Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
File: ix22ROoOJ0ndbtAirs0SGUvLlvI.mft (raw, json)
Hash identifier: S7zQU04U8QbwoY2M9uQU2Pi8D+Nm2xLjWA88CnKzhws=
Subject key identifier: B4:B7:C4:DF:51:DE:F5:A9:FA:0F:79:3C:EB:1C:64:AF:28:3C:4B:E5
Authority key identifier: 8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2
Certificate issuer: /CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2
Certificate serial: 0199221E3AECC9EBBC475E0673496DE1E54A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 03:00:30 +0000
Manifest this update: Sun 07 Sep 2025 03:00:30 +0000
Manifest next update: Mon 08 Sep 2025 03:00:30 +0000
Files and hashes: 1: A41bCmeGcRe18SujefEGCOd0pEc.roa (hash: NjleSysihCL9A6oaK71bgTpnAO+ec2pn28x66pipbdA=)
2: ix22ROoOJ0ndbtAirs0SGUvLlvI.crl (hash: Kz/5tS5cjdYm2zO3Oj1mVJ2a2QUWeuOLsH5/cElXjlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:3a:ec:c9:eb:bc:47:5e:06:73:49:6d:e1:e5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2
Validity
Not Before: Sep 7 03:00:30 2025 GMT
Not After : Sep 8 03:00:30 2025 GMT
Subject: CN=b4b7c4df51def5a9fa0f793ceb1c64af283c4be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:c4:a1:ce:9f:2e:e7:97:13:73:f9:60:6a:
7f:32:e1:3d:ac:56:2e:6d:78:66:e9:a5:23:5e:c2:
c0:4c:c8:dc:8a:33:a7:cf:9c:ed:1b:dc:63:27:45:
76:f4:97:b8:96:5c:6e:13:d5:82:a6:44:32:3d:b4:
e9:bc:30:3a:6a:eb:83:b2:cd:c7:e4:46:08:4c:95:
95:19:03:b8:5f:a2:24:65:b5:8d:a0:3a:22:de:8f:
7f:fc:c6:68:56:22:46:db:fd:c8:fa:1e:d4:c7:f1:
33:36:63:13:a2:32:ba:f9:0d:8e:02:11:37:66:25:
be:21:01:73:d3:36:d8:ac:db:43:74:4d:30:3d:d8:
65:9c:7b:58:92:7d:be:1e:ee:4d:37:c3:66:f5:e5:
8b:01:21:1a:23:da:c8:f6:8e:7b:a1:de:18:3c:ca:
89:c1:28:10:7d:a5:44:82:67:c4:03:f1:5c:49:4f:
ae:1c:35:af:ab:82:e2:1b:cc:de:b0:88:d4:65:0d:
32:6c:09:a9:67:7d:9d:5e:44:c8:67:4e:b0:a6:c0:
a4:98:fa:e3:ef:59:bb:e6:ad:91:03:b1:b6:d6:6b:
0d:8d:f5:71:bd:93:cc:78:01:fb:1d:f8:24:71:75:
ce:e6:74:25:f8:89:e1:5f:2e:1e:0b:dc:d0:86:f2:
ac:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B7:C4:DF:51:DE:F5:A9:FA:0F:79:3C:EB:1C:64:AF:28:3C:4B:E5
X509v3 Authority Key Identifier:
keyid:8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:6a:10:b7:f6:d4:ee:9e:7e:7d:76:aa:d5:4f:80:37:3c:4a:
cc:22:7c:06:1d:f0:aa:46:55:90:07:ba:2f:44:03:5f:a3:78:
2c:82:e1:37:3f:3b:d4:76:ff:18:9e:0d:56:30:36:7d:48:07:
61:4a:fd:39:be:af:28:59:07:c0:75:30:6c:7e:05:ad:6a:af:
c6:af:d1:86:ef:4a:7d:6d:89:2d:67:af:e4:94:12:c5:46:ef:
55:44:7b:6e:51:75:0b:74:a2:f8:4f:17:38:90:70:6c:02:b5:
e4:3b:64:bb:0c:83:2c:df:38:e8:dc:94:4e:83:e7:70:dd:9a:
f3:aa:a8:07:4b:d4:8f:60:fd:ce:9a:77:46:e7:e3:f9:aa:dd:
a1:1b:fa:ef:4d:14:b5:2e:7c:c7:ef:31:52:fc:32:bb:ab:69:
4e:d4:d6:93:22:06:c5:07:e3:f0:ee:3e:ff:43:68:f9:80:62:
e3:be:23:7b:92:b2:e0:35:98:14:64:96:54:34:4e:e6:d8:70:
4a:bb:28:9a:10:50:3a:79:c3:dd:38:ac:cd:3d:f5:8e:6c:21:
76:e2:e0:4f:e9:48:23:51:d5:b9:59:7b:44:78:be:27:24:74:
8c:01:8d:ca:0e:a8:12:af:3e:21:38:58:fd:b8:71:a2:d9:7b:
0b:8d:fc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:43 2025 by rpki-client