Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
File: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft (raw, json)
Hash identifier: ZMfFj/PHYhbyPrllAZ3FZx6ZQyGpFgLNRNmhM68DHFU=
Subject key identifier: 3A:A5:0A:64:DC:5F:7B:00:12:76:E1:78:36:BA:09:0B:99:B7:D4:CE
Authority key identifier: 22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
Certificate issuer: /CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Certificate serial: 019927E98C2F5B96C48B77DFA853261D92A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
Manifest number: 1157
Signing time: Mon 08 Sep 2025 06:00:41 +0000
Manifest this update: Mon 08 Sep 2025 06:00:41 +0000
Manifest next update: Tue 09 Sep 2025 06:00:41 +0000
Files and hashes: 1: 0qW5Y4yA32z4Dny6mIJ-qLW2XWk.roa (hash: q9HOhDrTziiN8dHNBG3tLes1wQlniZAzuxjJOEin3Rw=)
2: Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl (hash: 36juu9u8z+yI9ObbV2Cv4uyMtdBqu6yeAWnT+Kl6AU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:e9:8c:2f:5b:96:c4:8b:77:df:a8:53:26:1d:92:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a776a6955c0163c9cf1a838c41dfee5da9db3d
Validity
Not Before: Sep 8 06:00:41 2025 GMT
Not After : Sep 9 06:00:41 2025 GMT
Subject: CN=3aa50a64dc5f7b001276e17836ba090b99b7d4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:55:97:62:bd:71:5e:f6:a4:29:a9:23:57:
ae:8a:f3:1d:87:73:b5:f5:94:a3:97:63:e9:01:b1:
f3:20:15:3f:56:14:f8:50:44:b9:34:ba:a1:09:83:
30:e0:f5:ed:48:16:df:e4:1d:62:42:42:47:26:6a:
f3:02:74:12:44:88:92:b3:73:aa:c8:3c:cc:73:2d:
d3:0d:e2:b2:e0:31:54:03:4f:ec:65:ec:09:49:75:
e2:5a:14:e7:f5:37:cd:b3:63:21:1e:17:2f:e8:7d:
4f:5a:fe:2c:67:4f:f6:e1:6c:10:7d:fc:23:6c:71:
ee:ef:a8:5c:1f:bc:3a:9c:ab:68:54:91:66:80:90:
ec:12:40:4b:aa:39:5b:44:cb:25:7f:92:3c:64:b2:
a8:1f:7e:53:bc:4d:14:c1:30:5b:82:92:e5:55:c8:
e7:e8:36:a1:c1:a2:d5:10:b7:c2:4f:29:3d:5c:57:
32:39:74:f6:9a:f8:42:56:05:ec:b5:ab:d2:71:7f:
d7:58:dd:25:97:fc:f8:ad:ea:df:14:02:32:bd:d8:
8e:a7:32:fd:06:fe:18:f4:e0:ff:1a:7e:7e:9c:10:
b1:16:74:0f:d2:b4:30:86:11:91:80:07:ad:ed:93:
90:89:e6:87:0d:d8:86:d4:3d:93:f6:98:39:f2:be:
9a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A5:0A:64:DC:5F:7B:00:12:76:E1:78:36:BA:09:0B:99:B7:D4:CE
X509v3 Authority Key Identifier:
keyid:22:A7:76:A6:95:5C:01:63:C9:CF:1A:83:8C:41:DF:EE:5D:A9:DB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ced8f-d024-45bb-922c-af1de3d0f217/1/Iqd2ppVcAWPJzxqDjEHf7l2p2z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:62:5f:ca:9a:b0:f9:91:0d:5b:87:4f:e0:1c:7f:a7:93:a0:
f8:4f:bc:b3:f9:c9:8d:9a:23:5d:37:24:23:8f:32:ad:22:ad:
58:f3:28:ed:65:ab:bc:90:ae:a1:78:c0:ce:63:a8:fe:7a:2e:
b3:ba:18:03:96:5f:18:67:9e:b7:02:39:75:95:7c:f8:5f:8f:
ca:74:a2:dc:c3:3a:20:32:f9:ab:9c:ce:f8:2b:d6:50:37:f6:
07:51:5e:1b:95:33:64:59:84:0a:34:3e:38:b1:44:5a:dd:7c:
5b:03:0c:74:63:4c:a7:d0:cb:79:27:a8:92:f0:7a:41:e7:66:
55:14:66:c3:b6:0f:46:c5:4d:ed:c3:8f:2d:bf:be:d9:63:3d:
73:1d:e6:79:76:73:41:d8:c0:3e:62:e6:f3:15:91:b3:0b:70:
57:e0:5a:a9:5a:5c:ce:d3:f8:70:c0:c4:31:33:05:29:1b:ad:
08:08:b2:e0:77:28:c2:e6:14:fa:b5:57:74:6b:23:9c:15:6b:
70:39:de:f1:ea:cf:32:7b:a7:e4:ab:c5:93:43:69:b4:d2:f0:
fb:6e:ce:0b:cf:02:81:e8:68:1a:ac:ae:95:ef:d5:a0:c2:cb:
56:4f:69:10:81:3c:8f:10:a0:02:8c:68:f4:48:f0:bf:d4:45:
c5:65:40:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:10:21 2025 by rpki-client