Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft
File: Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft (raw, json)
Hash identifier: rfZr95TnSNmA+ssplF2+OUVxKC8jokGqhe+vpdOcWYw=
Subject key identifier: F7:20:AD:C8:11:55:F9:5E:42:E5:DC:23:9E:E4:AA:28:3B:0A:06:D0
Authority key identifier: 21:AE:8E:67:5E:2E:D2:00:95:98:3C:BB:72:08:4F:97:40:28:1B:74
Certificate issuer: /CN=21ae8e675e2ed20095983cbb72084f9740281b74
Certificate serial: 01984B54CFA98BABB6FE20DFE1DE729F83E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft
Manifest number: 063D
Signing time: Sun 27 Jul 2025 10:01:46 +0000
Manifest this update: Sun 27 Jul 2025 10:01:46 +0000
Manifest next update: Mon 28 Jul 2025 10:01:46 +0000
Files and hashes: 1: 1-2_B9Ogc8_x7nBs1jdqDYo3SFDQ.roa (hash: ZY8ZMErSrWlcbHGhfdUXbnzcBBOjC4a82DQaY7L6wwY=)
2: Ia6OZ14u0gCVmDy7cghPl0AoG3Q.crl (hash: n2r5ibd7m5f5dSDVsyQRAj258xXcJcLMLEAnvvnTzxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:cf:a9:8b:ab:b6:fe:20:df:e1:de:72:9f:83:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21ae8e675e2ed20095983cbb72084f9740281b74
Validity
Not Before: Jul 27 10:01:46 2025 GMT
Not After : Jul 28 10:01:46 2025 GMT
Subject: CN=f720adc81155f95e42e5dc239ee4aa283b0a06d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0c:b2:d0:c8:ff:57:79:0d:b7:d2:fe:2c:dc:
e4:85:b0:42:96:2b:c5:e9:d3:cb:18:9d:29:ac:9d:
9d:59:a0:80:66:d3:83:2b:cb:76:8e:ed:9e:e2:03:
2b:91:60:b9:6b:dd:3e:d1:5c:1c:73:32:16:4e:87:
8a:d4:fb:7b:6c:83:e4:84:80:f9:5f:61:e6:53:6f:
de:3a:97:96:37:d4:ef:2b:b0:1c:4b:c6:51:52:49:
84:b9:42:4a:61:af:48:4b:49:f4:43:86:d1:51:9b:
02:fb:52:dd:5d:ee:35:65:22:ac:f4:7d:65:8d:d5:
01:80:76:f2:c4:b9:79:2f:3c:ed:c7:21:20:e5:0b:
57:22:ba:89:b8:c2:c8:ed:e6:2d:06:0d:1f:b4:81:
6f:05:ac:6f:a5:aa:ec:93:6b:e2:35:20:65:c6:9b:
da:38:99:1f:8d:4f:0c:24:8d:26:dd:15:1d:e4:ba:
2d:b8:ce:7c:e1:7b:b4:e3:02:d8:88:c6:3a:64:27:
a7:6f:0d:d3:4b:9a:1d:ea:d7:55:a8:ab:70:d0:65:
57:e0:44:3d:5a:c2:5e:c9:36:2a:24:1d:87:b3:a5:
cd:a3:02:dd:00:db:0a:6d:87:a1:9d:be:8a:a2:02:
9f:2e:12:c2:c4:62:48:89:ea:d6:d6:92:a9:d4:eb:
62:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:20:AD:C8:11:55:F9:5E:42:E5:DC:23:9E:E4:AA:28:3B:0A:06:D0
X509v3 Authority Key Identifier:
keyid:21:AE:8E:67:5E:2E:D2:00:95:98:3C:BB:72:08:4F:97:40:28:1B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:1c:bf:e1:6e:b2:1a:1b:03:0d:bc:fb:55:f1:a5:36:38:26:
e0:1f:29:26:00:ca:60:10:8a:7d:da:0c:e4:2b:ee:3b:c3:0c:
1c:51:bc:ac:6b:21:d5:93:ea:fc:52:38:2c:15:cf:a6:b5:7e:
c9:48:af:26:3e:03:bf:ad:88:d5:53:88:03:68:13:b5:97:54:
4c:a7:15:b8:f2:96:92:66:21:26:da:a7:cd:1b:2e:b7:6e:7a:
ef:44:e2:59:51:34:72:9c:c1:8a:b3:a8:f1:40:b6:72:53:ca:
b3:76:70:5b:7e:92:5d:94:ba:22:0d:ff:2a:77:5c:92:ef:b6:
26:99:59:34:03:84:34:fd:ff:e5:79:8e:14:b5:41:94:15:69:
ea:c4:94:86:a5:a3:20:32:b9:ee:be:49:60:79:0a:67:29:32:
7c:d5:b5:e5:74:d3:ab:58:a0:a6:14:b6:a7:9f:04:26:01:92:
11:51:48:ad:77:06:e0:61:74:95:89:06:a1:dc:94:a3:77:9a:
e9:0a:5a:b9:f0:af:bd:b9:e9:25:37:ba:fe:5c:80:30:f2:e7:
23:3d:2a:7f:4d:e7:cc:c3:68:7c:af:45:10:d6:e7:a8:47:b4:
7d:70:21:d5:e1:c9:b0:d6:2d:52:5d:15:db:a1:61:b3:80:e8:
bc:8d:7d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:16:14 2025 by rpki-client