Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
File: IQ2p568B3nVEj0kGqsQb0pZOiEc.mft (raw, json)
Hash identifier: Y424AbW8ZCXplYUMcLz+dyUGcJVf/hjh/i6CX8tYr+Q=
Subject key identifier: 1B:D0:2C:84:9A:44:4F:91:9E:0A:74:D9:C3:F2:D8:26:0E:68:1C:0A
Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847
Certificate serial: 01984E547C13B9BB041F48650718417E8528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
Manifest number: 1608
Signing time: Mon 28 Jul 2025 00:00:16 +0000
Manifest this update: Mon 28 Jul 2025 00:00:16 +0000
Manifest next update: Tue 29 Jul 2025 00:00:16 +0000
Files and hashes: 1: 84db03xfYelGerORYCPaE18sIuY.roa (hash: mGsmynBl7jLseJdNkmqKYTcle2kapG2/B7E0rIACZPM=)
2: DWb6WF8DjwRTU0qXDx46BO4zwgA.roa (hash: CzOBQqTqajUkprVoUPDiYGmEDab6x3jR9YCHnFVJudw=)
3: IQ2p568B3nVEj0kGqsQb0pZOiEc.crl (hash: uZUa9zbbiSnxfSNm5st1twAr/GdwUwCnW8gkyVepjrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:54:7c:13:b9:bb:04:1f:48:65:07:18:41:7e:85:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847
Validity
Not Before: Jul 28 00:00:16 2025 GMT
Not After : Jul 29 00:00:16 2025 GMT
Subject: CN=1bd02c849a444f919e0a74d9c3f2d8260e681c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4c:67:2a:46:50:80:19:2b:01:9e:ee:bb:87:
7c:14:f6:ac:7e:4a:8e:d8:24:06:8f:88:94:d2:e5:
78:88:bf:05:ef:ba:8e:53:25:e4:0e:19:11:1c:f0:
2f:02:61:5f:07:7d:e9:5a:03:5b:14:a9:dd:e6:ac:
d9:c3:87:c4:71:26:a7:4e:87:65:de:f2:50:1a:12:
5e:df:79:4d:d9:ca:a4:0a:2e:f7:10:d5:41:53:70:
e6:4a:1a:a4:b3:d8:11:04:94:93:da:de:a5:44:51:
b5:a7:fc:ce:e0:6e:48:e9:f1:a4:33:93:41:5a:96:
f3:f6:08:d5:12:ec:43:f0:4a:97:22:6d:69:18:fa:
1a:49:65:37:06:04:a8:7c:81:df:69:c5:1f:af:64:
30:28:10:c4:f7:f5:7f:5a:ae:69:d8:7c:64:ac:6e:
8d:48:ba:37:f8:8f:70:ef:6b:3c:d9:0a:b6:d2:e9:
8c:71:1c:7b:df:f0:52:9d:96:ae:68:c0:83:9e:a2:
32:78:0d:f8:9d:eb:0b:f3:d3:a0:35:bc:1a:a4:a3:
c0:be:81:80:3f:6f:54:a7:7a:d2:01:89:1b:74:3e:
5e:9e:74:7e:ad:df:32:25:42:84:e9:b0:19:38:70:
89:ed:d7:1b:22:8b:b8:7b:f8:47:bf:6a:df:ad:9c:
05:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D0:2C:84:9A:44:4F:91:9E:0A:74:D9:C3:F2:D8:26:0E:68:1C:0A
X509v3 Authority Key Identifier:
keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:1c:1a:13:73:76:cf:9d:a5:d0:b0:ca:71:a6:bb:9a:7c:ee:
ba:82:d5:3a:8f:2c:9e:8f:26:c7:ab:24:87:86:f2:59:9a:97:
11:06:b7:bc:a7:a0:7c:62:d6:16:52:4d:8b:25:dd:b4:3b:71:
8a:96:ad:88:7c:37:60:ca:f7:71:8b:f7:22:7b:17:24:c2:e0:
d0:d8:82:83:43:c4:f0:d1:7e:65:87:2f:73:82:c4:56:84:9d:
5c:04:94:38:9a:e5:8a:fa:0b:8f:ac:20:b6:4a:8c:3d:08:df:
a7:1f:aa:9a:f6:62:0b:8f:af:d3:bf:a4:10:5f:7d:59:89:5c:
e2:43:ab:90:7f:4f:36:41:68:01:9f:b3:a8:f2:f1:7d:48:cc:
db:23:c2:65:fc:68:d0:6a:7f:6d:24:b1:09:d2:05:63:02:c4:
d4:1a:92:4a:14:a2:82:25:30:bd:82:89:9d:08:4f:d3:e4:5c:
e6:9b:52:f2:e3:a1:d3:f7:c7:0e:a4:a5:7d:70:c1:c0:7d:60:
79:c4:55:c3:f7:9d:fd:9f:b1:ba:1f:8a:a9:60:07:07:73:2d:
30:84:39:2b:13:23:b7:ea:d7:73:89:e5:f0:96:1f:fe:6a:b8:
d8:b1:7c:3f:cf:f4:04:3d:79:47:ca:12:ac:cf:a5:40:7a:d1:
9b:8f:90:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:28:07 2025 by rpki-client