Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
File: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft (raw, json)
Hash identifier: IHRvqGi6xPjVzlp9Q6DmqTqVSzHvE+w0T0KnWNWalzk=
Subject key identifier: CA:C0:DC:4F:6C:94:16:E6:10:97:6C:AA:3E:08:4E:43:6D:9B:8C:8C
Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
Certificate issuer: /CN=21a00080cd2cb1bb073903b32b25ad660a366486
Certificate serial: 019847AD6F1E346516DAC8681932B51176A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
Manifest number: 14D5
Signing time: Sat 26 Jul 2025 17:00:05 +0000
Manifest this update: Sat 26 Jul 2025 17:00:05 +0000
Manifest next update: Sun 27 Jul 2025 17:00:05 +0000
Files and hashes: 1: 1KLC3gBk4V8UlL1q34VPnUxHzZY.roa (hash: PpTqyE9jhdplaM4jeC6bew/Mkzc7lRGupafDYfql5k0=)
2: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl (hash: f23cosGJ6vQLV6USvQN9eTlD5iz7IjeVsq6xg/lP2cY=)
3: QdEJ7zpCJnQlkbu72Bn_JyCb_EM.roa (hash: uicaL7GuC1Mghzq3VpHhej/MKa/9KriBzrxlFVoCpcc=)
4: WylnrO-wU58E26AefCAQ7nrb79w.roa (hash: y1OWdCLTeRgES3w6dtbyOUz1ZW2NZGMx2qqGlzUOOl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:6f:1e:34:65:16:da:c8:68:19:32:b5:11:76:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486
Validity
Not Before: Jul 26 17:00:05 2025 GMT
Not After : Jul 27 17:00:05 2025 GMT
Subject: CN=cac0dc4f6c9416e610976caa3e084e436d9b8c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1c:b3:2a:b3:8f:76:6f:8f:e3:b3:c4:7a:1d:
93:bd:54:ea:d2:82:17:f6:3e:8a:7c:0f:a0:83:d5:
27:86:19:1b:31:b1:6a:fa:b8:c9:45:5b:e6:df:08:
59:b4:5e:c0:aa:3c:8a:4e:5c:73:0b:df:cd:40:d0:
e2:55:10:36:5e:0b:01:11:b6:d0:e7:88:3b:b8:08:
53:c3:08:ce:f6:31:20:f8:ba:0c:48:79:23:c5:f7:
83:10:0b:61:38:92:6c:0d:e0:9b:e8:34:da:3e:48:
70:f2:50:b7:82:4c:1f:c5:03:6d:6b:33:7e:67:3e:
34:c7:a8:e2:fe:dc:e8:51:7b:6a:63:3a:c3:b7:b5:
5b:4e:60:26:0c:30:c1:f8:76:58:5a:b2:be:6a:fd:
b1:5e:5f:57:e7:17:c6:a7:02:49:80:80:ec:d5:53:
27:a3:c1:3b:1f:ea:5f:08:36:ca:18:56:75:2b:84:
4e:87:ea:62:66:d8:23:93:4f:c0:31:51:8c:a9:43:
a2:49:f0:22:3b:1d:de:40:72:f0:6f:df:21:d2:72:
12:e8:f8:29:13:ba:5a:45:6e:9f:4b:75:bc:8f:26:
1e:2a:e7:52:fb:1c:79:0b:91:fc:a4:f0:92:6d:b0:
5b:b9:97:32:59:ba:d4:25:92:f3:b6:ab:a8:a1:0e:
1c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C0:DC:4F:6C:94:16:E6:10:97:6C:AA:3E:08:4E:43:6D:9B:8C:8C
X509v3 Authority Key Identifier:
keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6a:84:ba:a1:b8:0f:32:b2:62:f1:67:d4:43:ea:db:44:9a:
a7:47:93:f1:20:47:81:4a:4b:40:3b:3f:c1:31:9c:82:85:d1:
4f:a0:14:5d:3a:40:73:27:7e:74:4b:3f:64:2c:6a:6a:53:d8:
51:ca:04:9c:73:91:79:06:e8:7d:28:cb:32:37:f2:48:7c:2a:
ca:a1:30:5b:0e:19:fe:61:04:88:d9:03:2f:7d:d5:63:42:f4:
63:c7:dd:79:3d:ab:2b:c9:21:ef:7d:4d:bc:1a:85:b3:e3:f1:
30:14:60:cf:08:c1:6b:5b:aa:7d:b7:6a:dd:48:60:30:7d:e6:
78:1e:ee:5f:78:7f:7c:d6:3c:4e:dc:73:42:fa:7f:56:b9:43:
3a:de:f7:33:9b:fa:61:37:e5:2f:06:69:d9:04:82:76:fc:0d:
1c:1c:9b:1c:86:9e:c6:08:e2:c5:d7:46:63:35:b6:cd:95:47:
ba:e1:df:8c:f2:b5:c2:d7:a7:b8:ee:6d:12:43:9f:24:01:87:
f2:8d:7c:49:68:dc:2d:d0:3e:f3:4b:9f:cf:e0:b9:ca:80:9f:
21:53:06:7a:20:99:c3:d7:ec:71:6f:62:06:0c:6d:bf:73:10:
d9:3e:c5:ed:9c:b1:35:67:2c:c5:2c:42:f1:80:ae:d1:4a:5e:
71:8d:81:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:52:57 2025 by rpki-client