Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
File: IzlKEl-jrODEem_jT0CGtNO6VYg.mft (raw, json)
Hash identifier: RD1zWQbEJfODIWZjgYL69VkBD2kaH8R2GBpBQQZtWro=
Subject key identifier: 3C:49:C4:E1:CF:37:44:E1:91:B7:1E:43:00:FF:DB:5E:37:83:14:A2
Authority key identifier: 23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
Certificate issuer: /CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Certificate serial: 01984BF8B68171781692A8D3405EF9180D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
Manifest number: 1610
Signing time: Sun 27 Jul 2025 13:00:47 +0000
Manifest this update: Sun 27 Jul 2025 13:00:47 +0000
Manifest next update: Mon 28 Jul 2025 13:00:47 +0000
Files and hashes: 1: 43AxQadttxpukdA8vcrVdRW-t5w.roa (hash: kF6ocnoDs/XQiaEmG2F7DKuzq9j+uOFKWVL4Npen2L8=)
2: IzlKEl-jrODEem_jT0CGtNO6VYg.crl (hash: Yb05eWCE4rBbDQseD7rUD/x76/RWZhjvUPtCnjvZuIM=)
3: hSxMBu_igMJgBtfSOfQQ4Pj49pw.roa (hash: bffcp9BhaMHMTNVqsuxgb/xO/YYHeGPregGtKUrYEWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:f8:b6:81:71:78:16:92:a8:d3:40:5e:f9:18:0d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Validity
Not Before: Jul 27 13:00:47 2025 GMT
Not After : Jul 28 13:00:47 2025 GMT
Subject: CN=3c49c4e1cf3744e191b71e4300ffdb5e378314a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:4c:5d:93:38:e8:91:92:ec:20:9d:fa:a6:
45:ac:f0:1d:4c:b8:5a:2c:fd:64:bd:34:8e:e4:63:
7e:69:41:8e:54:4e:e3:3e:70:51:e1:ee:2b:ac:6e:
86:f7:5e:79:c4:b0:1f:d5:33:fe:6a:d9:c6:65:e4:
7e:f8:16:2c:d3:50:6d:87:8d:fa:c9:04:06:d3:34:
4b:44:68:7b:30:10:44:90:65:fb:2f:ec:f4:f8:bc:
15:92:02:0a:8b:39:2a:46:a1:dc:91:26:f3:a1:d9:
97:5a:47:4f:1a:a8:59:c2:f7:ff:f2:67:63:4f:70:
33:2d:37:06:e1:ee:94:f7:2d:49:b8:b2:18:02:58:
45:14:e9:b0:34:2a:53:af:f1:ec:40:50:d3:cf:3e:
0e:51:76:fe:09:be:7c:9c:3a:b3:51:21:28:26:10:
c6:bd:5c:5b:bb:8a:cc:c9:b5:47:40:a5:6f:5d:54:
d6:d3:45:32:87:47:5a:6f:a9:53:52:20:24:b5:24:
51:9c:e9:23:54:8e:b6:8e:43:6a:79:32:1f:92:56:
b0:02:85:df:ce:11:2f:38:b3:94:7c:d4:41:d2:96:
43:20:e1:6f:de:ea:81:f2:0e:81:eb:8b:42:69:ef:
0f:23:a8:f2:fd:6f:1b:89:ef:49:91:26:6b:58:31:
6d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:49:C4:E1:CF:37:44:E1:91:B7:1E:43:00:FF:DB:5E:37:83:14:A2
X509v3 Authority Key Identifier:
keyid:23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:79:ba:76:21:24:99:39:d0:75:3b:ba:56:7c:69:b0:39:4c:
46:d1:77:7e:c9:a7:9f:1b:c8:f1:0e:95:ec:18:fb:6b:19:f3:
96:cb:08:a3:cc:ea:a8:5e:31:56:7f:e2:0e:f0:b4:0a:b4:71:
8b:4a:73:ed:ef:9b:58:ba:1d:81:4c:61:1b:a8:a1:10:0d:56:
4d:8f:48:2b:9a:af:91:d7:27:a5:85:fc:cf:05:db:0c:9a:fc:
e4:5c:42:c5:c8:de:6a:8d:ed:18:18:ed:00:6c:27:e8:0b:bf:
3c:00:06:d8:ad:97:80:6d:00:a1:74:b5:1c:56:da:9d:f6:df:
c8:d5:72:e2:69:48:66:f7:ae:3b:5c:49:e0:a4:d8:e9:84:72:
13:a2:a9:94:a5:cb:af:48:86:10:26:9d:8d:e1:c6:02:8a:1d:
4b:76:be:ae:b4:60:6b:3d:32:35:74:29:74:c2:c8:b1:38:04:
c9:7f:c7:de:87:3c:82:2d:a7:32:8a:3f:8c:c5:8c:36:0a:3a:
52:31:61:d7:fc:9f:3a:0f:44:90:25:73:8b:7e:3b:4b:22:44:
9e:03:fd:dc:18:a8:93:d7:99:e7:d8:f8:6b:b7:18:56:75:e6:
67:fd:44:02:f4:5a:66:84:75:1f:4c:0e:16:7b:11:8f:0d:1e:
20:96:22:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:24:14 2025 by rpki-client