Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
File: iLda7v6O6hrFwhnYdQXS58XzL0g.mft (raw, json)
Hash identifier: sFljBVMEFVm0Lv/yVUKQjakrEFQIgq/iOFeyvY3kItg=
Subject key identifier: FD:C5:AE:7D:80:B0:8C:62:B7:69:AA:7D:A6:46:6C:3D:49:56:AC:0F
Authority key identifier: 88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
Certificate issuer: /CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Certificate serial: 019858D992995FAA630DEBD11CEF1A982696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
Manifest number: 160A
Signing time: Wed 30 Jul 2025 01:01:50 +0000
Manifest this update: Wed 30 Jul 2025 01:01:50 +0000
Manifest next update: Thu 31 Jul 2025 01:01:50 +0000
Files and hashes: 1: RmCRqlQnRe9rCwX7VMuUVE41d98.roa (hash: /tq1VC9HIJ7jRew5LuuwcJaQrPrPH8vbpHUg/uqU1rE=)
2: iLda7v6O6hrFwhnYdQXS58XzL0g.crl (hash: MeX6JaPLTXEvrTBtADCILbmVfN11KFvyPA9FEEziPII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:d9:92:99:5f:aa:63:0d:eb:d1:1c:ef:1a:98:26:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b75aeefe8eea1ac5c219d87505d2e7c5f32f48
Validity
Not Before: Jul 30 01:01:50 2025 GMT
Not After : Jul 31 01:01:50 2025 GMT
Subject: CN=fdc5ae7d80b08c62b769aa7da6466c3d4956ac0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a2:16:d0:50:de:29:7e:6b:14:45:a0:21:5f:
62:0a:10:89:27:58:02:4b:bf:a9:78:d2:5f:20:7e:
71:c5:c0:6b:c0:6c:d5:f5:de:85:dd:f7:83:94:2c:
54:1a:c4:dd:0e:05:14:87:df:4c:f4:87:ab:61:e4:
ce:26:31:6b:23:f1:8b:33:e5:0f:7c:92:6e:f4:5f:
60:de:66:79:e6:8f:dd:99:3d:1d:9b:78:12:44:f9:
5c:c1:b2:69:b4:33:2e:8a:79:cd:bd:c3:40:e7:4c:
18:9b:2f:2b:6e:c9:1c:57:61:e8:7b:93:e0:30:06:
3b:61:32:3a:d5:37:93:c8:ce:13:2f:89:19:75:c5:
94:fe:47:0d:dc:14:3d:3c:c1:52:b2:f0:74:0c:5d:
1c:a8:b0:c4:e5:de:0a:9b:be:a2:3e:24:53:3e:d2:
73:cf:c9:8b:6d:36:a9:2d:96:02:3f:59:57:b3:91:
4c:a5:4c:78:bc:35:a6:ad:d7:6d:f1:2b:2c:6a:30:
3c:3f:31:ee:69:4e:19:22:5d:6a:1b:a0:97:ef:a9:
84:6e:e5:cb:f9:f6:eb:c0:95:6e:4c:56:5e:f3:bb:
e2:94:45:d3:b2:95:ad:ee:59:65:9e:9f:6d:cb:75:
15:49:a6:f6:fd:35:ad:52:8d:d7:cb:78:e3:d2:7a:
ed:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C5:AE:7D:80:B0:8C:62:B7:69:AA:7D:A6:46:6C:3D:49:56:AC:0F
X509v3 Authority Key Identifier:
keyid:88:B7:5A:EE:FE:8E:EA:1A:C5:C2:19:D8:75:05:D2:E7:C5:F3:2F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLda7v6O6hrFwhnYdQXS58XzL0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4d2831-12ec-4770-9cea-9ac08c3eaaa1/1/iLda7v6O6hrFwhnYdQXS58XzL0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:0c:46:10:47:9c:59:e7:05:dd:ea:84:bc:39:2b:41:ed:47:
a3:7e:ee:8c:33:e5:d7:0d:9e:35:6d:e7:35:24:c0:ab:a1:34:
56:38:a4:e3:4f:b2:b1:2a:50:1e:80:25:0c:91:99:99:f8:81:
2b:e9:fc:65:a6:b9:bd:63:c6:7d:86:ec:3b:6d:51:59:1e:fe:
0a:da:61:3f:a6:e7:87:79:c6:c3:3b:6e:8f:1f:a6:71:0f:2b:
e3:4b:00:ba:88:7e:79:bb:c6:4a:d9:c1:1a:23:d6:62:a6:dd:
0d:2e:78:e7:4d:fa:fb:bb:59:1f:53:b5:cd:da:45:79:c8:e8:
54:c1:f9:a5:d1:98:1e:e3:1a:80:a6:65:d3:68:93:7e:da:8b:
0f:d0:97:a4:84:61:45:ab:fd:95:e7:9b:84:bc:db:ae:08:fc:
da:50:75:ec:e0:b4:cf:74:5f:4c:79:89:dd:fb:07:76:94:00:
32:1d:58:ea:85:c8:3f:58:1d:9b:09:7f:f7:df:e0:1e:9e:8e:
21:0f:fd:54:5b:55:06:ca:83:8c:9f:55:7b:ed:c9:b8:bf:ec:
f9:c0:17:a0:06:4b:6d:87:9d:83:c3:ce:ce:e0:dc:00:d7:06:
27:40:cd:f4:d5:66:a7:b9:f0:0d:c9:bf:ab:20:be:b5:e9:4f:
29:51:c4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:38:22 2025 by rpki-client