Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft
File: iToqQBmigXfN-AZZnxq11R0XuNw.mft (raw, json)
Hash identifier: RSxK/x0g5ZRD7s5GguHgm93QKQP12y9Aclj8JcjsOw8=
Subject key identifier: CF:E8:71:D4:7A:03:84:DC:EB:38:39:A1:A1:9E:D2:A5:9A:B4:A6:9A
Authority key identifier: 89:3A:2A:40:19:A2:81:77:CD:F8:06:59:9F:1A:B5:D5:1D:17:B8:DC
Certificate issuer: /CN=893a2a4019a28177cdf806599f1ab5d51d17b8dc
Certificate serial: 01984776F97B770CC2AC0E487D58B06EF961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 16:00:36 +0000
Manifest this update: Sat 26 Jul 2025 16:00:36 +0000
Manifest next update: Sun 27 Jul 2025 16:00:36 +0000
Files and hashes: 1: c_7uOl8s8Kdh9CychkSYtAnQ7tY.roa (hash: Nr/ZIZGpAUJ7Gcwt3DrN0gnkpV9viza7zxUo/JxiEbY=)
2: iToqQBmigXfN-AZZnxq11R0XuNw.crl (hash: iv0AktPZYXVoPfkxOALd4a6fZiUMCw1YZTYnzqIsNCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:f9:7b:77:0c:c2:ac:0e:48:7d:58:b0:6e:f9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893a2a4019a28177cdf806599f1ab5d51d17b8dc
Validity
Not Before: Jul 26 16:00:36 2025 GMT
Not After : Jul 27 16:00:36 2025 GMT
Subject: CN=cfe871d47a0384dceb3839a1a19ed2a59ab4a69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6d:a2:d8:d6:d2:fc:c5:59:c4:d5:d9:34:83:
6f:80:86:f2:d1:5b:56:1d:23:42:d6:3c:b7:1b:27:
89:64:10:a9:ce:45:5f:90:78:03:6e:e0:72:fc:2c:
ad:3e:b7:56:75:56:95:61:5c:3c:80:b5:71:62:a5:
b8:23:9c:10:94:0a:6c:91:3b:53:a7:c9:c4:ca:88:
bd:1e:2d:b7:42:48:7b:ad:4f:c3:8e:fd:36:66:c4:
e3:2f:99:60:f0:08:1f:9a:ab:b4:0f:6a:7f:36:0b:
08:d5:30:cd:f8:16:05:70:69:08:5d:88:0a:51:10:
83:09:74:bb:8a:69:98:d9:dc:e6:46:3b:12:35:48:
53:c7:8d:ec:1f:38:82:aa:d8:e9:1e:e8:3a:58:f4:
63:8b:57:29:df:24:f3:b1:fb:12:dc:96:85:a0:00:
65:00:7d:5f:b8:ba:fa:ba:0f:61:17:f9:0d:74:05:
66:49:cb:8e:88:d4:d8:7c:72:36:72:1f:3d:5b:2b:
86:3f:fc:21:76:ac:5c:bb:fd:44:8e:1a:25:0e:f9:
6b:05:8d:35:01:ee:bd:78:bf:e2:7d:ce:f2:2e:c5:
fb:91:38:55:5c:51:d5:79:70:4f:c8:2f:7a:8a:de:
38:29:70:d7:f3:fe:c5:87:be:33:88:d5:1d:19:f2:
89:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E8:71:D4:7A:03:84:DC:EB:38:39:A1:A1:9E:D2:A5:9A:B4:A6:9A
X509v3 Authority Key Identifier:
keyid:89:3A:2A:40:19:A2:81:77:CD:F8:06:59:9F:1A:B5:D5:1D:17:B8:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iToqQBmigXfN-AZZnxq11R0XuNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/63b3de-8975-434c-96da-361786f17a05/1/iToqQBmigXfN-AZZnxq11R0XuNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:64:8a:7f:05:18:ad:f5:3c:68:29:c2:ac:f4:6c:c8:e6:a2:
b3:47:8c:bd:52:49:d7:46:e0:65:42:14:2a:ac:51:01:c4:d5:
07:45:85:d3:ca:e4:bf:6d:6f:f8:03:ea:e4:96:49:72:d7:56:
66:a2:fe:35:e4:d8:7d:c7:be:30:7b:c8:58:9b:b5:2e:1f:5d:
61:e2:00:18:61:4b:5a:67:fb:f8:40:5e:a2:f9:6e:55:6c:05:
2f:fc:8c:35:d5:ef:d6:f4:cf:b4:93:79:e1:f0:54:1f:47:47:
5d:f3:94:77:78:e5:6c:af:13:1c:a4:aa:f0:55:db:1a:27:9b:
3f:44:34:75:07:70:c2:8a:ef:bb:ae:b0:33:3a:20:50:28:ca:
db:7b:91:ac:4f:81:1a:ab:cc:0e:12:d6:dd:c9:f7:28:81:b5:
d2:71:37:04:e2:62:d5:5a:ed:73:dd:d5:bb:e1:06:01:a9:6e:
93:8d:cb:97:77:d3:31:fb:12:f5:c3:65:77:ec:22:fb:48:6d:
19:60:4b:c4:9e:bd:47:6d:6d:00:71:f3:fa:54:29:69:da:6f:
3b:a4:1a:68:bd:87:f9:ca:28:d5:9a:7d:62:8c:ef:3a:9e:5b:
1a:45:68:59:32:b3:12:b8:d4:3e:b5:27:90:c3:e0:30:af:08:
1b:3f:0d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:02:10 2025 by rpki-client