Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
File: ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft (raw, json)
Hash identifier: Qb9w62j28wdKEwtQujlWS0FFE4jwU2pYPhhVN8bTlKU=
Subject key identifier: D9:F2:C8:A9:4B:AE:57:1B:11:6D:A0:88:48:F0:E2:97:9E:9D:C5:FA
Authority key identifier: 8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41
Certificate issuer: /CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
Certificate serial: 0198496546766805AEE5B38C424DDFA36CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
Manifest number: 06D4
Signing time: Sun 27 Jul 2025 01:00:30 +0000
Manifest this update: Sun 27 Jul 2025 01:00:30 +0000
Manifest next update: Mon 28 Jul 2025 01:00:30 +0000
Files and hashes: 1: ctXergtQbViumays4Ono_Wloemw.roa (hash: a+neR/aKDm0TTcExel5rgJgh8DlN9uyZuV72kD5h5x0=)
2: ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl (hash: kC7UzAs3PKbddiBoMSXYoAJ4UwhWSkbIEB6tNViA0ZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:46:76:68:05:ae:e5:b3:8c:42:4d:df:a3:6c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b124b124942a5d7ead6bb7d37a64e58c7e6da41
Validity
Not Before: Jul 27 01:00:30 2025 GMT
Not After : Jul 28 01:00:30 2025 GMT
Subject: CN=d9f2c8a94bae571b116da08848f0e2979e9dc5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e8:ba:37:b3:34:e0:42:fd:5b:78:4e:fd:2c:
1e:e9:9d:d6:f0:f0:83:c7:30:e9:21:e7:08:ff:11:
7b:fe:7f:92:d4:d5:63:37:d0:fe:8f:b2:f2:18:be:
0a:53:f0:f2:af:2f:a8:c0:60:f2:2e:38:60:6d:e6:
6c:f3:4b:77:9e:19:8a:52:4d:63:63:7d:e4:82:52:
23:f1:d9:d7:26:b2:0c:64:e8:94:e9:7b:6a:80:88:
cf:f8:9e:83:26:06:95:59:45:78:34:37:01:af:2f:
76:1c:06:85:b7:4c:46:70:3f:b2:34:18:38:ec:db:
3d:20:36:a2:19:63:32:24:ca:19:1b:5e:66:85:ef:
99:1a:2e:a6:9b:34:49:1f:56:09:ee:f8:8e:a3:35:
02:08:7b:ef:1b:38:de:58:16:84:63:21:b5:ec:72:
a5:50:97:35:7a:99:a2:14:18:dd:a0:af:64:f4:04:
a6:7d:c2:59:67:7e:eb:21:80:68:47:37:b7:71:2f:
41:a9:fe:c3:c9:2a:4a:51:78:19:df:4a:50:3f:79:
3c:0b:c9:6d:0a:d6:a2:4f:d3:23:84:55:d7:de:60:
3a:6b:29:20:d9:aa:ff:37:26:e7:fd:6e:09:95:10:
ac:0a:c8:51:c9:e4:ea:0f:14:6f:6b:32:62:85:fa:
b5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F2:C8:A9:4B:AE:57:1B:11:6D:A0:88:48:F0:E2:97:9E:9D:C5:FA
X509v3 Authority Key Identifier:
keyid:8B:12:4B:12:49:42:A5:D7:EA:D6:BB:7D:37:A6:4E:58:C7:E6:DA:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixJLEklCpdfq1rt9N6ZOWMfm2kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c6553e-9eac-4eaf-85fb-eb6591b877ae/1/ixJLEklCpdfq1rt9N6ZOWMfm2kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:19:80:cd:f0:0f:59:ef:4f:83:fd:95:7e:30:45:32:b2:44:
22:a4:2c:e1:4e:97:94:fe:52:6f:56:64:60:26:a8:78:3a:c0:
c5:32:c4:16:62:f0:00:31:4a:7e:b8:e3:0d:50:e6:a7:d2:08:
16:f2:ec:bf:fb:a6:c2:85:8b:c9:a9:d8:4f:df:71:f6:05:2e:
fd:c1:47:93:b2:8f:90:9b:e0:0a:0d:7b:83:48:95:fa:f3:7f:
1e:79:c0:cc:2f:9d:89:37:bc:94:ec:74:54:ad:46:2e:73:40:
e1:89:80:8b:85:56:ed:21:d0:e9:36:dd:ab:8b:31:66:ff:8d:
4d:03:75:e7:57:aa:45:b9:a5:88:d2:3d:26:4d:b9:2c:32:79:
ef:86:88:04:43:44:5a:b8:36:24:82:c9:fc:c6:46:14:c3:40:
e8:13:54:f8:88:b8:8b:05:a5:99:39:c6:ed:0a:e1:6f:5e:9b:
07:38:60:42:70:bf:4b:a0:10:09:1e:98:a7:a4:cf:55:65:01:
55:56:28:69:1b:1a:67:68:b2:5d:9f:cb:c0:47:23:1e:df:b3:
58:a5:98:50:be:2e:ae:37:0c:0c:c4:f8:3b:b3:b7:74:95:22:
c8:30:c5:82:a4:27:f8:72:8c:9f:1c:b8:a7:99:fa:fb:90:7a:
b5:bd:b5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:47 2025 by rpki-client