Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
File: Iavg4GkA17lgdsALtQ1PncA5L1k.mft (raw, json)
Hash identifier: Cz7EuP+rqpWrIT9f1PlaKHQWk6FofJBomxOYJZCuId0=
Subject key identifier: B5:7C:7C:92:D0:16:4A:85:88:92:E9:61:06:8E:50:20:05:6B:42:2C
Authority key identifier: 21:AB:E0:E0:69:00:D7:B9:60:76:C0:0B:B5:0D:4F:9D:C0:39:2F:59
Certificate issuer: /CN=21abe0e06900d7b96076c00bb50d4f9dc0392f59
Certificate serial: 019922FAA1252E7493EEC3749E2A06469711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iavg4GkA17lgdsALtQ1PncA5L1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
Manifest number: 05D5
Signing time: Sun 07 Sep 2025 07:01:14 +0000
Manifest this update: Sun 07 Sep 2025 07:01:14 +0000
Manifest next update: Mon 08 Sep 2025 07:01:14 +0000
Files and hashes: 1: Iavg4GkA17lgdsALtQ1PncA5L1k.crl (hash: r/U9K19w1iMpPXw+ReIDxbCDWVCaYD6WG7cSwUhxga8=)
2: mCYGvJbl1Fw6jPx9Itl4lHAe01g.roa (hash: jGLZYe0wekh1PvAGDaIi7Ir4CmCU/JjboXXovtVFOe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iavg4GkA17lgdsALtQ1PncA5L1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:a1:25:2e:74:93:ee:c3:74:9e:2a:06:46:97:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21abe0e06900d7b96076c00bb50d4f9dc0392f59
Validity
Not Before: Sep 7 07:01:14 2025 GMT
Not After : Sep 8 07:01:14 2025 GMT
Subject: CN=b57c7c92d0164a858892e961068e5020056b422c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:88:fb:89:e6:bf:49:97:0a:fa:2e:3f:b2:70:
29:ab:2c:47:fc:42:4c:59:61:8e:89:2a:e2:d0:e1:
c7:db:59:87:f5:54:a2:63:39:9b:2d:53:17:11:65:
b8:79:37:a0:45:ab:9e:b0:8e:de:29:40:d2:cc:c4:
ad:9e:2a:ad:7f:6a:c4:24:9d:9e:06:5f:13:b3:89:
da:83:af:8f:8f:27:08:50:15:95:86:3d:6a:e5:59:
b0:df:a0:3c:70:da:bd:80:38:d2:4b:1a:4f:65:da:
01:d3:6a:fa:1d:b8:f8:d1:fa:1b:61:ea:3f:a5:e9:
7a:00:e3:23:54:f1:e6:d6:6c:6d:3f:18:97:2c:2b:
69:32:97:a3:5e:0a:07:bc:93:78:6c:a9:d0:0a:f0:
d5:1c:5f:6d:f9:6a:c8:23:85:dc:3a:d5:ec:ff:68:
c7:70:7e:2b:de:f1:c6:e5:eb:5c:fe:71:bb:7a:6a:
86:8c:0d:37:5b:f9:f9:c0:fc:70:19:c8:e8:64:65:
03:25:79:a7:4c:ce:ff:32:09:29:97:5c:73:0c:a7:
36:05:52:ab:14:e3:b5:1b:0b:2a:ba:77:1a:b3:33:
c9:88:b3:82:0c:b3:17:b9:17:aa:91:43:79:f1:83:
d4:95:32:06:e2:ee:65:fb:7f:e3:b1:07:5b:54:10:
6f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7C:7C:92:D0:16:4A:85:88:92:E9:61:06:8E:50:20:05:6B:42:2C
X509v3 Authority Key Identifier:
keyid:21:AB:E0:E0:69:00:D7:B9:60:76:C0:0B:B5:0D:4F:9D:C0:39:2F:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iavg4GkA17lgdsALtQ1PncA5L1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f2ec09-5445-44ff-9915-dee9aaeffc9d/1/Iavg4GkA17lgdsALtQ1PncA5L1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:27:06:4d:aa:2c:b0:91:b9:af:4c:d8:c5:ce:f7:68:6e:8c:
71:d5:5d:76:88:cb:ac:98:38:f1:55:dd:2f:24:21:ce:0c:77:
18:81:c1:6b:14:5b:ef:43:8e:13:9b:fc:51:5b:50:ef:74:2b:
78:89:02:15:df:0e:16:fc:73:68:d6:d8:cc:ef:56:5c:f3:96:
85:ee:d0:a0:8f:70:36:e1:7f:4f:dc:2d:a2:3c:c4:f7:68:cf:
38:ec:8d:81:97:74:e4:c0:bd:8a:3b:60:3f:e5:6f:4e:b9:35:
03:0c:ba:e7:7f:3f:61:4f:60:b7:5a:42:5c:0a:9a:29:a4:49:
8a:d6:25:29:9a:fd:09:57:ce:b2:b5:62:53:60:c6:e8:41:aa:
73:17:34:c6:40:b4:01:1d:a4:d0:e3:01:17:6b:f4:ff:55:84:
ce:67:9c:0b:f7:6b:2d:1b:54:d5:0a:95:5c:e5:86:16:d2:86:
54:df:cc:88:9f:c0:54:6b:49:4a:fa:8e:8d:37:c8:2d:96:30:
73:5c:d6:e1:1e:5e:d2:00:44:c3:9b:11:a4:cb:84:ca:c9:e3:
34:20:0e:59:bb:5f:37:14:f0:bf:e6:71:35:a6:c1:f3:f5:d3:
d4:22:ec:f9:5f:35:da:6a:84:28:2e:2f:68:36:ce:a2:34:0d:
53:ad:33:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:01 2025 by rpki-client