Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
File: iveEdzfnSUKyvnS5P9AtkA0wmyA.mft (raw, json)
Hash identifier: +f+UgWlmACYVnozU0ycbgiVW+O4AGpgU1UlvnCKe6dQ=
Subject key identifier: D4:5F:8B:41:1E:A2:54:EA:DE:D2:5F:CC:8E:CB:18:DF:08:2A:BB:59
Authority key identifier: 8A:F7:84:77:37:E7:49:42:B2:BE:74:B9:3F:D0:2D:90:0D:30:9B:20
Certificate issuer: /CN=8af7847737e74942b2be74b93fd02d900d309b20
Certificate serial: 0198477835C23C22CE918A278E46EC60A988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 16:01:57 +0000
Manifest this update: Sat 26 Jul 2025 16:01:57 +0000
Manifest next update: Sun 27 Jul 2025 16:01:57 +0000
Files and hashes: 1: gl5jVkYAoBFN7cdrLnkDFxT9xzs.roa (hash: DKhlihYjJGtiikGfA1O1zHxswQCNAc4gtqIYH1Qddqc=)
2: iveEdzfnSUKyvnS5P9AtkA0wmyA.crl (hash: 1cEFjdwisMuu8cs5EmXqxFmvP9tPnClBLPFImOVNxs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:35:c2:3c:22:ce:91:8a:27:8e:46:ec:60:a9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8af7847737e74942b2be74b93fd02d900d309b20
Validity
Not Before: Jul 26 16:01:57 2025 GMT
Not After : Jul 27 16:01:57 2025 GMT
Subject: CN=d45f8b411ea254eaded25fcc8ecb18df082abb59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:33:6a:8b:f9:48:db:cd:8b:79:87:75:b2:
d9:dc:ad:1c:aa:bf:9b:fc:8d:72:1d:33:07:e2:af:
ac:dc:c0:2c:56:fd:48:2a:d3:79:c5:f4:1c:4a:d9:
43:f7:68:92:d3:ea:54:4b:64:cc:5e:68:9a:e8:c3:
27:63:eb:f0:d6:16:e9:02:93:a6:82:74:d3:76:dd:
ed:ff:80:fd:9d:7a:f0:6d:dc:37:91:05:2a:db:d6:
2d:bc:9b:f5:a9:e7:f2:18:8b:3d:76:29:4d:1c:2e:
ee:3b:06:46:95:16:63:89:b4:7b:5a:a7:06:da:28:
ca:bb:3d:e8:ce:8e:b1:7d:6f:45:b5:8b:fe:db:83:
51:7e:09:a3:d5:6c:e0:13:4e:43:dc:a2:5c:4b:e6:
cd:7e:0c:ed:53:11:53:b6:f8:87:eb:6f:2a:9e:74:
a5:bd:67:78:bb:e7:37:d5:da:89:aa:40:a6:36:1d:
74:4d:0d:d8:28:8b:eb:c6:c6:42:a5:75:70:98:8f:
a1:2a:78:26:d5:72:f1:15:67:4f:d6:35:42:02:14:
a5:5f:f7:c0:20:2a:78:9e:89:c2:c6:3a:4e:fb:da:
83:c3:77:dd:7c:de:91:51:7d:63:26:14:9b:73:83:
5c:81:f8:50:64:cf:dd:28:3f:0e:05:d6:d3:8f:ff:
77:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5F:8B:41:1E:A2:54:EA:DE:D2:5F:CC:8E:CB:18:DF:08:2A:BB:59
X509v3 Authority Key Identifier:
keyid:8A:F7:84:77:37:E7:49:42:B2:BE:74:B9:3F:D0:2D:90:0D:30:9B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iveEdzfnSUKyvnS5P9AtkA0wmyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/52384b-e7a4-4269-a0cc-7efc2808d125/1/iveEdzfnSUKyvnS5P9AtkA0wmyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:07:a7:84:8e:fb:ca:e6:58:85:63:42:c4:ad:23:cf:83:52:
78:53:0a:f8:7f:f1:e1:30:7d:8f:45:ca:6e:19:bd:76:71:57:
ed:3d:74:3b:a6:e1:9f:50:a8:f0:6b:2a:85:e3:55:e0:df:16:
5c:ae:ba:e8:51:0e:71:cf:b7:cf:2e:50:2d:e4:13:2a:00:aa:
d5:45:68:ae:85:9e:09:c8:3d:fd:83:11:29:26:0c:8f:03:e9:
14:40:2c:49:a9:b8:43:54:4e:b1:18:c6:5b:94:f1:0d:49:41:
cb:8b:ad:cb:41:bc:fb:63:66:34:4f:2b:a2:cf:57:74:b8:c2:
4c:20:e9:47:79:04:68:6d:00:5a:aa:d8:00:ec:8b:2e:2a:6d:
a7:d5:57:bc:6b:72:f7:99:1d:bc:cc:2d:fd:61:ee:c8:95:a9:
41:3e:ee:ad:8c:e0:60:34:3a:97:c1:97:ee:7d:b8:37:f3:cd:
cc:0b:26:d3:82:34:e1:25:9c:2f:c1:3f:d3:bb:25:36:cf:c0:
55:23:4e:10:ea:7a:8c:9a:d3:21:f3:69:1b:be:85:4b:a1:4a:
e7:78:59:25:6b:a8:5e:8b:d1:d1:aa:81:32:14:a8:85:b4:b7:
6b:51:53:d7:f0:6d:e8:b1:19:7a:ac:52:37:16:86:83:9f:bf:
53:63:7a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:19:52 2025 by rpki-client