Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
File: IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft (raw, json)
Hash identifier: CrPWFEYFjlKqcY8I6Cxc6xD4ctLDCcdbFECLjWeMAdw=
Subject key identifier: C0:02:40:51:E3:44:20:DE:97:E1:E4:14:81:21:13:B6:21:81:EA:BC
Authority key identifier: 21:01:B6:38:8D:64:35:F5:49:90:90:53:82:B4:1D:C9:67:5F:D4:90
Certificate issuer: /CN=2101b6388d6435f54990905382b41dc9675fd490
Certificate serial: 01985569315929FB41070B2631E6C131FDD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
Manifest number: 0497
Signing time: Tue 29 Jul 2025 09:00:13 +0000
Manifest this update: Tue 29 Jul 2025 09:00:13 +0000
Manifest next update: Wed 30 Jul 2025 09:00:13 +0000
Files and hashes: 1: EAD0diuoZK02qxxsVWWiclAVX5I.roa (hash: kzXgijoQ+OFnt0McFOmyH17ijOy9UUEek/dQbYMoKFU=)
2: IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl (hash: RlXvgbT86Zb5UREBB31t7ecYXkprnzkuIgz9syUW45A=)
3: nyGLR8VZWMaY-kU1NUM_fc4iRjM.roa (hash: voylSjHlayiNYZNWUzC6whbKd8QLUjoGC1qGpaQazoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:69:31:59:29:fb:41:07:0b:26:31:e6:c1:31:fd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2101b6388d6435f54990905382b41dc9675fd490
Validity
Not Before: Jul 29 09:00:13 2025 GMT
Not After : Jul 30 09:00:13 2025 GMT
Subject: CN=c0024051e34420de97e1e414812113b62181eabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7e:ad:95:f6:60:02:34:f2:78:41:b3:74:46:
dc:a8:99:ec:be:d6:85:0d:8a:0f:f0:1c:9a:95:99:
3d:dd:da:ef:d4:69:19:a3:87:26:0f:9b:86:a5:7d:
28:fe:b5:d4:ac:9e:43:54:ed:95:75:01:5c:75:c3:
b0:b6:b2:33:59:a9:9e:1b:13:f4:ba:76:78:5f:f1:
d1:f8:c8:bb:8a:8e:07:21:e7:37:8a:27:74:a1:ec:
4f:62:39:b5:8d:cf:9c:5e:fd:ac:7b:48:3a:2f:ee:
3a:59:b5:c0:c7:f9:9a:d5:10:09:92:5c:a1:d3:ee:
68:81:25:8f:87:a0:e6:1a:10:ec:a4:87:ab:4e:d7:
88:08:b8:31:f0:72:09:6a:0f:3b:6c:82:82:87:ae:
82:2e:3c:f3:9b:4f:57:a9:3c:70:c0:f8:b9:e0:ef:
23:56:b5:bf:fc:af:47:f1:74:f5:87:d3:a8:1d:55:
9f:78:76:25:9a:9f:f4:a7:85:fb:5a:79:1d:0e:17:
73:5a:4a:81:8f:c4:09:74:e8:5e:20:fc:ee:da:67:
01:a1:98:b2:83:70:b5:79:7c:8c:89:a0:13:52:09:
3f:dc:7d:20:d8:52:19:cb:b1:34:83:71:5b:45:67:
67:6f:88:1f:61:eb:51:6d:32:39:19:7e:d1:78:7f:
35:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:02:40:51:E3:44:20:DE:97:E1:E4:14:81:21:13:B6:21:81:EA:BC
X509v3 Authority Key Identifier:
keyid:21:01:B6:38:8D:64:35:F5:49:90:90:53:82:B4:1D:C9:67:5F:D4:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e0:48:e6:3e:19:5d:2d:0c:b7:f9:77:c5:39:b4:6e:49:91:
30:ec:ee:d5:b8:65:b2:ca:b2:05:69:21:4f:09:ee:79:d9:3f:
62:93:ad:c0:99:ce:6f:c7:c0:f2:e1:14:86:55:5a:58:12:0f:
a7:be:a6:eb:2c:c1:6a:85:1e:2b:61:90:04:27:86:f4:6d:da:
d1:46:5e:42:96:c1:15:6f:15:ab:fe:8d:51:93:df:3f:fd:ea:
85:a8:22:da:32:ac:d1:68:22:c9:30:be:f3:ce:3b:8a:20:bb:
52:8b:42:31:b3:b7:63:fa:e5:0f:02:02:6b:6b:46:15:c1:f5:
44:7e:62:16:5a:28:0d:e2:bc:a9:e4:0f:e2:f8:e7:f4:2b:b6:
a5:8c:ea:e5:53:e0:24:da:3b:28:43:fa:45:c6:3d:4b:ac:7f:
16:2d:9b:a0:e3:6b:01:91:28:8e:39:66:5e:65:d8:cc:9b:91:
7d:98:d8:35:f4:ff:5c:2e:25:3a:e4:c3:78:7a:44:2e:fc:6b:
6a:26:e2:15:e5:71:1e:f9:1d:ad:00:dc:9d:4c:3f:f0:7c:ca:
18:d9:bd:b6:fa:ee:06:05:6a:8e:e9:8f:a7:b5:8c:db:3c:32:
b4:ca:cb:53:dd:b2:a3:63:14:ee:89:2c:a8:16:50:b9:5a:d5:
68:5b:54:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:36:16 2025 by rpki-client