:f5:8f:53:8c:7c:37:24:a8:55:69:13:51:cc:e5:38:
2d:4c:00:ee:01:64:1e:1d:44:91:e7:83:9f:89:4a:fc:ac:9d:
22:ad:d5:64:6f:2b:23:4b:fb:ec:75:1c:4b:7d:39:ab:e1:81:
fb:99:70:68:20:d7:e9:0f:9f:4a:87:25:b7:db:7f:9f:ce:58:
cd:dd:6f:d8:d0:e9:6f:99:ef:de:64:82:3a:96:fd:8e:a4:40:
73:64:86:0e:53:3d:69:a0:f7:5b:5e:98:01:fb:bb:0b:ba:73:
92:07:b4:8f:1e:ef:e7:9e:df:fc:49:47:34:b9:1d:b3:91:82:
c2:8f:e2:90:3e:9a:3a:b9:e7:87:ab:23:8f:9f:46:13:84:1f:
52:75:3f:72:1d:16:35:0d:31:b6:e6:3b:c1:f7:33:bd:68:88:
f6:c7:53:86:ba:e2:dc:86:1d:e9:2f:c5:b1:19:ac:aa:13:f8:
bc:01:94:c7:b9:3a:a1:0a:5e:49:0a:3c:e3:65:de:bc:9d:aa:
fe:4b:d8:ac:b3:46:82:57:71:92:27:bf:b3:ff:70:ca:95:38:
8e:aa:dd:51:9f:94:21:2c:db:6b:09:53:f9:4a:a0:b4:e6:a0:
3a:e9:e0:2f:9f:54:be:32:6d:87:c7:20:06:3e:0d:04:15:bf:
fb:a5:f4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:39:06 2025 by rpki-client