Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
File: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft (raw, json)
Hash identifier: VMkKX4GY70PKGftNIYhvUsUHAeobKjsd/dM770y70Co=
Subject key identifier: 0B:00:4B:EC:46:A1:5C:3C:4B:40:EC:76:3A:AD:B6:99:97:BD:AC:19
Authority key identifier: 89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
Certificate issuer: /CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Certificate serial: 01984D41B37B6303E2BEAD2B1B832C50B198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
Manifest number: 15BD
Signing time: Sun 27 Jul 2025 19:00:08 +0000
Manifest this update: Sun 27 Jul 2025 19:00:08 +0000
Manifest next update: Mon 28 Jul 2025 19:00:08 +0000
Files and hashes: 1: TuA6dq5RUfQK0g-nhGPwelxAp8s.roa (hash: A068hT4+Hwiukpw4NAI0ekcWki3f2qgAy0smH/qbl44=)
2: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl (hash: i+Z5gl2dToiXF/FV9o26Bnyj9MJ6qzniz3FWnOvZCsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:41:b3:7b:63:03:e2:be:ad:2b:1b:83:2c:50:b1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Validity
Not Before: Jul 27 19:00:08 2025 GMT
Not After : Jul 28 19:00:08 2025 GMT
Subject: CN=0b004bec46a15c3c4b40ec763aadb69997bdac19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:95:93:a9:6d:8c:ef:21:c2:c6:51:be:d6:82:
7b:5f:43:f7:04:80:1e:ed:ed:80:dd:1e:6f:61:2a:
bd:10:00:8c:a6:2e:0a:26:8b:78:d0:73:84:39:37:
b0:e6:76:b6:ab:59:4b:e7:b0:46:82:48:6f:a1:bc:
39:c3:61:53:5e:a7:f4:54:ac:77:c1:25:77:ad:e3:
09:e3:3a:a3:c2:42:48:20:95:fb:6d:14:1f:67:fe:
42:bf:5a:f9:a1:e0:2a:e7:7c:16:ee:0f:dc:f8:59:
d5:a0:24:f3:cd:dc:67:55:f7:d1:a3:31:84:6d:06:
96:63:06:15:f2:6f:6f:02:66:2b:8c:d2:46:ac:99:
78:95:84:ca:62:3d:8e:10:91:2e:11:4d:a3:c5:03:
c2:97:6e:d9:86:80:61:e4:06:61:ee:56:91:76:6d:
80:4b:a6:6a:6d:24:03:13:44:07:2b:7d:41:bf:67:
32:a0:5d:bb:65:65:85:93:9e:53:c5:d7:37:07:7a:
e1:16:8f:38:f4:c6:07:17:cd:d2:3b:3b:2a:b5:70:
f8:65:cb:fd:c5:17:8f:57:82:e5:90:67:b9:b1:ed:
94:7c:0a:a3:d6:0c:16:ca:3b:18:d3:ec:63:e1:5a:
c0:1c:3b:7e:9e:12:9d:92:c5:0a:9a:ff:33:25:e0:
43:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:00:4B:EC:46:A1:5C:3C:4B:40:EC:76:3A:AD:B6:99:97:BD:AC:19
X509v3 Authority Key Identifier:
keyid:89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b7:9f:fe:90:5e:4e:e5:c0:ac:c2:e2:0d:1e:b5:02:d0:81:
e6:4b:f3:d6:da:36:57:04:91:30:a0:ce:5a:b4:79:93:bb:74:
6d:1a:e3:81:bd:a4:2e:fc:d2:01:00:1c:e4:53:ec:41:62:38:
74:7a:b5:b2:61:b8:2a:73:05:3e:73:71:12:2e:e6:bf:05:3f:
50:13:96:cd:e8:59:e8:4f:50:c0:c8:8a:19:68:19:23:19:16:
2a:8b:50:50:ea:87:a2:05:2f:55:01:77:94:0f:a9:53:04:ad:
aa:71:f4:3f:75:ed:fb:13:54:d4:30:c9:2d:fd:cc:b6:d1:69:
d1:6c:31:8f:91:b3:06:e8:b6:06:af:59:23:53:2e:4f:16:58:
46:63:50:1b:c9:fd:2d:96:c9:22:83:ac:b1:6c:89:54:b7:51:
63:34:5c:c7:89:c4:3b:ea:7e:37:df:66:e2:97:96:06:fa:da:
43:22:66:40:3a:2f:1f:95:34:24:4c:07:40:4d:aa:37:1d:4f:
41:f1:f5:30:0d:99:be:67:e0:0d:85:ac:97:cd:db:ec:98:e3:
ee:a9:4d:8b:be:dd:71:ce:95:f6:22:b3:7d:96:db:6f:ce:7c:
5b:87:db:68:3d:95:f7:8a:8d:f8:95:04:a0:dc:ae:5f:3a:69:
54:ff:0f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 23:30:44 2025 by rpki-client