Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
File: iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft (raw, json)
Hash identifier: Re+TPyyPVyGxTgC8yPobGe38R2NDhakbBaZIorA8SaU=
Subject key identifier: 1B:5D:37:2F:84:8F:18:F2:27:C1:7C:1A:41:47:B4:89:82:E3:92:5E
Authority key identifier: 88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
Certificate issuer: /CN=88fc58875608970d9a728347d05ef00d0f1d5611
Certificate serial: 019846D1D9B9555867CF95E11EA1E7EA1C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
Manifest number: 0F6B
Signing time: Sat 26 Jul 2025 13:00:14 +0000
Manifest this update: Sat 26 Jul 2025 13:00:14 +0000
Manifest next update: Sun 27 Jul 2025 13:00:14 +0000
Files and hashes: 1: glHtLecTNUxeR4oxupaJRTlQLos.roa (hash: tjH899kftJHgu4JmkbHHTA84WKPpmWW00cLzLNo7wBg=)
2: iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl (hash: DIawuW9Lke6iwCLGZbOVpGTuDvmM0gqQaQbCK48JuNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d1:d9:b9:55:58:67:cf:95:e1:1e:a1:e7:ea:1c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fc58875608970d9a728347d05ef00d0f1d5611
Validity
Not Before: Jul 26 13:00:14 2025 GMT
Not After : Jul 27 13:00:14 2025 GMT
Subject: CN=1b5d372f848f18f227c17c1a4147b48982e3925e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:be:ba:b1:f8:2e:97:4f:b1:9f:ed:fc:17:a9:
2c:b0:2d:28:54:a7:a4:75:56:c1:59:56:40:d8:05:
13:d4:42:09:08:bb:f9:7f:62:27:40:47:a1:80:7c:
fb:dd:a4:df:fe:9b:73:9d:52:a0:46:80:ed:da:f8:
ce:c5:1d:5a:da:c4:3a:46:3b:e6:57:c5:2a:34:8e:
e3:b9:ea:7c:83:01:a2:98:3b:11:a8:a9:a1:b7:c2:
99:53:bd:e2:77:d5:a9:ba:0b:31:2d:fd:9f:c1:bd:
69:dc:fc:96:89:bb:92:79:64:e6:bc:c6:d7:1d:05:
ca:f7:5d:a8:11:ad:e0:c6:08:a4:94:81:23:55:02:
e4:b8:ea:32:8f:aa:b6:8f:40:ff:19:f6:35:cb:83:
be:e5:68:a4:0c:98:3d:78:e0:65:73:d2:28:da:fa:
a2:b0:7b:7d:a5:45:b9:f9:ed:01:9d:a9:0c:fd:f8:
33:86:37:89:7a:54:45:6d:85:c5:9a:49:db:ba:b3:
f2:f3:24:89:28:69:8a:c9:7c:d6:22:59:29:5c:6f:
91:4a:27:60:77:fd:b5:3a:7b:03:8f:61:97:28:23:
2e:e5:c7:d4:06:7c:2d:9b:b5:85:6a:6c:f7:5e:5a:
ee:95:c6:25:fc:3d:8f:32:a9:b9:c7:6a:23:54:ce:
0d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5D:37:2F:84:8F:18:F2:27:C1:7C:1A:41:47:B4:89:82:E3:92:5E
X509v3 Authority Key Identifier:
keyid:88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:05:3c:54:0f:31:7c:a5:75:bf:95:48:a5:22:27:62:d4:89:
09:05:34:77:1b:5d:8d:c1:55:32:cb:91:23:36:3d:a0:ef:b2:
39:29:67:f4:4f:3a:e9:6c:84:91:73:58:05:23:86:8a:7c:e4:
14:4d:c5:22:21:16:eb:24:26:00:b0:4c:87:f0:1d:86:92:5e:
33:f8:35:94:d9:92:c1:90:22:db:aa:bc:88:d0:48:1f:49:0e:
8e:81:91:64:77:de:4c:66:89:e9:96:d1:8f:2b:2e:be:62:c5:
dc:10:9b:19:d8:47:f6:2b:94:fb:f8:94:57:4a:87:36:11:ce:
d3:b6:d0:5a:d0:b6:24:96:87:3b:cc:9f:32:98:19:26:05:95:
65:da:99:da:94:27:1a:61:07:ad:33:8f:a3:9f:e8:ac:fb:13:
d1:b1:f9:7f:72:74:ef:2b:56:6f:88:4f:fb:43:d8:66:84:64:
d4:20:b7:e2:ff:06:8e:c7:86:1e:17:7b:a9:88:1e:d8:6d:e0:
83:a0:27:c2:4c:cb:d5:79:fa:94:03:11:9e:a5:6c:6b:80:08:
ee:ad:43:f6:d8:65:0b:19:bf:cb:0d:35:3d:90:05:51:df:d6:
d8:ea:42:64:43:07:f9:2c:00:1a:d4:de:54:09:0f:d1:b5:28:
4c:ed:c9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:59:20 2025 by rpki-client