Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
File: IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft (raw, json)
Hash identifier: WEV3tOW4KJmo/fKNpDSQZlZ74zYuONaU/RU4pVByEvE=
Subject key identifier: 8F:97:01:DF:4B:06:62:D0:FA:EB:B3:65:63:B1:EA:D6:2C:81:D1:D4
Authority key identifier: 21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
Certificate issuer: /CN=215a409d27b9a69346324004694da11beae02dbb
Certificate serial: 019855A0EA26E0F8295BE5E3F3041819575D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
Manifest number: 0EDD
Signing time: Tue 29 Jul 2025 10:01:05 +0000
Manifest this update: Tue 29 Jul 2025 10:01:05 +0000
Manifest next update: Wed 30 Jul 2025 10:01:05 +0000
Files and hashes: 1: 5Nxb95AjDYyihX948d4SpKIggZQ.roa (hash: LXnf6zKJW6C6S9ESb5TMXAjwJki5kjy7RI6/DxC0q14=)
2: IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl (hash: EfHTb/bRfA3mQ4fAYtfX+63Fo6DhrRLbi4OMw8HRf9Y=)
3: g00WlqoayNMboio4aQJxi5oYUAs.roa (hash: Hyc0gnAg44yWXRt2jBl8ZFxFJUhWTRX2EA3Xr0Vxj/g=)
4: lZSfaFLQsnTkwdvn0B3rZGkqRuA.roa (hash: QyBiQ/S33Pxg+43BukzMj/PPueurFOtFulFm03RWAS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:a0:ea:26:e0:f8:29:5b:e5:e3:f3:04:18:19:57:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215a409d27b9a69346324004694da11beae02dbb
Validity
Not Before: Jul 29 10:01:05 2025 GMT
Not After : Jul 30 10:01:05 2025 GMT
Subject: CN=8f9701df4b0662d0faebb36563b1ead62c81d1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:00:ab:af:37:a2:ea:16:9c:ae:a0:bf:bc:21:
ff:20:4d:be:5b:3b:57:0d:de:f3:5a:00:f3:dd:9b:
02:5e:28:3f:15:c5:8a:c8:38:e5:6d:8e:eb:ae:41:
a8:fb:a1:3b:bd:f9:21:36:88:02:97:7e:b5:34:56:
56:89:64:ba:aa:31:2f:48:72:d0:d5:e9:3f:92:bd:
3f:90:c6:26:c9:5c:02:f9:b0:c3:a4:71:f8:14:e5:
66:42:dc:b7:4c:99:00:96:0d:96:21:e8:57:0f:21:
8e:e2:e5:b9:b1:d6:30:ad:fa:10:bc:1a:28:01:1a:
1f:55:06:bc:c7:c8:dd:fc:ff:fa:6a:13:66:7a:a0:
c2:83:b4:0e:db:7d:f5:ce:4f:c6:a3:f4:71:21:da:
d5:c2:a4:6a:f3:bf:6b:08:3f:17:24:96:99:07:d7:
8e:95:76:c5:d2:65:ab:23:b3:89:a3:c4:23:3a:85:
97:3f:b4:73:7f:ee:eb:40:37:d7:00:46:78:29:0f:
a4:f8:02:80:40:fc:fc:83:7b:9c:fc:ba:06:fb:35:
56:94:ba:17:31:d7:cd:63:6f:e4:c4:3a:c9:27:6e:
06:bf:12:cd:26:c1:42:72:90:55:f3:b6:11:ee:2a:
e0:28:44:db:f5:e7:8b:82:1e:85:41:55:2e:57:3b:
1f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:97:01:DF:4B:06:62:D0:FA:EB:B3:65:63:B1:EA:D6:2C:81:D1:D4
X509v3 Authority Key Identifier:
keyid:21:5A:40:9D:27:B9:A6:93:46:32:40:04:69:4D:A1:1B:EA:E0:2D:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVpAnSe5ppNGMkAEaU2hG-rgLbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0c9e3-1c40-4f33-95ce-98d2fee0f87a/1/IVpAnSe5ppNGMkAEaU2hG-rgLbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:e2:9a:06:22:7c:1c:fe:7b:d1:1c:a8:99:bc:8c:74:48:ff:
be:c9:f4:d2:a3:6f:d3:e4:e8:ca:49:66:68:69:48:e2:1d:6b:
7a:e9:d0:7b:eb:c8:a3:2f:ba:e6:11:ad:29:bd:8e:ef:1a:82:
a1:bb:69:b7:1d:52:c9:11:61:a7:3f:11:9f:21:19:79:d4:8d:
8e:6d:69:cb:f7:2a:04:72:d2:96:f5:37:d1:c5:34:f7:39:bf:
24:96:2f:62:66:9d:52:d4:64:22:42:09:48:f0:0c:08:0a:c3:
cb:e7:5a:5f:26:db:dd:30:d9:5a:0f:25:29:59:b5:b3:51:52:
c7:56:2f:25:ae:d2:0c:b7:15:ad:82:14:3c:6d:9e:59:25:6f:
cf:1c:f0:19:6f:5e:51:69:cd:a8:7f:6c:41:b5:af:b5:6c:8e:
5b:5a:7f:12:a7:94:ac:ea:c6:18:55:a5:6b:2f:ea:f5:37:ec:
e5:b7:de:fe:ad:e6:4b:75:87:01:3d:39:4e:ab:a8:b9:d7:8d:
5d:e1:21:61:2b:46:2f:cc:c9:22:98:0b:05:80:29:79:13:27:
8c:60:39:b8:8a:55:c4:b1:82:b2:87:41:f0:c1:e8:d2:7e:26:
ba:93:cb:a0:be:e6:82:5e:bd:29:31:82:bf:ed:40:43:a9:c5:
af:35:5e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:39:03 2025 by rpki-client