Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
File: IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft (raw, json)
Hash identifier: E8unPglMZT2O/HPuH/UUYwM4Fggf5i6VUtK/CWuBbRc=
Subject key identifier: DA:26:88:C4:F7:CE:F7:A0:D8:22:E3:39:80:1D:9C:A5:B3:C4:D9:0F
Authority key identifier: 21:0D:1C:0D:B5:AA:18:80:D7:74:7E:22:F1:DB:F4:71:6D:31:01:A9
Certificate issuer: /CN=210d1c0db5aa1880d7747e22f1dbf4716d3101a9
Certificate serial: 01984776E37B9C18018F3FBEC27E7CCE25ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
Manifest number: 05F0
Signing time: Sat 26 Jul 2025 16:00:30 +0000
Manifest this update: Sat 26 Jul 2025 16:00:30 +0000
Manifest next update: Sun 27 Jul 2025 16:00:30 +0000
Files and hashes: 1: IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl (hash: QlZKbmIjgaOASc2GnbZMEG3BxWvvbBFx4TKN3Ztiya0=)
2: ZXtK8i0ZkTBxTFkF4gT8SCIZTmw.roa (hash: KikSjMlfZMQPJYB8hmRvlc00FrgqM6UWZDTUG/QEicY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:e3:7b:9c:18:01:8f:3f:be:c2:7e:7c:ce:25:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210d1c0db5aa1880d7747e22f1dbf4716d3101a9
Validity
Not Before: Jul 26 16:00:30 2025 GMT
Not After : Jul 27 16:00:30 2025 GMT
Subject: CN=da2688c4f7cef7a0d822e339801d9ca5b3c4d90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:89:d0:1f:1b:8c:34:46:e7:5a:74:3d:f7:76:
0f:53:fa:92:8c:46:60:78:1a:74:bb:1b:32:d9:07:
16:df:23:47:5e:eb:57:ce:59:e3:65:f8:e0:7f:c2:
02:f2:9b:e6:ef:09:d8:c3:48:a6:8c:29:fb:1e:5b:
af:6d:b9:c5:e6:a6:13:49:f7:82:e2:ad:1a:9c:09:
bc:13:00:ba:bc:81:9c:09:ee:bb:d5:51:e2:68:da:
24:d5:7b:9d:73:35:26:77:73:c8:56:e8:27:85:0b:
5e:ed:97:51:4c:88:1b:a9:5e:11:de:b5:f0:96:7f:
7a:e1:c3:1f:1f:83:2c:a1:69:15:3b:5e:52:49:41:
16:eb:5e:11:42:d8:1c:72:1e:aa:92:29:45:bc:ce:
11:cc:f6:f6:14:0f:87:83:49:de:9c:e7:e1:c4:31:
c5:44:51:86:50:90:9c:95:bb:f4:7c:57:ac:c5:37:
e4:4a:a0:44:ef:04:3d:48:bb:8f:42:84:fa:5d:b4:
b5:cd:b5:82:01:2c:f0:10:78:2c:f7:72:98:be:4a:
ec:18:73:20:8e:61:4f:88:26:a0:a8:1a:1a:83:8b:
e8:79:40:84:3e:3e:bd:38:bc:45:be:17:68:f1:2a:
52:a2:ab:85:d0:10:7f:ba:13:e3:a9:b6:11:47:bd:
87:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:26:88:C4:F7:CE:F7:A0:D8:22:E3:39:80:1D:9C:A5:B3:C4:D9:0F
X509v3 Authority Key Identifier:
keyid:21:0D:1C:0D:B5:AA:18:80:D7:74:7E:22:F1:DB:F4:71:6D:31:01:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ0cDbWqGIDXdH4i8dv0cW0xAak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/09c980-38eb-4222-b225-d71130c6c0f9/1/IQ0cDbWqGIDXdH4i8dv0cW0xAak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:72:44:f0:23:0d:2e:18:41:61:76:e8:a7:d8:60:e0:b4:52:
2e:8c:5f:52:bf:56:fc:19:5c:0d:9b:a7:ae:2e:24:ed:90:7c:
29:0c:ff:02:53:e3:64:c3:71:dc:e8:3f:05:f6:4f:d9:88:d5:
75:70:3e:71:09:b8:78:11:f0:8a:b2:bc:0b:cb:e5:1d:ab:12:
33:aa:74:53:ba:44:72:71:3c:6d:2f:5c:cb:38:bf:63:ff:ad:
5f:cd:2e:78:5f:0f:99:88:bb:25:a9:97:7c:8f:3d:2f:4e:37:
af:92:d5:ee:ab:5a:1e:93:6d:b1:34:8a:06:6f:67:2f:8f:87:
3b:5f:b0:05:90:25:c6:d7:14:53:be:cb:f1:a2:7d:73:f4:94:
81:af:4d:6a:e9:be:36:83:cb:74:d7:7d:46:23:cc:06:a4:c8:
b3:eb:2e:27:d5:65:6e:de:60:f2:d2:7f:27:87:9f:8d:90:d7:
cf:d7:98:99:6c:be:c9:a7:db:11:c0:05:be:d6:ef:1f:3c:df:
f6:3b:25:c9:5a:b6:c8:77:64:85:80:36:b3:f8:62:d7:cd:0c:
5d:80:ec:2c:de:f5:10:d6:b3:41:53:d2:c1:e4:99:fa:db:e7:
f8:14:56:b0:6a:57:22:9b:5f:72:b2:60:3c:f4:ea:e6:9e:61:
eb:4f:25:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:59:35 2025 by rpki-client