Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
File: hI2YANad664Rt_gWHDzogYH957Q.mft (raw, json)
Hash identifier: W5A8nbiPV35QuyOo/m4xgVaYjg9kch4BiUz0x/us8lE=
Subject key identifier: 15:8F:8B:5D:8B:47:A4:18:0D:86:77:2E:3E:8B:25:E0:01:A9:DC:67
Authority key identifier: 84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
Certificate issuer: /CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Certificate serial: 01984475E610D10B7BA7601F4D945847D8DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
Manifest number: 09F7
Signing time: Sat 26 Jul 2025 02:00:33 +0000
Manifest this update: Sat 26 Jul 2025 02:00:33 +0000
Manifest next update: Sun 27 Jul 2025 02:00:33 +0000
Files and hashes: 1: Pi13Jn_f8QNwlYweA6cENA4uaSs.roa (hash: UZD7c+7NUs2opXS6uWJEcxhLpAXCSZYdWwe68q1uABI=)
2: hI2YANad664Rt_gWHDzogYH957Q.crl (hash: U1cavc+G1F6WhGN7t3EBSAGt3+Wp1bV1o/kqeV0tgck=)
3: kSeV1NXuoW2kMAhRuEJXNL0G3J8.roa (hash: BCpFIjkEeCfOQHY9iAYyAPzCmQqEp82NEt+xGk7yxzQ=)
4: sXoE76O0g9HbvTQdsrTuLQ6BEGY.roa (hash: 2c9XhIaXdBcwGvuorQuJKcEG+b0v5OcuRLvlracJLGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:75:e6:10:d1:0b:7b:a7:60:1f:4d:94:58:47:d8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Validity
Not Before: Jul 26 02:00:33 2025 GMT
Not After : Jul 27 02:00:33 2025 GMT
Subject: CN=158f8b5d8b47a4180d86772e3e8b25e001a9dc67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8c:79:b4:0f:09:79:de:ac:52:c9:ee:cb:1f:
69:d3:4d:d3:bf:37:3d:f8:08:8e:01:f1:75:c7:3e:
54:b0:71:76:11:4b:90:bf:e1:d7:ea:6c:60:23:94:
1a:34:fc:f6:d6:97:44:1e:a5:50:56:97:7a:89:3b:
ea:07:c0:31:00:2a:2a:e8:b3:61:08:61:de:9e:90:
49:dd:14:c7:16:8e:05:11:cb:50:bd:4e:6b:79:3b:
59:66:fa:b9:2d:88:b6:09:3b:91:32:53:a6:57:fa:
bc:76:2f:ae:77:2e:23:5e:b2:8e:d2:fd:29:c2:d9:
a2:65:de:8f:79:19:48:19:6f:08:bf:57:9b:b1:52:
64:e5:16:ee:82:f4:d5:da:86:97:a7:c6:17:6c:46:
6f:b2:04:22:aa:aa:bb:1e:12:3d:ff:0a:9f:8a:db:
60:b1:cd:15:88:17:94:42:7e:d3:41:45:ff:b9:ae:
2d:74:f1:fd:2b:52:0f:90:84:d3:90:69:90:a5:ee:
52:af:e3:c6:f5:77:53:c6:94:be:0f:83:ec:ef:90:
a6:b7:07:8a:1d:10:d1:bb:cb:f2:86:d5:32:fb:b0:
5b:a8:c3:94:79:33:f2:1c:2e:0b:34:84:a3:73:f7:
af:a5:58:34:ec:2b:e5:3b:fd:e0:ae:37:97:d1:df:
ef:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8F:8B:5D:8B:47:A4:18:0D:86:77:2E:3E:8B:25:E0:01:A9:DC:67
X509v3 Authority Key Identifier:
keyid:84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:de:f9:f8:89:5a:c8:2c:06:7c:5c:3e:7e:d3:4c:9d:36:d9:
67:30:2c:f3:67:b5:f8:11:e5:45:32:84:c0:ed:04:9e:d8:c4:
e8:b3:24:17:7e:23:62:74:10:c1:09:67:fe:dd:b1:27:de:f1:
e4:9c:c5:aa:85:b3:88:8a:43:67:dc:3d:47:c5:c0:58:68:a0:
e6:58:d0:cd:0f:ba:0f:f0:5c:46:68:7e:c1:68:23:d1:dd:81:
28:43:28:8b:fe:3c:c3:5a:48:02:f0:7c:c0:02:73:58:cd:2a:
b8:09:d3:d3:b1:8a:b1:2a:a3:87:71:eb:9b:ff:23:ba:d9:4b:
d4:01:ef:58:31:91:60:f0:d7:44:4c:16:8a:f7:63:13:10:62:
23:3f:05:57:23:b8:ad:4a:32:f2:00:c0:4e:e5:21:d1:69:36:
95:c2:47:39:2b:80:44:a6:20:fb:a3:4c:69:bd:72:ce:7e:78:
87:9b:4f:12:53:a8:40:7c:8a:1a:f7:4d:0a:a2:13:db:45:67:
f2:b5:09:c9:52:1f:91:a9:d8:9f:34:4d:0e:ab:f4:97:08:b8:
ed:07:10:c7:41:bc:bc:ec:3c:93:bd:da:d2:9d:ee:88:4e:87:
fa:e0:0a:9e:cb:3a:cc:f0:2c:c6:a2:5c:60:f4:da:92:cf:c8:
77:f7:94:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:27:02 2025 by rpki-client