Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
File: iib0dtYIYlrR_gblK5dKn2bwFBo.mft (raw, json)
Hash identifier: p9BmRRs1rB26OH0ys5UmUkt/BUif9TfIUe30d4KYPY4=
Subject key identifier: F2:68:52:0F:86:C9:7C:47:55:E8:2E:F5:2D:75:03:E3:F2:CF:41:3C
Authority key identifier: 8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
Certificate issuer: /CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Certificate serial: 0198499C6CC796F3A55B1F9CDD350C23404A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 02:00:44 +0000
Manifest this update: Sun 27 Jul 2025 02:00:44 +0000
Manifest next update: Mon 28 Jul 2025 02:00:44 +0000
Files and hashes: 1: VGVyrg_KWe6qJVf2EFW5rg282l8.roa (hash: no1Xp/fKJZHQHLgUjaAU6HFgcxae88YxDTT3wdaVfTw=)
2: iib0dtYIYlrR_gblK5dKn2bwFBo.crl (hash: F7SNMFlBg2dfEa/q+PvE3z+iHiXbSisZ42krp6hj8bw=)
3: jmjQM-Af7YixW0lhj7IQRUe7D0c.roa (hash: Tb54ESX/F3Guxq8pdf9XF/gmXcXHx+T4/bKA3b9RF5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:6c:c7:96:f3:a5:5b:1f:9c:dd:35:0c:23:40:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Validity
Not Before: Jul 27 02:00:44 2025 GMT
Not After : Jul 28 02:00:44 2025 GMT
Subject: CN=f268520f86c97c4755e82ef52d7503e3f2cf413c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:12:50:26:c1:52:51:98:61:b6:28:e8:4a:
36:58:d5:ad:39:5a:70:02:9a:5c:6c:34:a3:0a:67:
33:99:47:61:c8:93:6a:c5:2e:a1:66:d9:9b:c2:c6:
f7:bb:d2:dd:38:07:d2:16:5f:78:d5:81:66:6d:b9:
e9:a4:31:29:98:bb:c9:63:0d:d8:ca:aa:da:8c:3e:
c7:10:26:3c:de:46:cb:1e:97:7c:33:56:5a:f5:96:
5d:b7:ef:b9:0a:05:36:e3:2e:8c:34:f1:e4:3b:a7:
39:c5:c9:9f:57:0a:12:f7:70:4c:5e:59:42:ba:d3:
59:b7:85:34:9c:30:4c:20:a3:33:d9:bc:26:62:16:
65:64:f9:0c:4a:24:d3:71:7b:d8:03:7c:30:4e:44:
46:41:a2:ae:9e:a0:48:27:3f:76:1a:a3:0b:90:40:
85:f6:18:43:c4:e8:56:e0:f6:2e:a4:ea:fe:b7:9b:
56:19:fc:ce:e1:85:d0:82:11:c5:10:75:4a:a5:e2:
3f:af:26:9e:29:1b:87:25:17:bf:bc:78:a7:b2:14:
9e:cb:e8:67:54:fe:25:be:08:59:70:c0:b1:5c:74:
90:99:39:3b:44:ab:46:51:69:12:fd:9a:51:8e:f0:
79:85:cb:05:f3:43:65:d0:1e:6f:b4:a4:9b:03:0f:
4d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:68:52:0F:86:C9:7C:47:55:E8:2E:F5:2D:75:03:E3:F2:CF:41:3C
X509v3 Authority Key Identifier:
keyid:8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:57:9b:1b:54:31:79:cf:2e:31:6a:81:3b:a4:e9:39:f3:65:
e4:41:5e:30:41:28:a1:a3:0c:20:4a:43:fb:49:c7:ba:a3:ad:
d5:e0:cc:c8:21:9a:1e:c1:24:10:32:9e:f7:7a:f7:be:56:65:
e1:11:b6:2e:a5:b3:e5:bd:c7:44:07:2a:d0:23:ff:eb:57:09:
01:80:5c:8d:28:22:74:09:ca:1d:e2:2e:77:e2:fc:2b:bb:6d:
38:85:24:c5:ca:cb:c3:1f:b6:e7:3a:27:8b:01:26:49:55:c7:
1f:d5:10:95:ea:89:22:b5:a5:c0:77:f1:2f:9f:a9:97:bb:68:
8a:78:7f:80:4f:7b:f5:65:27:73:b2:00:c7:69:d9:58:83:9a:
86:91:ed:c5:63:86:e0:9d:a4:b8:f5:9f:25:ce:eb:f8:b2:c5:
ca:e2:6e:7c:56:62:e5:af:84:5b:53:4f:f3:ca:de:db:a1:f5:
58:73:30:34:fc:34:11:38:16:21:40:b0:3c:97:4e:8c:82:27:
36:9c:63:c5:54:ef:40:c5:43:1e:a4:4a:4d:9c:cc:15:ff:2d:
da:91:85:4e:38:75:c9:9a:1e:fa:7b:39:d2:94:76:35:f6:03:
01:6d:dd:90:d5:d8:90:d8:68:2d:c3:ae:00:f8:17:a7:2e:23:
8b:c6:49:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:57:42 2025 by rpki-client