Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
File: ifnCFo0tgt39inBjfUQBivMLH5c.mft (raw, json)
Hash identifier: wp4X3It76MIav5NnGqAsqeuMbDrj+uzjvqzYH3dXRXc=
Subject key identifier: 6A:9B:15:D6:A6:19:EE:78:9A:AB:CB:CE:AC:0E:63:11:E2:6E:1F:29
Authority key identifier: 89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
Certificate issuer: /CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Certificate serial: 01984219A0A19C7C4E92A3EFC83DBE113B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
Manifest number: 0135
Signing time: Fri 25 Jul 2025 15:00:32 +0000
Manifest this update: Fri 25 Jul 2025 15:00:32 +0000
Manifest next update: Sat 26 Jul 2025 15:00:32 +0000
Files and hashes: 1: ifnCFo0tgt39inBjfUQBivMLH5c.crl (hash: X8pDIaItPlmvBDOt0VN/VSIcOGCE8PWSxyN57lr3uVw=)
2: spqKrZZlSshpL2qYZip0d0WaBBs.roa (hash: nNDCN5SzdqIQPR24IlLa7l1TyfR2hVXqn06sMz/jemo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 15:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:19:a0:a1:9c:7c:4e:92:a3:ef:c8:3d:be:11:3b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Validity
Not Before: Jul 25 15:00:32 2025 GMT
Not After : Jul 26 15:00:32 2025 GMT
Subject: CN=6a9b15d6a619ee789aabcbceac0e6311e26e1f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:55:96:d5:f5:aa:22:d5:16:a0:43:45:0b:ac:
af:90:ea:8e:10:90:48:31:e1:8b:fe:3a:a7:c4:68:
13:2a:f4:11:c8:35:1a:3e:62:c0:63:ed:fe:03:b5:
0b:d2:0e:37:6a:0b:f2:25:bd:8e:9d:c4:4a:06:db:
3b:97:b1:92:a9:c5:33:56:11:af:a0:d4:fe:ae:af:
09:72:a0:4b:30:3e:93:84:e0:f9:8c:e4:6e:f6:65:
19:e0:da:ce:ca:5c:cd:56:fa:e2:bc:b0:83:52:38:
eb:f1:a5:2f:60:61:90:7a:ba:14:e6:81:e7:94:a1:
79:08:f6:0d:26:90:b0:eb:cd:7e:60:a7:0c:43:e4:
7b:c9:2e:70:a1:f2:73:45:60:de:72:d1:21:4d:c6:
70:a3:20:01:b0:fc:31:c5:a0:61:d5:36:34:12:a6:
fa:17:c0:64:9f:2f:55:f9:f2:c5:ab:5b:0c:b5:10:
e3:e8:78:cc:a4:20:9e:4d:ca:4f:d0:3e:ed:4a:42:
f3:60:aa:6f:2f:15:c3:9a:28:69:95:04:7d:22:fb:
d3:ad:5e:91:36:ae:96:8c:7d:e8:d5:0b:93:c4:f9:
ab:6c:42:29:e6:7a:3a:70:c3:16:87:10:44:93:d1:
f0:fd:dc:4d:ac:90:0f:99:d6:f0:c4:d7:87:9a:6f:
2d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9B:15:D6:A6:19:EE:78:9A:AB:CB:CE:AC:0E:63:11:E2:6E:1F:29
X509v3 Authority Key Identifier:
keyid:89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:2a:95:22:cc:02:7b:d6:a1:ca:f7:30:a7:13:61:b5:b0:f9:
a4:cf:e7:be:7d:94:80:79:65:04:59:7a:2f:b4:c7:a2:6c:e2:
f2:7b:2b:ec:15:6b:e0:d4:eb:f1:14:ac:1a:43:f6:69:e9:90:
a6:d0:c1:44:df:04:11:f1:fd:c0:2b:00:70:4a:49:b6:f1:11:
f5:b8:d1:8f:3a:16:4a:e0:45:34:68:3d:36:e3:33:f9:bf:e2:
a2:8e:9a:f7:37:da:17:b2:da:2c:b4:98:a1:e1:78:28:18:98:
0f:66:f1:71:32:13:0c:ad:8a:03:56:9e:15:ad:56:4c:8d:0b:
f5:24:d5:c5:42:66:35:49:db:0c:9d:f8:e7:a1:8a:c4:fb:6b:
15:1e:8d:51:a8:60:a1:e0:c3:fd:18:ec:a3:ad:eb:a3:66:69:
2f:ce:61:8d:f1:a9:7d:f8:a4:55:97:45:19:4a:5f:60:4a:66:
ad:a5:32:dc:cd:99:95:8e:58:87:11:42:52:9e:fa:c9:be:b9:
d1:49:b2:08:19:2f:df:2e:ef:0f:bc:dc:64:f1:24:dc:bf:3d:
cd:0f:01:34:8d:bc:a1:7a:07:66:a6:97:20:33:d2:2a:88:98:
18:18:5a:8b:4a:8d:bc:cd:ed:b6:0e:e6:9b:1a:92:48:ca:78:
ae:a6:39:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:26:59 2025 by rpki-client