Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
File: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft (raw, json)
Hash identifier: BOgJKLs/PgXVvAVn2qN758h/pzrVAG4guqlrLMvxzLw=
Subject key identifier: 03:12:42:A8:D7:16:7D:EB:25:AF:30:5A:91:DE:9D:9D:5C:FE:DE:22
Authority key identifier: 89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
Certificate issuer: /CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Certificate serial: 019951F9E6656B98262E1DB7144C79FDD9BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
Manifest number: 1644
Signing time: Tue 16 Sep 2025 10:02:35 +0000
Manifest this update: Tue 16 Sep 2025 10:02:35 +0000
Manifest next update: Wed 17 Sep 2025 10:02:35 +0000
Files and hashes: 1: TuA6dq5RUfQK0g-nhGPwelxAp8s.roa (hash: A068hT4+Hwiukpw4NAI0ekcWki3f2qgAy0smH/qbl44=)
2: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl (hash: J+q/fSxRris1wmBzEWm+9x6iGsQ78DKJWKNyZPqGyio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 10:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:51:f9:e6:65:6b:98:26:2e:1d:b7:14:4c:79:fd:d9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Validity
Not Before: Sep 16 10:02:35 2025 GMT
Not After : Sep 17 10:02:35 2025 GMT
Subject: CN=031242a8d7167deb25af305a91de9d9d5cfede22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2a:25:2f:e9:1b:11:ae:f2:c2:0b:96:d2:37:
19:d5:53:20:ae:52:d8:d2:5f:36:d1:bb:e4:81:07:
e0:b2:21:43:8b:55:bd:38:af:0d:3a:4d:77:b7:19:
34:39:81:27:13:7b:82:04:c9:56:ed:90:f5:43:16:
09:60:82:b4:64:64:cc:1f:c3:cf:84:dc:66:82:4f:
9c:83:b8:33:16:2c:bd:c6:ea:9a:d6:7e:f4:74:46:
20:08:56:1e:ef:af:94:53:8c:50:25:fd:6f:17:18:
41:c8:5f:9f:a8:81:72:72:b4:fb:50:96:df:f9:97:
10:86:d8:fd:60:23:3e:0a:58:e7:22:2a:3f:2a:fd:
2f:e4:a0:1a:05:94:67:f3:65:cd:65:99:80:e0:22:
53:c2:e4:8e:9e:c0:f3:56:87:4c:06:79:08:d7:7e:
f5:b7:f6:aa:06:ff:3d:0d:b2:cd:d6:1a:ae:9c:35:
5b:fb:c8:8a:d0:f5:5b:36:68:ba:1b:e0:fe:5f:52:
b5:9c:93:74:e4:69:60:67:91:80:c8:7d:de:0d:b1:
7e:eb:71:29:e0:1d:31:5c:ff:19:14:d2:1f:30:2f:
71:59:f3:85:e8:a5:71:b0:75:8b:37:20:cf:02:7b:
f5:43:b4:dd:3c:6f:86:e3:bd:cf:c4:11:46:f0:d3:
d6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:12:42:A8:D7:16:7D:EB:25:AF:30:5A:91:DE:9D:9D:5C:FE:DE:22
X509v3 Authority Key Identifier:
keyid:89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:63:7d:35:20:e1:1a:84:8b:03:00:63:0c:d5:c1:b0:c6:8e:
7a:0b:67:b6:58:3a:1a:ac:77:f3:79:d3:cf:84:8d:ef:5c:01:
bb:a2:34:46:23:07:c4:d8:88:ac:94:41:40:65:e3:d9:5d:0b:
9c:f3:63:4b:55:30:6c:9f:6a:6a:76:73:b9:43:a1:4c:b6:89:
a2:3a:ea:c8:09:04:03:09:dc:30:b0:0b:fd:96:44:7a:b8:3a:
c6:97:cf:13:16:33:f3:72:78:f0:0f:fe:b4:87:ca:93:ee:68:
7d:74:fd:e8:d5:7e:86:91:7b:1e:60:38:86:7a:cf:ee:a5:71:
78:ba:43:24:ff:12:83:35:13:98:b6:58:1a:97:9e:94:03:46:
0b:da:66:33:3a:79:49:bf:37:cd:54:73:1e:93:5e:50:f0:a8:
aa:14:e4:d2:85:43:cf:c1:0d:de:63:93:96:44:7e:59:1b:ad:
f9:34:68:9c:a2:40:5f:57:f2:98:f0:b7:2d:4e:dd:93:09:72:
1d:1e:92:9e:c3:e8:7d:61:ee:5a:0a:3a:b1:2e:1c:5d:16:1c:
ad:92:af:7a:16:41:6f:47:ad:b1:38:17:d1:25:3a:8c:a8:f0:
66:df:4e:3b:cf:f2:04:69:51:cf:91:a7:1f:e1:22:68:f6:62:
e9:9d:fd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 16:05:20 2025 by rpki-client