Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
File: ifKArlGVUMen9JU6sn16593rE0E.mft (raw, json)
Hash identifier: MIib08B2BKBUVRwBug9FYeZe0bf/hWLSh3eKFgNChF4=
Subject key identifier: 15:7F:47:A6:78:A5:CA:DF:8D:2D:4C:43:10:C3:C8:8C:49:2A:58:1E
Authority key identifier: 89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
Certificate issuer: /CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Certificate serial: 01984664713AF7F3FC87D72827E0E3924F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
Manifest number: 1591
Signing time: Sat 26 Jul 2025 11:00:44 +0000
Manifest this update: Sat 26 Jul 2025 11:00:44 +0000
Manifest next update: Sun 27 Jul 2025 11:00:44 +0000
Files and hashes: 1: 9dTi4wdiI3Tu8z52gakpEQiMUok.roa (hash: 4zYsVsn8fJnXPhGX6xQByXU2W5bf/FC7mJXJpk5+gzY=)
2: ifKArlGVUMen9JU6sn16593rE0E.crl (hash: ITGVJaoKpUWOGbnzfPd7GJVLvtAQj5FqYG4GDmP1xoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:71:3a:f7:f3:fc:87:d7:28:27:e0:e3:92:4f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f280ae519550c7a7f4953ab27d7ae7ddeb1341
Validity
Not Before: Jul 26 11:00:44 2025 GMT
Not After : Jul 27 11:00:44 2025 GMT
Subject: CN=157f47a678a5cadf8d2d4c4310c3c88c492a581e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bf:0b:a0:24:a7:4c:b6:bf:55:7c:be:6e:a2:
ba:19:6f:9f:37:9f:8d:28:db:e9:d1:5c:39:a6:f5:
35:c8:73:2a:6d:25:99:b1:36:55:76:06:03:34:04:
1e:ce:52:24:1e:7d:81:26:55:cf:a6:44:03:81:a2:
5f:e5:95:c4:54:a1:5c:07:a8:7c:4d:19:1c:9b:85:
4c:08:2f:3e:39:b0:e6:ac:0c:b2:54:3a:eb:cc:a8:
89:e8:fc:b7:66:d3:3a:b3:ed:db:0a:be:26:76:02:
1b:1b:82:b8:03:83:9f:85:d0:94:98:74:90:48:b3:
94:15:8f:c9:1a:83:95:73:1c:ca:c6:31:59:c6:bf:
11:a1:28:99:a9:ca:66:88:cf:87:b7:77:58:be:5a:
1f:d0:33:27:88:f4:86:6b:fe:c0:75:db:7e:68:5f:
40:39:56:d1:c6:b3:54:b2:c5:00:8b:74:a3:07:64:
a9:32:b3:19:65:74:df:43:3e:65:54:20:bc:5a:07:
5b:d5:c3:e3:11:d0:8d:4e:5e:c4:fe:c5:d5:40:53:
59:14:a6:0d:e6:dc:bf:7b:00:3e:82:e9:fe:bb:a1:
5f:c5:dd:fc:05:58:f6:dc:a4:aa:e0:4c:56:5c:13:
bf:76:60:41:3d:65:a7:cc:7e:9e:fb:ba:bf:42:95:
4b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7F:47:A6:78:A5:CA:DF:8D:2D:4C:43:10:C3:C8:8C:49:2A:58:1E
X509v3 Authority Key Identifier:
keyid:89:F2:80:AE:51:95:50:C7:A7:F4:95:3A:B2:7D:7A:E7:DD:EB:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifKArlGVUMen9JU6sn16593rE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fdce4c-2ea5-47eb-94bc-5b50ea88eeab/1/ifKArlGVUMen9JU6sn16593rE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6d:a3:62:32:8c:88:90:2a:b7:f4:4b:81:d7:81:22:1a:9f:
e8:2b:90:83:36:c4:7d:32:ce:55:db:87:d0:3a:a7:31:ef:b9:
e7:03:31:5a:f1:49:bc:dd:57:04:56:c3:38:f4:23:ea:60:b8:
6b:85:38:b0:73:22:41:a9:a0:08:4d:c5:77:b0:51:0f:59:d9:
e1:f8:29:fb:28:1d:43:fb:d6:3b:2f:6f:0f:bd:5c:b2:66:e0:
2a:0d:8f:77:a3:90:72:83:a6:44:8c:a9:6d:4d:f2:5a:a8:81:
be:52:15:91:8c:71:c3:f8:b1:4b:48:5f:0f:27:b2:4f:3c:f0:
b0:8b:b5:65:60:46:ac:86:5d:2f:f3:86:b4:44:b1:38:06:8c:
1d:f3:f6:b9:d1:3b:b8:03:83:e1:37:96:13:ec:7b:cf:54:9d:
9c:55:2b:e8:b6:02:6d:2b:e4:97:d8:5a:93:09:bc:53:45:e4:
03:da:68:14:6e:35:38:f1:e4:d9:63:a0:0c:d2:1b:2c:5d:68:
4f:61:d9:19:96:d2:5d:a2:9b:cc:4b:e2:92:b0:70:e3:0a:51:
fc:90:ff:5b:e1:04:18:ac:96:8a:31:b4:ea:ec:36:20:87:bb:
44:e7:9b:76:e2:b7:09:f7:c7:66:8d:9e:fe:51:17:02:d9:ff:
dc:cb:5a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:14:30 2025 by rpki-client