Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
File: Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft (raw, json)
Hash identifier: gko8mw3Tsiq9RmauqkqruuWhqT23iPVJCM6VtX6rKu8=
Subject key identifier: 63:3D:89:4C:25:DE:33:1B:2D:BD:6E:06:06:F6:11:82:29:90:28:88
Authority key identifier: 23:0D:31:1F:C1:94:63:FD:D3:0A:DE:CC:91:7B:5F:02:98:74:1B:44
Certificate issuer: /CN=230d311fc19463fdd30adecc917b5f0298741b44
Certificate serial: 01984AE5894F6906DB16F65549B0A9EDC306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
Manifest number: 101E
Signing time: Sun 27 Jul 2025 08:00:13 +0000
Manifest this update: Sun 27 Jul 2025 08:00:13 +0000
Manifest next update: Mon 28 Jul 2025 08:00:13 +0000
Files and hashes: 1: Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl (hash: icXHOy1zhmWJrR4Hq+eTPw2Sjfs4ZSfKhZlO0leOUOg=)
2: qaZCGy8ImKVej6couAVTC--aSzI.roa (hash: dKUZq0YlDWheyPATDjfQQ4lypZzKgD8qgqRTkln0uKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:89:4f:69:06:db:16:f6:55:49:b0:a9:ed:c3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230d311fc19463fdd30adecc917b5f0298741b44
Validity
Not Before: Jul 27 08:00:13 2025 GMT
Not After : Jul 28 08:00:13 2025 GMT
Subject: CN=633d894c25de331b2dbd6e0606f6118229902888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d9:22:28:15:0d:05:de:25:21:b7:41:32:ea:
b5:2b:1d:3c:a2:9e:de:5c:aa:07:dc:8f:43:4d:2d:
ba:45:af:28:35:e1:49:74:c9:98:40:ce:59:3e:b3:
41:5a:3c:f5:20:c9:da:b7:86:34:45:21:8a:93:d0:
54:10:5b:e9:10:10:fe:b5:7e:27:3d:e0:77:5a:da:
47:6c:65:a5:58:43:a8:c9:c6:c7:ec:1b:94:56:ff:
a3:b3:0b:12:22:bd:33:98:68:ec:fa:9c:34:03:5c:
ad:cf:4f:bf:85:35:21:b6:a9:83:1a:38:a9:c4:46:
9f:00:7b:88:b5:4b:b5:8c:22:57:0d:b4:e1:c6:9a:
e0:31:6f:f1:78:40:70:5b:e6:12:52:62:64:d2:ca:
f3:58:c6:96:88:cd:3a:b1:c6:35:33:b9:87:a0:92:
a4:a2:5c:cb:e2:eb:40:4c:75:21:05:64:fb:2d:3b:
f3:85:a5:f7:c8:9e:ff:ba:b2:ff:21:ed:16:73:2a:
da:ea:c7:4a:f4:34:59:ee:f6:5e:96:20:03:54:a8:
5d:7d:a0:3b:ec:fe:bf:bf:3f:57:55:9c:0e:b0:5d:
36:05:6a:98:d7:3f:8e:6f:6c:c3:92:3c:d5:c5:56:
79:1f:d4:e5:93:fc:45:cd:7d:a5:05:06:9b:e0:51:
45:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3D:89:4C:25:DE:33:1B:2D:BD:6E:06:06:F6:11:82:29:90:28:88
X509v3 Authority Key Identifier:
keyid:23:0D:31:1F:C1:94:63:FD:D3:0A:DE:CC:91:7B:5F:02:98:74:1B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/281dfb-3293-4bab-ba22-1becb5dcd7aa/1/Iw0xH8GUY_3TCt7MkXtfAph0G0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:12:ba:cf:6c:e1:d0:e3:f8:be:77:d5:24:5c:09:27:d6:8e:
b0:6e:97:60:a6:6a:97:ae:a1:8c:08:47:e1:b9:25:7d:a6:1d:
c9:a8:90:78:30:9a:3d:d5:2f:7d:61:f2:e6:83:72:6e:79:d3:
b6:32:8e:f3:c5:65:51:bb:45:1c:4b:ac:1e:03:91:25:6e:14:
44:c1:90:8b:8c:7c:19:54:ef:c5:12:d8:e7:86:0f:1f:2c:18:
76:2b:82:0c:e4:5c:b6:18:3b:72:a7:a5:72:d1:43:10:5a:c9:
4a:2c:04:a8:9b:55:34:47:af:51:fd:00:dd:90:70:61:0f:f6:
65:ae:de:09:6d:95:6d:a3:4e:69:c2:21:df:b3:f1:3f:a2:e9:
ec:83:42:b6:37:77:e7:b6:18:92:d5:9f:4c:af:0d:90:6d:ce:
ef:e8:4c:80:01:e2:3c:05:cb:ab:28:c2:31:8c:04:29:83:23:
91:87:3c:8e:a2:b0:0b:a3:b7:0a:10:10:cf:af:d0:d6:a1:44:
94:74:89:22:27:81:0a:e0:a5:08:8f:32:a3:aa:ef:6c:fd:58:
81:c8:07:d8:70:5a:99:92:09:fd:8d:05:06:bd:32:15:c9:80:
23:fb:bf:75:8e:e3:74:65:4f:ef:97:52:80:b0:1e:d8:36:32:
14:39:cb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:35:15 2025 by rpki-client