Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
File: IjbtX1Yj7et5EKzTHV9u6B5csX4.mft (raw, json)
Hash identifier: wMLnI2uqDDRj0zBmE0BqWdYzt1qXcxYTnHT+bPm9GCs=
Subject key identifier: DA:32:27:C1:E7:21:CF:F5:22:0F:D6:DA:11:D4:6C:6A:BE:1B:B9:0E
Authority key identifier: 22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
Certificate issuer: /CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Certificate serial: 019849656D5D39FB5A9AEBE071C47D18CD45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
Manifest number: 0DE6
Signing time: Sun 27 Jul 2025 01:00:40 +0000
Manifest this update: Sun 27 Jul 2025 01:00:40 +0000
Manifest next update: Mon 28 Jul 2025 01:00:40 +0000
Files and hashes: 1: DY_YBD7dUEwRu5f1VApN2Xto06Y.roa (hash: kRig8nqc2JDYyWblKNLJUeoM3OkrL2nvfEXQMIcNjPI=)
2: IjbtX1Yj7et5EKzTHV9u6B5csX4.crl (hash: +Hts4VyKUGcbK0MLgt/cczEDL/aXS7a6+HvCKQxsHtg=)
3: l9Ip7JI4fAFd10Cj77KHHSrnVWw.roa (hash: SkELgqgLspURpsKcvlJgINn6NNXlC7+9EjVyn8WnT2A=)
4: oxqh0Vlunc9_jJzsSDgtivZ6iaI.roa (hash: O+sbnF0yUj4wLiTH2KtiKCTxn2FjAX1wiARhxbkhBM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:6d:5d:39:fb:5a:9a:eb:e0:71:c4:7d:18:cd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236ed5f5623edeb7910acd31d5f6ee81e5cb17e
Validity
Not Before: Jul 27 01:00:40 2025 GMT
Not After : Jul 28 01:00:40 2025 GMT
Subject: CN=da3227c1e721cff5220fd6da11d46c6abe1bb90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b9:b2:8b:2d:97:02:51:80:0a:c8:ce:5b:17:
10:c6:a5:08:29:03:5b:17:d7:8f:72:6a:13:af:99:
8a:68:5e:aa:a2:77:c3:c3:3d:44:2a:e8:54:91:1b:
db:e7:96:46:0c:85:21:d7:76:1a:9c:5f:20:d3:0e:
fc:0f:3d:be:9f:4e:2e:af:df:23:f2:fa:88:c3:eb:
9e:91:4f:5a:25:03:41:f7:ee:c7:c0:25:eb:55:ac:
56:a6:df:85:33:fc:69:50:e8:34:8f:d4:b4:15:71:
29:1b:2a:df:97:61:80:4c:83:47:17:17:52:d9:0e:
31:1d:66:63:fc:24:16:77:70:7d:4e:8b:0d:c8:b5:
b1:56:21:3d:87:ce:6c:02:14:12:15:85:61:42:39:
75:56:33:39:e0:6d:d4:ef:22:64:67:19:89:21:a0:
66:83:7e:ac:23:e7:0c:61:2a:c4:9a:20:83:28:00:
40:be:13:65:41:c4:6f:41:52:15:74:6b:e4:c6:a2:
54:84:54:07:c0:be:39:e6:ef:af:b4:af:7e:ec:86:
5f:b1:bd:5d:47:0b:76:9f:4e:3d:a2:b4:98:29:27:
4b:7d:2a:d2:73:92:26:76:55:17:15:a6:a7:8a:a8:
a4:07:36:1f:bf:87:86:6b:59:1a:41:ad:6f:2b:80:
8e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:32:27:C1:E7:21:CF:F5:22:0F:D6:DA:11:D4:6C:6A:BE:1B:B9:0E
X509v3 Authority Key Identifier:
keyid:22:36:ED:5F:56:23:ED:EB:79:10:AC:D3:1D:5F:6E:E8:1E:5C:B1:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjbtX1Yj7et5EKzTHV9u6B5csX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1d9dda-2adf-46bd-8af7-4d16be9ba132/1/IjbtX1Yj7et5EKzTHV9u6B5csX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:df:36:90:58:7c:21:2e:81:14:24:91:a8:f4:1b:ce:df:97:
19:ad:2c:4e:3d:22:73:70:f9:2b:53:16:00:8c:75:df:72:4a:
09:32:00:88:31:ec:e2:1c:5f:e2:5e:4e:6c:8e:75:77:4e:32:
f2:c8:d9:33:6d:85:e4:40:2f:a8:94:39:01:65:82:b9:c5:48:
17:cb:b7:3b:48:70:8b:06:44:d1:7d:f5:8e:7b:f9:cc:55:ef:
6f:a3:fe:11:86:5f:80:21:51:67:6d:cc:69:c8:27:cf:f2:8a:
b1:a0:d2:e7:c8:fc:ab:75:38:56:5c:cd:ea:13:91:34:90:07:
0d:f5:b3:51:39:37:b3:fd:33:20:da:ec:ef:9e:ff:10:27:1e:
83:ab:b7:c8:dc:97:3b:98:ba:64:ab:8f:0a:d1:c6:82:7d:10:
82:80:92:c1:95:3d:d0:ca:63:6f:39:b4:b5:c2:fa:50:47:cb:
b5:26:08:d2:28:de:a0:62:79:af:6e:c1:2a:9d:77:3d:19:10:
19:ef:b3:26:c6:2f:2c:67:51:a0:65:a9:98:14:cc:d5:a5:b4:
2d:0e:ed:33:ae:ad:a0:b7:bf:25:a1:7b:d1:5f:64:28:47:2f:
de:05:a9:8b:b8:2f:1f:39:42:12:e6:90:18:af:b0:82:3e:6e:
00:a9:09:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:10:47 2025 by rpki-client