Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
File: IURHLRaXNp2DK6Em5eFyMqzV9fM.mft (raw, json)
Hash identifier: sjvEf4Ayd1fFjatYh0Mx/6n8FMFnSArtl2aHSrED5CY=
Subject key identifier: D5:8B:AE:59:02:4B:33:9A:C2:00:17:99:53:5D:C0:DB:02:C5:2B:1A
Authority key identifier: 21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
Certificate issuer: /CN=2144472d1697369d832ba126e5e17232acd5f5f3
Certificate serial: 019848F72EA752BF7EA93DD8A4460E297669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 23:00:15 +0000
Manifest this update: Sat 26 Jul 2025 23:00:15 +0000
Manifest next update: Sun 27 Jul 2025 23:00:15 +0000
Files and hashes: 1: IURHLRaXNp2DK6Em5eFyMqzV9fM.crl (hash: Q8u4H9RZQLb6cHPOpAHVGBdF2gl9NvKbwBB5VuB1DcE=)
2: jxP3zWsY1gZpCGxBiysaY7EpSc4.roa (hash: 8YozH8Bcb75tXVAEGcttViIiDw3bZdzWBPyjFnX3Zdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:2e:a7:52:bf:7e:a9:3d:d8:a4:46:0e:29:76:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2144472d1697369d832ba126e5e17232acd5f5f3
Validity
Not Before: Jul 26 23:00:15 2025 GMT
Not After : Jul 27 23:00:15 2025 GMT
Subject: CN=d58bae59024b339ac2001799535dc0db02c52b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a7:0f:db:40:c9:c0:90:ec:1b:24:fb:5a:c0:
fb:2d:bf:35:84:3f:14:11:01:05:0c:f1:04:a5:2e:
e4:cb:7b:71:ee:75:46:60:9b:08:9f:63:3f:d5:7d:
b8:0f:4a:ce:a1:6d:f0:36:60:fd:6e:ad:bf:24:b5:
56:cb:02:98:69:d7:8f:12:08:11:b5:c3:dc:e3:31:
4e:2d:11:9f:c2:b6:02:29:81:2d:71:1c:01:1d:60:
21:1a:a6:6c:10:2a:36:d5:76:95:6b:19:c9:c2:f2:
5f:ae:1f:3d:29:00:f4:cf:27:ca:38:f8:01:6a:c8:
3b:3c:27:41:2b:4b:1a:d2:76:14:f7:e5:9e:4a:79:
28:c8:70:d1:89:ec:20:8a:06:16:ab:64:f7:d7:3a:
19:f7:84:b4:63:e4:95:93:ff:5c:e9:c5:9e:58:da:
8e:10:95:7f:5e:dc:23:db:66:d9:af:c2:f4:27:8a:
7e:df:6c:07:a8:7d:dc:73:7a:9b:c8:45:43:cf:bc:
06:56:41:8c:74:a2:30:fb:15:ef:28:0a:50:fd:d5:
ce:fb:07:73:9b:c5:af:e6:d1:8e:f1:fe:13:89:e0:
07:ab:bc:e8:89:c7:6c:b0:f9:b5:9e:8a:67:aa:3a:
25:21:22:e2:5c:12:ff:94:7a:21:74:b5:f0:3a:b4:
a2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8B:AE:59:02:4B:33:9A:C2:00:17:99:53:5D:C0:DB:02:C5:2B:1A
X509v3 Authority Key Identifier:
keyid:21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:98:f1:c6:8b:f8:ff:bf:0a:30:fc:60:f3:40:64:cd:a4:b0:
5a:6b:8c:79:19:fb:80:81:8b:44:a7:7a:33:f4:ff:99:ee:67:
0f:e8:12:51:8e:f6:1a:0e:11:6c:6e:70:d8:b9:89:b1:1b:02:
e7:2f:6c:19:80:f7:dc:b8:3a:e8:96:6d:85:e8:c4:c3:9f:20:
ba:8a:d1:65:3b:98:d3:f4:a8:d8:4a:37:75:35:59:ad:ab:96:
54:39:6c:28:26:38:ff:94:27:f1:80:6a:74:01:b7:2f:d8:6b:
59:8b:40:8e:8a:c0:6c:ef:47:da:59:7a:c4:95:93:a0:70:93:
d2:01:80:37:06:b3:99:b0:fd:f8:6f:a8:da:71:e8:b4:3b:12:
b8:65:49:45:81:a5:65:74:5d:70:9a:9b:9e:77:d7:79:23:cd:
42:7c:84:7e:f8:88:39:01:39:31:1c:8e:a8:d6:1f:d4:96:2a:
95:c0:d0:79:57:ea:f4:39:e0:d1:69:b4:9d:f8:1f:63:f1:99:
0b:a3:89:f0:af:8a:a3:af:f5:7a:96:8f:fd:57:13:80:06:f3:
ca:b2:fe:67:5f:8b:05:ff:e7:a8:1d:51:c0:5e:0d:59:ec:25:
7d:c9:4b:e5:e9:a8:5f:ff:16:58:46:ad:26:4c:8b:54:42:42:
a6:a0:e2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:54:17 2025 by rpki-client