Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
File: IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft (raw, json)
Hash identifier: 56IC70KjXly3xBIcXRS07MCW07ldit7tltaf/oxJFdU=
Subject key identifier: 93:FD:2D:CC:36:AA:33:43:13:87:1C:9C:5D:E4:48:1A:11:2C:B6:BE
Authority key identifier: 21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61
Certificate issuer: /CN=218af26f9a36653f4d996719d4a410fe84af4861
Certificate serial: 0198541F8ED2E59EB925A06A859396E45EE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
Manifest number: 04CB
Signing time: Tue 29 Jul 2025 03:00:10 +0000
Manifest this update: Tue 29 Jul 2025 03:00:10 +0000
Manifest next update: Wed 30 Jul 2025 03:00:10 +0000
Files and hashes: 1: 8aRFc9FMZuB39L9ezbDQe4rTWqI.roa (hash: d0kPdTmIfua7sOVHFgh6TKa6BfDr4mbqEziPITcO1vw=)
2: IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl (hash: 9W+xkbzriv3vEK7fFJmswfJhbxDPPpEGkMDeSkAdNgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:1f:8e:d2:e5:9e:b9:25:a0:6a:85:93:96:e4:5e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218af26f9a36653f4d996719d4a410fe84af4861
Validity
Not Before: Jul 29 03:00:10 2025 GMT
Not After : Jul 30 03:00:10 2025 GMT
Subject: CN=93fd2dcc36aa334313871c9c5de4481a112cb6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:4f:a4:dc:43:97:74:65:b1:d4:56:a9:1a:
8d:20:44:da:59:5a:aa:ae:99:ac:a0:04:a1:ed:b4:
0a:12:18:b7:b7:1f:3e:3c:f9:9d:94:7b:84:ec:55:
02:a6:1b:34:80:6f:f2:86:61:09:06:21:df:97:aa:
c9:3d:55:80:e3:0a:fe:80:88:8c:7a:c0:07:d9:ba:
1e:c3:0a:21:ce:b7:89:ee:d2:39:20:a9:c7:d2:1f:
f3:23:6e:54:de:8c:7d:5b:17:bd:51:ba:85:90:f5:
e3:13:fe:fb:6b:ab:28:fa:9f:0c:cc:16:7b:86:bc:
5a:b4:29:80:c9:c2:25:57:aa:c8:42:68:60:0c:54:
9c:67:4b:6a:18:5f:68:64:ed:13:8b:5b:89:04:fb:
e9:6e:12:b3:1f:65:7b:99:0b:ba:11:a2:7e:fd:b8:
5a:0b:a0:33:1c:08:45:68:20:ff:73:4e:f8:3a:38:
55:07:87:3a:11:f5:9c:c1:09:51:be:04:f4:62:f6:
fc:97:e4:d8:d4:ca:17:9a:90:3a:92:de:2a:42:1c:
76:8c:4a:3d:33:3a:13:92:c8:04:fe:55:f2:7a:e2:
b7:58:d0:0e:dc:f7:ac:90:5c:46:0d:71:4c:46:66:
bf:4e:1a:2a:28:d7:83:79:07:22:0b:db:dc:57:d9:
b0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FD:2D:CC:36:AA:33:43:13:87:1C:9C:5D:E4:48:1A:11:2C:B6:BE
X509v3 Authority Key Identifier:
keyid:21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8a:6b:f2:8d:e8:01:64:ff:e1:03:c1:c1:40:33:97:c6:61:
60:4b:bb:30:60:3a:12:6c:e7:10:d0:51:a0:b3:b9:24:4b:07:
e6:fe:96:88:55:76:dd:ba:c5:ce:44:ca:d5:19:3a:41:61:81:
87:ec:ab:c2:7c:a1:07:5a:3c:4a:0a:77:e7:15:19:76:b7:23:
f0:92:c5:36:54:1c:50:9d:4e:36:24:af:8b:7b:db:4e:86:ff:
c9:00:49:d5:86:49:67:53:da:ad:00:28:32:9d:ea:c0:1b:39:
27:d7:73:25:5a:16:5d:d0:a2:22:a2:7b:d9:8d:79:57:dc:89:
2d:df:5a:5d:1b:35:ec:15:0c:2e:88:af:5e:bb:eb:db:41:44:
6a:e8:2e:a3:ed:ed:49:8d:c6:60:1c:b4:44:ec:5e:7c:58:6f:
51:13:b3:cb:d2:36:da:65:4e:2a:12:00:d9:c4:59:f3:75:e8:
ff:20:6f:33:3b:8b:ad:2e:77:ae:0e:b4:f7:84:ff:25:75:f5:
11:5e:3c:50:89:61:39:ca:32:08:fd:50:16:43:c5:49:3f:63:
4c:8d:1c:e2:d6:81:0b:2c:69:df:b9:fa:85:0e:37:b2:68:1b:
60:cf:7f:0a:e9:93:a1:a2:96:37:28:f6:18:c4:75:fa:6f:19:
b3:3e:e8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:32:59 2025 by rpki-client