Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
File: ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft (raw, json)
Hash identifier: 9BlldvxM26x59TSyfnHiB8LK3KEpW/gNym0v50DWeGU=
Subject key identifier: 1E:E9:60:CA:32:03:B2:3B:D1:19:F8:90:1B:61:B6:EC:83:3A:DE:4B
Authority key identifier: 8A:40:00:10:1A:D3:93:CA:DF:7F:C8:FD:63:DA:AD:3C:6D:AE:12:4F
Certificate issuer: /CN=8a4000101ad393cadf7fc8fd63daad3c6dae124f
Certificate serial: 019921B08AF827FA805CB82B93F375A2A82C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 01:00:41 +0000
Manifest this update: Sun 07 Sep 2025 01:00:41 +0000
Manifest next update: Mon 08 Sep 2025 01:00:41 +0000
Files and hashes: 1: ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl (hash: AWEQbiMMXLE0Oz0alaMkf9AHWDFJ+awkLiBqHgRUtlQ=)
2: lFrZ4rR-rCiMWVmFnQGdm-QJh_E.roa (hash: kVQOvcnOHC3sx1NCMIDWqYKbqcHGycyRdXwqqPFVOgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:8a:f8:27:fa:80:5c:b8:2b:93:f3:75:a2:a8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a4000101ad393cadf7fc8fd63daad3c6dae124f
Validity
Not Before: Sep 7 01:00:41 2025 GMT
Not After : Sep 8 01:00:41 2025 GMT
Subject: CN=1ee960ca3203b23bd119f8901b61b6ec833ade4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:5f:19:8b:0d:60:39:e9:ff:67:af:cd:c5:
ad:a4:a6:41:c8:72:5f:73:6f:52:c2:56:15:1a:3b:
d5:cd:b8:73:e1:da:ec:a3:f1:cb:a5:05:a4:6e:bc:
ae:a4:dc:95:d4:0d:ff:80:63:63:19:e5:f1:88:0b:
27:9b:1b:ae:65:34:ef:cf:f9:8a:d4:aa:01:24:12:
e3:5e:c8:4b:79:d4:18:08:60:3c:ba:46:ad:20:f4:
38:1c:f8:cb:c5:ab:44:6c:fd:fc:af:67:d1:d0:f9:
1b:57:a0:a1:37:a1:f1:2d:3d:9a:9e:b2:ff:fc:5b:
17:17:12:82:7c:73:ad:d3:4e:75:34:c9:3a:87:0d:
64:53:f9:f5:85:ac:18:c7:1b:d5:79:42:14:21:f2:
ab:91:72:f8:af:33:5d:40:5c:8a:ad:99:e0:da:d8:
be:66:b0:53:c7:c8:17:c8:74:57:5b:ef:fe:e0:ce:
cb:cb:a8:5f:b5:a1:3f:3c:ec:9e:31:e8:eb:1e:d5:
ce:d6:4e:9a:8f:41:f6:e0:77:94:e5:4c:b8:35:d0:
56:20:e1:fc:4a:c1:fa:68:0c:4f:ab:bc:27:73:25:
ca:6b:8a:6f:97:ab:99:39:d4:bf:bf:f8:64:aa:4a:
ca:09:a5:cc:f5:f4:45:a7:59:78:b0:9f:d2:61:4f:
81:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E9:60:CA:32:03:B2:3B:D1:19:F8:90:1B:61:B6:EC:83:3A:DE:4B
X509v3 Authority Key Identifier:
keyid:8A:40:00:10:1A:D3:93:CA:DF:7F:C8:FD:63:DA:AD:3C:6D:AE:12:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b1:88:3e:12:a7:3a:31:7f:5c:42:57:0e:95:0f:50:a4:ce:
d1:ff:66:76:0c:09:23:ce:57:a5:27:de:d8:e7:7a:a2:af:9c:
24:f1:ab:b2:0b:70:f7:74:6b:1b:9f:85:d8:9c:e3:f6:4c:02:
92:c0:a9:02:64:83:96:d6:3b:1b:5f:9c:e1:b4:60:9c:bd:fe:
c3:1a:a2:96:9d:9f:6a:0e:c8:87:ec:40:16:7d:5f:fd:9d:4e:
1c:07:d3:12:d7:37:7e:f1:fe:92:ef:91:e8:ac:5f:84:2f:52:
3b:11:49:ef:90:3c:bf:03:c7:cd:8b:cf:f4:4f:d1:97:50:1e:
14:02:06:05:bd:f4:e4:2f:52:c0:72:2c:1d:c7:f3:50:ff:ed:
98:49:1d:02:7a:47:f4:5b:0f:d7:f9:fb:d5:46:96:d0:4e:c9:
eb:bc:77:6c:71:b9:df:d8:ba:be:d8:53:b0:36:17:23:c5:19:
d0:8a:a6:40:b0:a6:68:b4:9b:00:1a:09:94:c8:7c:c5:39:ac:
ae:ad:ad:b5:66:a1:81:af:79:4e:bd:5c:97:92:9e:91:47:76:
c9:72:d8:99:45:a5:1c:07:f9:91:c1:36:de:d6:e0:42:ba:41:
2f:56:58:8b:ae:b5:b5:c3:e8:a1:ed:ca:fa:8c:af:d2:3f:eb:
40:ce:f7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:45 2025 by rpki-client