Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
File: iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft (raw, json)
Hash identifier: lc3x56SyZyC1YDxUas0/qdVekcA4ngB8h8jLGrWug5U=
Subject key identifier: C4:D4:8D:FF:DA:F4:77:20:B1:BD:CF:4C:7E:6F:73:A1:54:30:3E:40
Authority key identifier: 88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
Certificate issuer: /CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Certificate serial: 0199270E47F4A346A561509D237C90BFA097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
Manifest number: 15C7
Signing time: Mon 08 Sep 2025 02:01:11 +0000
Manifest this update: Mon 08 Sep 2025 02:01:11 +0000
Manifest next update: Tue 09 Sep 2025 02:01:11 +0000
Files and hashes: 1: Qv6t4wP7j-uLsxcfTWHv2ZFQWD8.roa (hash: eR47NrGWjMdNEp9FBa07vBAWwdqKIDeSc8imYvJOwfI=)
2: iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl (hash: O+Fn/l7ILRKOzK+d0rhHfTd9etX3MiRL3MaFwpD4Cxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:0e:47:f4:a3:46:a5:61:50:9d:23:7c:90:bf:a0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Validity
Not Before: Sep 8 02:01:11 2025 GMT
Not After : Sep 9 02:01:11 2025 GMT
Subject: CN=c4d48dffdaf47720b1bdcf4c7e6f73a154303e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0b:eb:f7:63:de:b9:81:b1:9d:c0:a3:9e:05:
89:e0:3c:ad:9e:31:81:26:7b:46:89:b1:d1:5b:f7:
bb:75:d4:a1:5f:06:69:20:ec:26:f3:b9:4b:7e:8e:
0c:f9:34:ce:ff:1d:49:93:b8:51:7e:83:9d:bd:e3:
d0:85:b3:25:7f:15:b2:93:c0:54:81:8a:7c:7f:b7:
db:51:7d:22:47:2e:78:9b:68:1f:90:f2:0f:e3:ae:
76:29:75:b6:89:32:d2:64:8a:a3:95:71:c2:32:23:
a1:3c:31:8f:14:a8:83:36:2f:ff:eb:fb:fa:2e:b2:
4c:3b:15:45:8e:4e:30:a1:2f:3b:a7:53:33:99:2c:
38:af:d2:42:a0:a9:db:4b:aa:36:c1:4d:5c:79:06:
85:e6:d3:a4:80:4d:29:e8:5a:c9:83:1a:d8:fc:1b:
35:a7:46:3e:f9:26:35:5e:d6:3b:84:a1:33:1b:12:
9b:03:20:f3:48:a4:e8:17:5e:cd:f6:4a:53:66:c8:
99:a5:fb:af:63:3c:7c:ab:f2:ce:21:64:d8:43:3f:
1a:f7:5c:ce:7b:93:01:7f:14:5b:47:7a:b6:79:64:
c4:0c:cd:29:dc:4d:32:bd:9c:bf:8f:2f:73:5a:b0:
ca:e3:3f:96:1a:c3:62:6e:98:82:7b:9a:fc:8a:0d:
57:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D4:8D:FF:DA:F4:77:20:B1:BD:CF:4C:7E:6F:73:A1:54:30:3E:40
X509v3 Authority Key Identifier:
keyid:88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:85:83:53:c2:21:72:51:b8:dc:ef:d8:a7:5e:41:c8:47:05:
c8:d0:46:7a:6d:f8:b9:d0:14:af:9e:32:6b:84:fa:c2:1f:19:
b0:1d:bb:b3:ac:5c:1f:b9:b6:2e:49:0a:54:5b:7d:21:6a:ec:
d6:02:b5:dd:ca:21:77:e9:2f:c6:dc:57:c2:a4:46:26:86:84:
96:08:6e:ff:24:97:ef:15:af:c4:b1:83:ec:55:dd:b7:cb:0a:
30:aa:25:a0:e0:44:0c:77:f2:ee:56:8f:16:f9:b2:6a:29:c9:
5d:78:f2:b9:de:4c:f7:79:a9:b0:1b:4c:1d:07:64:82:cd:4b:
89:f3:26:4f:6f:c6:43:3a:b2:ec:f0:df:2c:08:73:09:ad:2c:
ec:08:64:c1:fb:1f:7e:87:7d:22:9a:ec:1a:29:40:55:a9:33:
7f:a8:14:32:c3:41:b2:74:b0:78:5c:04:b5:c2:b8:1c:0e:b8:
27:37:37:1f:63:8d:47:c1:f0:64:91:12:ab:aa:8a:3f:0f:eb:
1b:11:9c:02:d5:ad:c6:55:c9:79:40:1d:40:40:79:0a:72:79:
de:98:ee:64:33:05:5b:f5:03:5a:8e:ac:8f:34:e1:3d:dc:5c:
d1:f0:96:e5:f2:ae:68:6b:2e:e7:cb:74:58:f2:c5:12:62:c3:
19:bd:61:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 04:16:54 2025 by rpki-client