Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
File: Iet_m1iVK56Ar897vboysmo00KE.mft (raw, json)
Hash identifier: NsopoUEiIZijE3Xv5Fnvzihg91gZuKt9P4K2dlftOPo=
Subject key identifier: 3F:0D:3B:D8:7F:16:21:39:7E:DC:AA:77:3F:DD:3D:4C:40:3F:38:3C
Authority key identifier: 21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1
Certificate issuer: /CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1
Certificate serial: 01984A41821A18A70BC167A3471483BDC461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
Manifest number: 12D5
Signing time: Sun 27 Jul 2025 05:01:03 +0000
Manifest this update: Sun 27 Jul 2025 05:01:03 +0000
Manifest next update: Mon 28 Jul 2025 05:01:03 +0000
Files and hashes: 1: Iet_m1iVK56Ar897vboysmo00KE.crl (hash: Rsoz/UtYPzJLWNQJiVIUUQ+CcR0nq0TfIZwgBD43A1s=)
2: awEUUsb69K1CqabOYZXpO61MCTg.roa (hash: 9PPvHVQ3Mjg4T1Rer/rBY6hN8ex1RSBq3SwkRV1OUrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:82:1a:18:a7:0b:c1:67:a3:47:14:83:bd:c4:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1
Validity
Not Before: Jul 27 05:01:03 2025 GMT
Not After : Jul 28 05:01:03 2025 GMT
Subject: CN=3f0d3bd87f1621397edcaa773fdd3d4c403f383c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:e5:a6:95:d1:6b:d9:32:46:37:e4:d5:61:
ed:d0:36:e7:a1:81:b6:c1:a0:a9:df:cb:e1:c5:60:
25:50:05:f9:ab:23:f7:c4:e9:4f:77:3a:a6:ee:ca:
e5:fd:11:a1:1b:92:bc:4c:53:5c:33:da:d9:29:3c:
00:31:01:90:3f:20:27:1f:7f:33:db:25:7d:30:e6:
1f:82:2c:6f:b9:47:e1:f0:61:f1:93:ff:72:66:7c:
8b:60:96:01:9a:7b:15:8d:cc:e1:88:2f:7f:1a:34:
95:76:09:f3:b0:00:0e:c4:33:b9:14:02:c0:2e:19:
70:28:3e:a6:a8:e5:dd:67:e4:cf:68:80:e5:66:23:
76:f5:e5:2f:e7:c6:9c:26:59:33:fa:38:30:08:ee:
67:e5:7c:dd:20:4e:ec:33:27:df:b5:bf:86:d2:f3:
6a:95:93:78:20:c3:81:43:a4:d4:13:8d:bc:3d:9d:
2c:e1:17:34:af:82:a9:38:0f:18:1f:f2:70:ee:3a:
8a:5e:b9:00:68:ae:c5:d1:10:6e:2c:46:7a:2d:79:
a3:ec:56:4e:86:7c:24:b0:54:cf:d2:a9:8e:f0:f2:
31:03:0a:92:7c:79:0d:1d:74:05:9b:8d:1c:ba:bf:
39:b6:7a:9a:62:34:9f:31:12:f5:36:ba:1e:7a:4a:
69:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0D:3B:D8:7F:16:21:39:7E:DC:AA:77:3F:DD:3D:4C:40:3F:38:3C
X509v3 Authority Key Identifier:
keyid:21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:42:69:5b:88:fa:2a:55:6f:11:76:18:40:56:51:98:eb:07:
fd:4b:19:7c:c5:ed:81:0c:cc:7e:64:3e:44:1d:93:3e:bf:fe:
90:35:ca:4f:53:ba:48:27:1e:d2:73:dd:ae:31:f2:58:f5:ce:
24:c7:21:b2:1e:d6:57:dd:0a:13:81:d3:b5:09:e8:cb:21:b3:
93:51:b5:b1:ca:4e:ed:26:e9:d3:45:0b:42:a5:fd:22:7e:f6:
0e:e0:7a:8e:80:62:a1:f0:07:15:75:43:0d:af:7e:26:73:33:
a3:94:d2:a9:40:9c:ca:ee:d8:8d:5a:ba:3e:0a:08:98:1c:9d:
7f:c2:f8:62:58:25:0d:09:00:c0:a8:52:51:c5:76:63:17:86:
4c:1c:2c:5d:01:fb:c5:eb:39:52:0e:33:0b:36:c8:f3:a1:0c:
d8:f0:04:c5:eb:64:a4:5c:a5:f0:20:be:5e:d7:52:8a:38:bc:
ed:4f:51:ae:15:b1:22:aa:0c:24:47:9b:ba:d3:5b:ec:0e:c7:
cc:ce:19:dd:43:4c:17:a0:2a:b7:f7:76:0f:36:87:5f:db:6b:
ad:5e:35:ab:c2:9e:17:14:77:84:76:1d:60:3d:8b:47:8f:58:
f5:96:ff:23:79:e6:2f:81:ce:93:e0:72:a7:53:15:68:62:7e:
7c:20:bd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:49:18 2025 by rpki-client