Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
File: Iu6yQvsK-qA32cr1YExlh-QN47U.mft (raw, json)
Hash identifier: Ks9iGLhGwtQwibyn98L25GdDF/ttEkNuT6AXZMTMFMg=
Subject key identifier: 1A:7A:C0:F4:54:9B:72:F3:22:21:D6:73:A8:85:E2:87:20:0B:00:06
Authority key identifier: 22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
Certificate issuer: /CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Certificate serial: 01985C10A5D53675161498EE21E5D092691C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
Manifest number: 1095
Signing time: Wed 30 Jul 2025 16:00:51 +0000
Manifest this update: Wed 30 Jul 2025 16:00:51 +0000
Manifest next update: Thu 31 Jul 2025 16:00:51 +0000
Files and hashes: 1: Iu6yQvsK-qA32cr1YExlh-QN47U.crl (hash: GXbCcr7YYlRPRDPy1X4EqcQvwhgIticGDtSmv8hosBU=)
2: ff-qexzHEUD1WgOGjo1dcXlM5zw.roa (hash: okd5E/DUi3wr0dkKGYnxuoMgYENizBl6tX2uR1KatU4=)
3: o-JKFkGOw7b9iS81cGqL_sPqhTE.roa (hash: LeiOclwc6FMh1dAwDJxgRxawRJ1HHtp5FtwQRdIanPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5c:10:a5:d5:36:75:16:14:98:ee:21:e5:d0:92:69:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Validity
Not Before: Jul 30 16:00:51 2025 GMT
Not After : Jul 31 16:00:51 2025 GMT
Subject: CN=1a7ac0f4549b72f32221d673a885e287200b0006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b9:78:f4:91:4c:be:b3:a9:1a:65:c9:fd:5a:
a3:91:41:b5:58:f8:01:7c:f4:3c:28:49:d6:30:61:
6b:e8:b7:22:53:a4:a0:cb:7e:0b:cf:ae:49:cd:77:
2d:da:79:78:5d:06:d7:5b:4d:2f:99:29:48:ec:e3:
81:cd:0b:72:38:cc:b4:3f:27:8d:cf:72:fb:98:8e:
e6:24:0c:cf:36:3f:9e:65:ea:b8:72:83:4b:f3:73:
5c:27:4c:2d:b6:06:2c:40:56:a2:e7:91:62:62:9e:
40:f8:dd:5f:9d:e7:01:b7:dc:4c:74:a4:38:39:68:
2e:1b:4b:9a:44:e1:17:38:89:27:e5:55:7c:94:6b:
f7:3d:00:88:62:2f:2e:86:5f:2a:70:0a:eb:4a:58:
e4:c0:98:27:40:02:2a:a3:92:02:31:54:d1:26:d3:
0e:46:b7:9e:a2:71:ec:43:93:2e:05:db:cf:d0:a9:
c4:af:81:2e:19:46:a2:bf:b9:f5:ce:03:d7:4e:a9:
4d:5b:cc:80:97:e7:dc:20:7e:bc:69:06:d0:f7:4a:
fb:11:8e:88:09:0d:91:74:a2:63:8c:01:d6:0b:bf:
62:29:37:65:f2:0a:0a:a5:b0:99:57:60:fd:c5:6a:
89:95:49:a2:aa:b3:e1:90:79:fc:8f:4c:57:1b:50:
5c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7A:C0:F4:54:9B:72:F3:22:21:D6:73:A8:85:E2:87:20:0B:00:06
X509v3 Authority Key Identifier:
keyid:22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:6a:f6:fb:cd:cf:56:c0:dd:12:5a:e8:1b:04:35:d2:82:1a:
04:89:7d:14:bd:ae:e8:45:20:e7:24:c2:7b:d5:ce:a0:08:42:
5a:e5:45:9e:ef:49:95:9f:c1:5d:3f:59:8c:e4:a4:99:28:f7:
38:32:cb:f5:fe:24:a1:9c:d2:46:ae:7f:44:5f:c4:5b:93:e4:
a7:74:63:7b:0b:20:8f:89:64:ac:80:97:53:48:af:bb:51:bf:
9d:43:6a:1a:bd:49:c5:1a:00:e2:7d:76:88:66:50:d3:e6:3e:
a0:00:ac:34:be:1e:91:7b:44:26:82:fc:4c:09:af:35:ae:53:
c8:01:8e:3c:5f:af:c7:2e:52:4d:14:b6:e9:10:2d:f7:ee:9a:
cb:7c:2f:3d:5d:8f:24:04:6c:c1:b2:4c:bc:33:5a:e5:48:55:
f7:17:4a:be:59:b7:fa:75:55:10:e3:72:9c:5f:87:2e:c8:2d:
e8:63:9f:0b:0d:1e:2f:8d:0e:10:16:56:76:4d:ac:f6:19:8d:
50:c8:90:11:94:33:d8:c2:72:7c:20:39:b5:8c:4e:56:4e:5e:
03:35:fc:8d:14:a9:90:0a:67:55:fe:62:28:64:ea:6a:77:d5:
82:40:48:c4:ac:86:d5:db:9b:d9:48:3f:9c:bf:d7:ad:ce:4e:
79:0e:fb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 01:06:58 2025 by rpki-client