Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
File: io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json)
Hash identifier: 1y9ZZhYd1K96e+dRf7AVqXoRZADEI4Am1sA0gvl0EeM=
Subject key identifier: 54:B3:2E:0A:27:26:55:BD:07:CE:43:E9:CB:D4:EB:D7:F2:78:7F:98
Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
Certificate issuer: /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Certificate serial: 019855694E35E162D1F69572D255B5C62048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
Manifest number: 0A00
Signing time: Tue 29 Jul 2025 09:00:21 +0000
Manifest this update: Tue 29 Jul 2025 09:00:21 +0000
Manifest next update: Wed 30 Jul 2025 09:00:21 +0000
Files and hashes: 1: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: au1HT3x8V7fZ0AYsrB5FrvWT1y5dlVBJh+T7Lzj6yHc=)
2: mXq5imVatjJhnnG6SsoqA-p0UNQ.roa (hash: 8CJwggTE1PoL2jvcGBTOZHCwbyGaj586VEqXhjgdUvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:69:4e:35:e1:62:d1:f6:95:72:d2:55:b5:c6:20:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Validity
Not Before: Jul 29 09:00:21 2025 GMT
Not After : Jul 30 09:00:21 2025 GMT
Subject: CN=54b32e0a272655bd07ce43e9cbd4ebd7f2787f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f1:b6:8b:00:94:b6:75:05:a6:ff:64:d5:fe:
e9:8c:54:ea:26:ea:1c:4f:fb:8d:31:78:8b:ec:2d:
2f:45:0a:21:c8:c4:f7:7c:37:c0:26:36:3e:9a:50:
11:38:67:a7:0c:f7:09:8e:c5:0f:bf:31:70:5a:bf:
a4:fe:de:36:cf:25:fa:5c:73:fe:29:78:f9:ec:0b:
8e:50:d3:f3:33:6d:86:6c:0c:e5:a6:b9:65:d2:8f:
db:96:87:a6:6d:5c:f7:79:50:62:89:2f:a4:e6:e5:
f4:40:0c:46:ba:50:0d:72:34:2b:f2:d4:0b:dc:f3:
d2:37:1e:13:bd:15:fb:df:7e:96:26:34:d6:97:18:
3d:eb:77:61:8d:18:93:5a:59:a5:4a:ce:14:0a:31:
4f:ed:00:c8:d2:24:63:a3:80:f0:29:b1:be:c8:5e:
7c:8d:b6:dc:0f:92:a0:49:4d:f6:e9:11:3b:56:a2:
45:ac:de:cd:20:d1:79:fc:09:06:f0:cf:f5:19:34:
37:b6:d9:ad:a4:ff:b3:d5:b8:83:60:13:d3:ba:a0:
3e:f4:f0:d9:41:8d:45:c0:b2:5a:89:67:cd:11:3c:
c2:c7:d3:fc:3b:32:7f:d6:44:00:40:c8:3a:09:d4:
48:04:a4:c9:de:6d:d2:73:5f:8b:07:3f:78:24:79:
70:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B3:2E:0A:27:26:55:BD:07:CE:43:E9:CB:D4:EB:D7:F2:78:7F:98
X509v3 Authority Key Identifier:
keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:82:39:92:42:46:33:c8:3a:75:65:80:1f:24:81:05:58:55:
37:25:6f:54:3d:d5:74:fc:65:8c:f6:1c:27:3c:f0:8e:73:67:
4c:0c:ba:7b:66:60:89:6e:d4:ef:d1:2a:6a:73:37:b3:83:7c:
ad:49:82:84:d4:b2:3e:65:7d:66:e3:1f:b6:bb:ce:9c:73:7f:
bc:22:f7:3c:dc:f9:ca:4c:a6:f7:2e:75:0a:5f:5c:35:16:a7:
03:fc:48:ab:01:a0:d6:e5:25:92:b6:47:a4:63:d8:50:d5:05:
da:27:7b:f1:88:fe:6b:0f:78:96:4e:4e:7d:dd:0a:95:f3:11:
52:e9:ba:d4:11:3a:7d:ce:88:1a:04:21:ed:93:d0:95:82:fb:
26:c7:89:30:bb:c7:e9:c9:29:2d:58:e3:63:13:45:60:52:c7:
14:70:6c:08:de:68:02:d7:55:34:a1:e5:04:f6:cc:dd:47:9e:
c2:d7:cd:5d:74:7c:4b:82:6b:0c:64:b4:ad:e6:50:c1:86:10:
2c:e9:88:2d:fe:bf:8d:fd:a6:3d:26:9a:77:dd:80:fc:a0:d0:
23:97:c5:45:1b:2b:9b:b6:76:c5:df:e1:9f:d9:e8:61:3e:e1:
e5:d0:a8:58:05:55:f2:06:f1:58:77:2f:47:5c:6f:7a:f9:b0:
03:67:58:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:36:19 2025 by rpki-client