Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
File: IeQhptlumdY_fPtJnKcRfIIwTqo.mft (raw, json)
Hash identifier: TsJKTwTWIuQiHwzJUlws3veS/qkYJR/qoIDXE6B+Wi8=
Subject key identifier: B6:CB:6B:75:40:A3:FC:69:29:E6:5A:79:C3:AD:13:55:F4:3B:62:75
Authority key identifier: 21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA
Certificate issuer: /CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa
Certificate serial: 019923311E5703516F140E0573EED9766C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 08:00:45 +0000
Manifest this update: Sun 07 Sep 2025 08:00:45 +0000
Manifest next update: Mon 08 Sep 2025 08:00:45 +0000
Files and hashes: 1: 1-6OkkXT7C4FLfpQRzLeEPIkuUNA.roa (hash: D8MJaVpCwQ0fVODdot0Xw5y5hbPJWv55WnQMX0Z/dxE=)
2: IeQhptlumdY_fPtJnKcRfIIwTqo.crl (hash: 9/I/gM87Z6VyGpv1DgkjzVa8gCJKguu4ur6gutsJ9cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:1e:57:03:51:6f:14:0e:05:73:ee:d9:76:6c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa
Validity
Not Before: Sep 7 08:00:45 2025 GMT
Not After : Sep 8 08:00:45 2025 GMT
Subject: CN=b6cb6b7540a3fc6929e65a79c3ad1355f43b6275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:61:5c:17:2c:95:98:f7:99:eb:97:14:90:c2:
40:c8:8d:a8:53:91:45:9f:8a:dd:00:f5:c8:cd:b4:
d3:32:8f:6d:10:01:19:d8:89:ac:ef:9e:b7:03:56:
1b:27:84:8a:66:11:1e:e7:0b:09:5a:1a:be:bb:37:
dc:70:dd:87:b9:ff:57:bf:60:65:d4:ac:e8:3c:08:
39:38:1e:d2:5e:1d:bf:e3:b9:f4:da:3b:27:a0:e4:
4c:ed:24:90:eb:04:cd:2a:3c:53:e1:3c:ac:b1:dd:
a5:ed:1e:c6:14:47:2c:3a:f2:8a:3b:f7:03:cf:38:
dc:f9:49:0c:33:62:14:1c:e0:26:fa:d6:d5:c0:ef:
b0:4e:77:31:2b:ba:54:80:d3:c1:89:21:09:81:09:
eb:ee:c5:52:0f:4f:53:9d:42:47:49:83:c0:0f:69:
0a:12:32:91:14:c5:8d:1c:6b:3c:7b:3f:c5:05:ae:
be:d0:88:d9:1b:6b:84:c7:12:fe:f5:85:fe:71:58:
f0:d8:13:c9:61:2e:ea:56:6e:a3:3b:94:c4:aa:b7:
7f:b2:77:e3:54:0d:00:4d:6c:de:5c:1b:90:0d:75:
6b:6b:fb:98:3a:23:b5:85:04:72:f1:b9:10:74:54:
70:38:63:58:f8:23:42:0d:e8:be:d3:bc:6c:b2:84:
38:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CB:6B:75:40:A3:FC:69:29:E6:5A:79:C3:AD:13:55:F4:3B:62:75
X509v3 Authority Key Identifier:
keyid:21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f0:20:a5:86:fb:49:7e:9b:3c:d9:ce:95:02:b7:64:c2:08:
ae:df:1d:27:7c:a5:ae:e8:22:35:46:f1:6a:4f:d8:c1:63:a9:
c2:41:4c:79:ee:c6:3a:5e:eb:95:bc:8a:1c:0e:05:cf:a0:fd:
7f:10:82:b1:10:3e:05:89:94:cb:9a:d3:df:92:c9:7c:09:90:
39:ea:4e:b2:ee:11:ad:c1:b5:75:30:e1:ea:9f:88:97:f4:c5:
34:95:4e:13:ec:60:a8:a8:e4:85:e4:03:27:93:c8:94:e8:d2:
f4:90:d7:22:78:46:f0:c1:92:22:39:a1:7f:f1:c9:9c:55:15:
62:97:8e:68:16:6e:2e:dd:69:9e:bd:6c:81:d2:96:81:82:ce:
46:d8:6d:ab:5c:d4:c5:da:29:7d:52:9c:b3:00:91:16:e8:cd:
1f:11:84:b7:fb:25:b9:3d:64:41:ea:27:68:48:f5:d5:56:1d:
eb:57:ea:6e:71:ca:c8:91:e2:2e:ad:ac:ce:4a:0c:d4:01:bf:
0a:da:1a:48:6b:61:f6:4c:34:d7:8b:d9:45:32:e2:e1:4f:e5:
f2:a7:f2:bf:7e:aa:09:ad:3b:cf:76:00:5e:65:ed:33:4e:6d:
ed:9e:36:31:83:ec:f7:b3:88:f7:97:6a:d1:f8:66:77:a7:ff:
60:25:84:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:38 2025 by rpki-client