Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
File: Iqz2bwAZxVYzG--ezY32UngqY_g.mft (raw, json)
Hash identifier: ECYdi0gocXzZVO2VjAHqXH1HUmNNNFVG6sieNOI5IDo=
Subject key identifier: 72:C6:D2:9D:42:6B:E0:A2:67:9E:21:CD:98:5E:3F:C7:08:A6:06:5C
Authority key identifier: 22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
Certificate issuer: /CN=22acf66f0019c556331bef9ecd8df652782a63f8
Certificate serial: 019845BF496F8FE222939DEED37397A1FC7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
Manifest number: 155B
Signing time: Sat 26 Jul 2025 08:00:20 +0000
Manifest this update: Sat 26 Jul 2025 08:00:20 +0000
Manifest next update: Sun 27 Jul 2025 08:00:20 +0000
Files and hashes: 1: Iqz2bwAZxVYzG--ezY32UngqY_g.crl (hash: nl0doreCR6HFQi+wG2UiwoKWaNzLQhNHE69JsWxLxpE=)
2: UVEBG1ExZGcscljMEXZmdhHPbmo.roa (hash: OGY1ZCPh4kqtkS+2sWG7TSBefV4b/lqw2cPXHz2iP6A=)
3: l7ZphxTNLdfz3s0c0sr67IQOn_Q.roa (hash: 7qT5TEH8UgfN71QCeNJwaAV6tPLOUHK85hJIN/udCok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:49:6f:8f:e2:22:93:9d:ee:d3:73:97:a1:fc:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22acf66f0019c556331bef9ecd8df652782a63f8
Validity
Not Before: Jul 26 08:00:20 2025 GMT
Not After : Jul 27 08:00:20 2025 GMT
Subject: CN=72c6d29d426be0a2679e21cd985e3fc708a6065c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e6:23:e9:45:e1:74:fb:1a:be:fc:7f:39:aa:
06:31:91:51:d7:99:2f:c3:b4:1b:07:1e:56:38:f3:
16:6a:84:5b:07:07:1e:1f:6c:d8:2e:ae:5c:44:02:
20:34:b6:53:ba:05:3d:fe:1f:ba:aa:81:f9:c2:f7:
d8:43:79:d7:dd:86:83:2a:34:3e:8c:ac:c4:21:23:
e8:1c:3b:94:8b:47:9c:1b:0f:28:c2:c5:56:29:21:
e8:f7:21:0a:f1:e5:bb:d3:f9:d8:8b:a4:77:e3:1b:
82:b9:9b:d8:bd:dc:ac:07:54:66:2e:2c:13:bb:14:
b8:0b:20:b8:2f:19:ba:b3:68:b3:ec:d5:fe:9d:4a:
62:4c:df:08:e2:ee:f3:e1:3e:f2:f0:bc:84:3a:5e:
e3:d0:51:57:cd:96:e4:b1:bf:05:cc:74:16:89:42:
db:a9:19:ca:c9:bf:37:b8:d5:53:b2:87:5b:47:fc:
55:b9:81:7f:1b:5d:32:dc:1b:c4:95:d8:96:d2:35:
02:eb:16:65:98:67:b2:41:31:fb:55:86:81:7a:81:
2d:3a:a1:5b:70:45:b5:bc:49:48:25:5e:6e:48:11:
77:c3:1c:26:c1:68:6a:12:7d:13:15:f8:06:45:a3:
49:d5:38:fd:8e:81:2e:6d:89:5e:49:49:a6:48:32:
dd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C6:D2:9D:42:6B:E0:A2:67:9E:21:CD:98:5E:3F:C7:08:A6:06:5C
X509v3 Authority Key Identifier:
keyid:22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:37:0b:6e:fc:fc:f6:e5:e0:88:3b:51:87:24:23:bb:76:96:
53:28:d8:d6:48:5f:c3:7a:93:0b:a4:c5:e4:57:09:45:e1:0c:
fb:58:48:b6:3f:86:0a:9a:69:a1:59:11:79:c5:b0:46:47:80:
16:ec:92:b2:80:17:f1:46:83:7a:9c:f4:f4:37:b6:97:ae:f9:
b4:3b:e3:41:99:52:98:91:c9:a6:3f:37:59:63:43:8e:3f:9c:
69:9b:d7:e2:ab:24:86:c7:b3:4a:4c:62:12:79:9c:4c:aa:45:
7b:19:83:67:18:18:36:84:97:b6:66:7d:d9:23:31:61:46:6a:
ab:23:a0:cb:03:95:bf:b8:b1:ef:53:cc:d4:69:7f:78:9c:5f:
18:64:57:f6:2c:8b:b7:04:01:06:d7:e9:cd:0f:45:d7:e1:ba:
fa:ac:98:6c:65:ae:eb:9f:9d:cd:49:c5:d6:36:1f:62:c7:e7:
c2:06:54:3f:4b:38:80:3e:79:a6:ae:22:ff:92:09:11:cb:d1:
0c:59:71:7f:5a:42:95:36:f7:82:18:a8:b2:ec:2e:25:8d:26:
60:4e:e5:9a:c4:9e:89:c2:c1:8e:1e:f9:4b:26:d0:70:e7:ed:
f2:88:d8:86:a5:5d:4c:ae:68:d1:cc:dd:41:b0:eb:83:8f:c3:
02:e1:79:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:57:29 2025 by rpki-client