Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
File: IC9MGjfpMTzdLup3UK4CjRjNWq4.mft (raw, json)
Hash identifier: eYRKsP0nS2PlydS0CMSLyQTkZrSwlPtbGBOFlEMUKkU=
Subject key identifier: D0:FF:15:B0:81:0A:C6:86:D7:AD:D9:24:A6:99:AE:D7:84:1B:0C:30
Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
Certificate issuer: /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Certificate serial: 01983DCF7D24CB781352921FB3F27FC52F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
Manifest number: 15FD
Signing time: Thu 24 Jul 2025 19:01:04 +0000
Manifest this update: Thu 24 Jul 2025 19:01:04 +0000
Manifest next update: Fri 25 Jul 2025 19:01:04 +0000
Files and hashes: 1: IC9MGjfpMTzdLup3UK4CjRjNWq4.crl (hash: ru4KNkQd4NK81D0eHiFt72m+F8YV2WIPaheyXVjJ0bg=)
2: IpCJGLN8WNm4ASMIxNnGZPuEtp4.roa (hash: nrrSBtVL1+LxQy+ccPed0KobnXytQAq3RiSJBLbBVIg=)
3: NfNd6pjqYOF2P-1csZDDcYiiQ28.roa (hash: iQWQfc6lD74rDEabgsCAVeBcixywrixRVP1KpMFN48o=)
4: PJBAejzPvEvF3ZoupzGWVEj1Og0.roa (hash: BFJtqcfNldj6Jrfn0Y0+mOBk6xT0n483gTjn5ogYiu8=)
5: aCUjIUK5OOSaycrn7_ksP5SjmPw.roa (hash: O1lgV6htb/Z9+mSwOsrU/V0sb4jZo6xRqeghVOqs13I=)
6: dSYYIsgqOPsPCWRb8n6bjaKooRw.roa (hash: Pvqr/OOkaqypvOSknbbOn2J0oHNnn5WhmVz2GaH3aXU=)
7: quZyu716dxS9mdBeGNCJZ1sGIZM.roa (hash: MPvLxa0c+riXjzyelLJV18hBBvFNCarL2WtEM/bk6Os=)
8: sx8Ag2ZkbPORNb5IpKGaIu2_Dqo.roa (hash: ZFFpoBJ2SvC/bg4XtAEwmcSclBY/i+xRWcdnLVCOAss=)
9: wUsJ3Y8bKRlwOlXMA6Qttd1Brps.roa (hash: zuU1UQuoYfDo2IQVUCO8dMMln85NIWVqpAhKwg/ayj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:cf:7d:24:cb:78:13:52:92:1f:b3:f2:7f:c5:2f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Validity
Not Before: Jul 24 19:01:04 2025 GMT
Not After : Jul 25 19:01:04 2025 GMT
Subject: CN=d0ff15b0810ac686d7add924a699aed7841b0c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:81:db:71:64:1d:16:76:87:a9:ec:fc:26:73:
4b:07:09:83:dc:0a:df:f9:80:5c:24:f2:af:5f:e4:
5c:e6:1e:43:26:1c:db:75:69:90:f1:af:67:a9:9d:
36:cc:9f:29:62:68:66:d4:db:08:87:47:8f:05:9a:
15:a0:78:b9:83:a0:f0:a1:e9:6f:06:a7:1a:54:c8:
9a:50:f6:bd:c8:5c:37:2c:a0:d0:3d:5a:3e:a2:cf:
89:33:f5:d5:47:01:99:72:8b:03:ff:9d:fc:4c:4b:
79:39:4c:cc:2a:1d:20:0a:e3:79:7e:2a:21:e1:36:
fa:d8:88:5b:e8:a1:4e:5b:db:0a:81:4e:27:5c:39:
88:0b:b8:de:92:ed:00:09:88:94:68:a1:7a:6f:f6:
5b:f2:9d:48:46:50:48:90:a2:b3:72:a0:f0:14:23:
78:88:17:95:61:f6:2f:21:22:21:e0:10:26:2d:47:
37:4b:de:bf:40:f4:b6:c0:02:ec:fb:cf:43:64:1e:
3b:d5:58:62:ae:40:ba:bd:14:76:76:62:aa:50:d2:
8f:a0:20:b7:a2:dd:48:e0:e9:3e:7b:35:29:da:55:
e6:47:0a:05:da:d3:53:b9:d5:7d:78:c4:f3:a0:fe:
aa:ae:5e:0b:9d:92:f9:2f:27:09:5a:6c:9f:07:45:
9a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FF:15:B0:81:0A:C6:86:D7:AD:D9:24:A6:99:AE:D7:84:1B:0C:30
X509v3 Authority Key Identifier:
keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:ea:ba:ba:17:f1:8e:1a:f7:8f:43:6f:8f:0b:54:3b:49:e2:
81:d2:74:6c:59:4c:41:93:a0:e5:2e:11:72:3e:f5:0d:d1:ea:
84:e9:71:44:92:33:9f:9e:23:34:44:da:36:d1:a6:90:f6:fb:
9b:e1:85:d1:d1:80:bd:e0:5c:17:27:21:c5:45:93:38:5f:56:
5b:66:82:0a:a6:96:11:5f:75:e6:ca:83:43:5d:eb:ad:29:97:
2d:3e:07:3e:7e:4b:89:52:01:68:9f:20:8b:3b:b3:90:3e:24:
92:e2:85:e2:9d:92:67:bd:18:c6:58:0c:ce:42:a4:05:62:af:
95:94:fb:2a:75:a1:d0:42:9d:4f:cc:55:ed:bd:66:e0:71:7b:
ad:3e:52:9b:25:cb:fa:7a:07:6e:dd:67:da:37:47:b4:18:3a:
5e:46:98:eb:25:78:ca:34:70:57:3f:5f:78:ba:dc:0d:a6:49:
cf:ab:4e:cb:68:16:7b:8d:3a:a6:e8:f2:14:5b:10:86:2b:02:
ff:2b:35:ba:fb:21:10:c0:09:10:d1:c6:6b:6b:7c:31:dc:85:
8f:63:1e:67:ba:f6:ad:77:42:38:90:02:5b:d5:36:5d:ad:d8:
57:60:f7:cb:05:50:2c:27:c7:e5:57:74:35:a5:22:21:bd:dd:
1f:62:c2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:19:43 2025 by rpki-client