Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
File: ioludoVA84eh3U_52qS4W6SKkG8.mft (raw, json)
Hash identifier: GIXi2qPG6jEcfZdcLtc+EQnQzG8uXXZWDY3EuC2C1oA=
Subject key identifier: E5:B6:C4:75:1C:E7:77:65:D7:3E:42:6C:31:19:71:71:C5:60:D7:39
Authority key identifier: 8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F
Certificate issuer: /CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
Certificate serial: 0198530D6343CA8E2C6E24B6ADB8E1BB8999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
Manifest number: 0F49
Signing time: Mon 28 Jul 2025 22:00:42 +0000
Manifest this update: Mon 28 Jul 2025 22:00:42 +0000
Manifest next update: Tue 29 Jul 2025 22:00:42 +0000
Files and hashes: 1: hkbUVfjNOPVhJfq1uQFH-hPB5mE.roa (hash: tqCspEzEqiN+432BqUgHfq1nCv1kB3CNAbRtD1yo228=)
2: ioludoVA84eh3U_52qS4W6SKkG8.crl (hash: zJd+uqDFC/cJvvHTjIrrJf8IWm4VF/URAOQzBRUFD2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:63:43:ca:8e:2c:6e:24:b6:ad:b8:e1:bb:89:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a896e768540f387a1dd4ff9daa4b85ba48a906f
Validity
Not Before: Jul 28 22:00:42 2025 GMT
Not After : Jul 29 22:00:42 2025 GMT
Subject: CN=e5b6c4751ce77765d73e426c31197171c560d739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a7:c1:ff:6d:9a:cd:51:b8:98:2e:15:a7:0d:
58:47:45:a1:3e:27:16:8a:73:1a:22:a9:a0:3a:72:
64:36:cc:73:dc:42:0a:d6:01:33:91:98:5d:76:0a:
aa:1b:24:4f:76:30:cc:1a:15:1c:74:e2:ff:2d:92:
e4:80:54:ed:f0:24:ff:d7:05:9c:68:7f:54:4d:a1:
fd:8d:df:58:3b:e8:ae:7c:a8:c4:78:88:af:c2:e3:
eb:1d:72:68:87:75:99:9b:7b:5c:9c:16:2b:c5:c3:
04:00:0e:3f:3c:1a:15:0e:2d:2a:02:02:18:01:63:
ce:6a:92:ce:1c:e1:df:25:56:85:d2:b3:a7:a0:8d:
09:a3:c9:db:e7:2b:c8:47:bf:35:6c:31:14:9e:2e:
33:ed:45:cf:ed:0f:7f:80:b0:c1:e0:c4:ce:50:49:
44:8f:49:cb:05:3b:92:3e:ac:51:0e:97:a5:08:0e:
97:bd:2f:3f:74:17:3c:95:1f:88:ed:3b:cd:4f:c8:
bc:d3:01:40:4d:17:a1:d8:be:de:cb:b8:5d:e5:7a:
9b:ea:53:bc:b2:96:a2:1a:d4:51:3c:84:dc:62:bd:
69:66:cc:6b:48:ee:34:5b:b1:a6:68:6b:d9:4f:c0:
68:42:d9:fc:90:a6:64:31:fe:b1:4a:f2:80:27:db:
76:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B6:C4:75:1C:E7:77:65:D7:3E:42:6C:31:19:71:71:C5:60:D7:39
X509v3 Authority Key Identifier:
keyid:8A:89:6E:76:85:40:F3:87:A1:DD:4F:F9:DA:A4:B8:5B:A4:8A:90:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioludoVA84eh3U_52qS4W6SKkG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e61cb6-8f16-4397-96fa-8f6994566f67/1/ioludoVA84eh3U_52qS4W6SKkG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9f:ce:b9:26:ad:77:cc:f9:a8:68:65:f9:1f:20:4c:f0:d4:
b2:07:98:b8:7e:36:17:39:0c:9c:a8:ff:57:59:b8:7a:a9:1e:
24:e9:7e:78:93:46:0d:cf:0d:30:07:c0:bf:7d:45:e6:df:c1:
aa:1c:1a:25:dd:9d:79:35:bc:3f:9a:59:b9:0e:29:78:fb:49:
27:b3:46:15:b9:8c:61:25:83:b2:6b:ff:6b:43:62:10:a5:08:
72:ab:bc:4c:22:29:20:50:71:c4:61:70:72:95:37:cf:56:d2:
ed:07:3d:4e:af:8c:e4:46:a7:a3:38:85:09:81:d0:ab:95:be:
d5:fc:f6:3f:b4:db:59:f4:42:4e:42:02:94:b3:dc:06:a2:1b:
84:e7:f2:24:57:a0:e3:2d:e7:d1:63:85:28:7c:4b:3b:d1:5b:
17:5f:75:91:92:5b:0b:ec:f4:15:d4:12:54:ef:9d:53:02:d8:
bb:c6:ac:83:e0:ab:c5:31:2e:4f:da:53:47:0f:25:b4:b1:bb:
02:ab:70:4e:c0:9f:31:3b:b2:e7:5b:fe:67:49:79:e7:27:4b:
67:86:4d:e2:93:4e:2f:8b:04:6d:54:e7:be:ac:4f:1d:f9:8a:
56:c1:8f:0d:57:dd:26:fe:bd:dc:65:b1:98:59:dd:78:f3:62:
ce:e3:9a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:43:01 2025 by rpki-client