Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
File: ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft (raw, json)
Hash identifier: q3eXV6dpj/4vtyB+VqNF4b1GdtngEXOONEnEXp2Tbdc=
Subject key identifier: C1:9C:48:42:7A:D8:61:78:57:7C:AE:AF:82:29:1A:98:F1:0E:B4:02
Authority key identifier: 8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
Certificate issuer: /CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Certificate serial: 019853E9625F93D68FFB2DE03F5BF20E63D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
Manifest number: 1606
Signing time: Tue 29 Jul 2025 02:01:00 +0000
Manifest this update: Tue 29 Jul 2025 02:01:00 +0000
Manifest next update: Wed 30 Jul 2025 02:01:00 +0000
Files and hashes: 1: SZpd9qPeF2_UcZ0BFTiD1uQx6CE.roa (hash: 4d7c/yFsOUlnwxOih4L4b458874C6mb5/7y63/As6E0=)
2: e6NTQMQbAc2rRpYIgSE0b5QlitQ.roa (hash: AW2JD/AMZP/3NkMYPVumCDsjg07AD98EjBhRoynRE5I=)
3: ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl (hash: ITDWLXA9VKRVUIEECksDDv78w2Xy2VEv8fqbKf2TXbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e9:62:5f:93:d6:8f:fb:2d:e0:3f:5b:f2:0e:63:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Validity
Not Before: Jul 29 02:01:00 2025 GMT
Not After : Jul 30 02:01:00 2025 GMT
Subject: CN=c19c48427ad86178577caeaf82291a98f10eb402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:08:7a:30:15:d5:74:54:44:b6:e6:b9:f0:
45:c0:16:d0:a0:f5:2e:bc:ed:1e:ff:a6:31:6c:52:
dc:2a:36:a5:f5:1d:19:a6:bc:5d:df:00:59:7f:46:
08:5f:b3:69:be:55:79:9d:a1:02:45:36:ad:a5:93:
34:92:ef:41:95:92:18:bc:81:3c:67:87:bc:ba:39:
3c:6e:75:e7:30:2b:a4:de:c2:a0:47:d9:83:eb:14:
6c:d1:31:b5:48:14:a5:e3:03:8a:6e:99:1f:c4:f2:
23:5e:bd:a0:be:90:14:8a:1a:03:c9:dc:86:0d:ac:
79:23:37:70:6e:d9:53:1a:3a:83:89:87:b0:86:e3:
3f:26:a7:3a:f3:fa:7e:ab:77:ff:3f:f6:96:48:87:
ad:f3:5c:ad:5f:a2:a9:79:28:be:29:ce:d0:31:d3:
ee:a3:aa:72:d6:26:aa:a0:37:be:8b:c0:bb:7b:b9:
51:6f:66:6b:41:02:be:a7:ed:d0:e6:7e:76:b5:40:
8a:dc:04:f6:5f:bb:fb:c5:b7:11:fb:e5:6c:18:17:
80:bf:f6:2b:be:c5:15:9b:92:9d:7d:80:db:04:2d:
81:f0:e8:a5:51:5b:10:a3:94:ed:a9:01:43:39:90:
c5:2a:92:8b:08:7a:2f:82:fe:a7:7d:98:c3:01:d2:
b1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9C:48:42:7A:D8:61:78:57:7C:AE:AF:82:29:1A:98:F1:0E:B4:02
X509v3 Authority Key Identifier:
keyid:8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b2:87:d7:ec:36:38:e3:c5:f4:1e:de:3d:c9:bc:53:dd:b0:
f8:63:6b:6b:c1:2b:4e:8f:c4:cc:1b:5d:e1:1c:a0:49:f6:7a:
f0:29:69:0b:8c:32:a2:64:5d:37:6a:e2:f9:42:8d:ad:69:36:
dd:82:28:2f:97:4f:70:09:6d:20:69:7d:fc:4e:f2:a8:df:b3:
e9:89:47:11:53:5a:b2:56:57:9d:74:88:7f:e3:b9:b3:81:2c:
26:70:02:bb:13:e5:10:ca:c2:c9:1b:dd:e2:6b:16:4d:e0:7c:
6f:39:11:d3:6a:cc:e1:8e:7c:20:c9:99:46:21:b0:0c:55:53:
ac:e7:47:7a:6f:f0:a4:aa:f2:c3:0f:d0:83:69:5e:b7:bf:da:
06:31:68:a5:fb:a5:f3:52:e3:21:7c:1c:36:da:27:a3:5e:5a:
65:b7:50:4b:38:8f:38:91:7e:8b:22:ea:7d:df:31:72:96:d4:
1e:1f:c9:d6:96:38:04:db:bc:78:91:04:c5:8b:3e:2f:ee:82:
a5:53:7a:50:75:5a:d9:3e:e4:1e:5a:1a:a0:36:eb:e3:a0:23:
55:81:2b:ef:f4:a1:96:28:b1:a9:3a:79:89:f3:81:7f:4a:89:
f7:63:22:6d:a7:d4:b9:57:ce:c7:cc:5b:90:2a:7d:60:f9:2a:
23:eb:8c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:15:15 2025 by rpki-client