Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
File: IhHwQD6XRloB3RRbwVB75WVxDU4.mft (raw, json)
Hash identifier: crGnbgNhFtQDx/Kr4/qlFTymSxTHbxYcedL03EKfpgE=
Subject key identifier: 44:8F:55:67:CF:DE:FE:17:EA:70:2D:C3:63:DD:03:37:4D:52:F5:28
Authority key identifier: 22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
Certificate issuer: /CN=2211f0403e97465a01dd145bc1507be565710d4e
Certificate serial: 0198C791F283195D97424E76D7F712497F93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
Manifest number: 06F5
Signing time: Wed 20 Aug 2025 13:01:27 +0000
Manifest this update: Wed 20 Aug 2025 13:01:27 +0000
Manifest next update: Thu 21 Aug 2025 13:01:27 +0000
Files and hashes: 1: 0Td-ytKd7IQkV6ppvSRDV5Vu3uc.roa (hash: vadykyjqf/87L2UrE0dzG3fnpUitaYJ3rncrWvmznpA=)
2: IhHwQD6XRloB3RRbwVB75WVxDU4.crl (hash: b4CTXuYg7i1HIh4JKI8VWKDNoAAyIQ6iMqTFiXW2S4A=)
3: klqt66FL_fbr6-S9maCaJ71u_2M.roa (hash: veL+ZGa8+a7DgdnASURYCHEXm47JFKP1LXkF9cJkBfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:91:f2:83:19:5d:97:42:4e:76:d7:f7:12:49:7f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2211f0403e97465a01dd145bc1507be565710d4e
Validity
Not Before: Aug 20 13:01:27 2025 GMT
Not After : Aug 21 13:01:27 2025 GMT
Subject: CN=448f5567cfdefe17ea702dc363dd03374d52f528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a0:6b:ad:03:27:68:a2:b4:77:b0:b3:f8:dd:
b2:43:0b:5b:60:a0:d0:67:50:4e:c3:82:dc:07:f2:
55:d2:87:54:c6:80:00:e0:6a:f2:41:89:5f:a2:06:
2c:96:93:40:c1:69:5f:c9:76:50:93:81:d7:09:08:
e8:7c:3c:c6:55:95:e2:b5:51:c4:7b:17:de:75:1d:
b2:c1:47:da:c9:fa:f0:d9:c5:21:44:f4:48:71:39:
3f:a5:d4:bc:34:0e:d0:b5:de:18:c8:b5:45:06:44:
3c:13:19:ac:80:1a:07:89:1f:e4:c8:19:a2:0d:24:
63:08:f1:56:2b:60:5b:f6:cf:01:ba:43:87:6a:07:
3a:1c:2b:33:a0:f4:5d:70:92:ad:88:4b:67:78:ad:
8c:df:72:90:f6:e3:6a:ed:ec:e1:9b:f8:a0:d4:f5:
e0:9e:a0:59:e2:7f:f3:9d:33:46:41:30:92:ad:71:
e6:02:cd:4a:c8:2d:6c:22:2a:64:3a:12:c3:3f:12:
a5:a3:c5:b4:f1:50:e1:0d:5e:61:fa:b4:41:f0:2c:
9c:be:ff:6a:7d:9b:a6:04:d0:b5:15:74:bc:f0:d0:
a8:b5:42:37:bb:05:fd:87:ee:1f:7c:96:4d:1a:93:
10:80:3e:54:88:f1:66:56:52:23:72:99:49:80:eb:
64:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8F:55:67:CF:DE:FE:17:EA:70:2D:C3:63:DD:03:37:4D:52:F5:28
X509v3 Authority Key Identifier:
keyid:22:11:F0:40:3E:97:46:5A:01:DD:14:5B:C1:50:7B:E5:65:71:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHwQD6XRloB3RRbwVB75WVxDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b40d-e900-4d9f-af05-316c7a9cd6b6/1/IhHwQD6XRloB3RRbwVB75WVxDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:54:a7:fa:03:0e:42:f4:64:fb:51:09:e6:ab:8a:5f:81:96:
0d:12:d2:7a:c9:48:4d:8e:6c:9e:3b:f1:76:77:9a:d4:e4:75:
7b:b8:35:52:d3:9e:fd:84:4b:d5:35:eb:de:87:44:1c:7d:e4:
09:c6:d5:57:8b:bd:6a:f9:26:ec:c1:c2:55:e2:b8:f1:30:e5:
77:47:ad:e0:47:de:ad:49:50:c9:d4:9e:c3:d1:e7:f8:8d:24:
e0:b0:f0:6b:b3:18:dd:2e:18:76:5f:40:a2:fa:a3:5a:0f:c4:
08:1d:8c:da:25:bc:b5:87:46:4e:8e:56:0c:84:29:0c:ab:e7:
42:7e:39:7d:c3:bb:b5:8e:eb:37:7e:7b:70:a2:56:6c:57:31:
82:17:c4:f8:76:a4:22:32:b6:97:c1:7d:7f:af:9b:db:5f:3c:
0a:be:1b:fa:e0:1a:b3:28:5b:65:0a:1d:e2:81:13:37:3d:26:
8d:69:68:1a:a9:0c:3a:1b:27:77:1e:f0:95:c5:0e:e5:2d:c5:
f8:fd:eb:f7:c8:b2:ab:ab:ac:52:aa:c5:52:02:24:45:14:5f:
be:42:7f:03:93:3b:6a:0d:54:07:88:68:a2:d4:03:e9:43:3c:
67:0c:c3:b7:18:fb:2a:6c:95:07:29:3b:15:80:14:93:b7:a4:
1c:e3:ce:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:30:50 2025 by rpki-client