Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
File: IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft (raw, json)
Hash identifier: kphWUYtEvQvFkd9SpWoJeXOL6jr9b2Eo1Bl72YPC7LA=
Subject key identifier: EB:3D:4B:51:30:6E:41:46:58:0B:DB:06:AD:11:A9:DD:17:31:18:2A
Authority key identifier: 20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54
Certificate issuer: /CN=2046367390224a07684d7977f9165a0950f03d54
Certificate serial: 019922FAC8F0E8C52DF45F47A4CEC669929B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
Manifest number: 137E
Signing time: Sun 07 Sep 2025 07:01:24 +0000
Manifest this update: Sun 07 Sep 2025 07:01:24 +0000
Manifest next update: Mon 08 Sep 2025 07:01:24 +0000
Files and hashes: 1: ICVbUtHfbHYJwV7ucXI2K_14ylU.roa (hash: d0or5/9y3dY5/PzUShTK41fVXw4MjWFCN4HTk7PqBCg=)
2: IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl (hash: 0RKUa6YTY/YJNP84CintOr24iOur1566RfViJRgEQ9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:c8:f0:e8:c5:2d:f4:5f:47:a4:ce:c6:69:92:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2046367390224a07684d7977f9165a0950f03d54
Validity
Not Before: Sep 7 07:01:24 2025 GMT
Not After : Sep 8 07:01:24 2025 GMT
Subject: CN=eb3d4b51306e4146580bdb06ad11a9dd1731182a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:06:60:17:d8:3a:ee:46:cb:19:07:20:7a:
b6:14:cb:7a:ee:d4:44:a9:85:d6:2c:28:b6:06:b8:
e7:d5:50:50:56:4b:51:cc:9d:c2:40:45:cd:45:ff:
94:62:c5:56:d3:f9:dd:f7:51:8c:f6:0f:7c:2e:1a:
11:27:6f:d7:ae:40:03:64:f0:58:ed:91:ee:d2:34:
56:10:3b:52:e4:4d:0e:d5:d3:26:18:74:ac:f4:cb:
ed:c7:f7:7f:27:7a:2c:64:9d:9a:6d:b0:ba:e6:cc:
5f:0b:99:0f:75:d4:65:fd:e0:69:8e:e0:c0:ef:ca:
60:07:0e:82:6d:d0:34:0c:55:98:e5:7f:d5:1a:cf:
0d:74:cb:d6:63:6a:ca:da:2c:96:15:f2:cc:b3:3e:
13:7e:99:ea:bc:9d:be:5c:34:df:6e:df:aa:f9:b2:
73:25:52:4e:db:ae:48:29:d8:fb:89:61:e2:cf:c9:
82:ce:e4:79:25:20:1d:2a:9d:d5:23:bf:43:e2:89:
b2:b6:a5:70:48:01:59:ee:4a:53:dc:b2:9d:93:0c:
1f:ea:08:94:26:19:52:fb:b5:5f:17:6a:4c:59:34:
22:8d:f6:a3:d0:6e:9d:b0:67:9e:e0:95:8f:99:7f:
18:19:61:83:75:94:76:48:bc:3e:80:83:05:62:b9:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3D:4B:51:30:6E:41:46:58:0B:DB:06:AD:11:A9:DD:17:31:18:2A
X509v3 Authority Key Identifier:
keyid:20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c4:ba:2c:6f:13:51:c6:65:b3:e9:b0:9d:c3:dc:44:83:cd:
d3:5a:d7:9b:8b:d3:a6:61:10:d8:1e:53:68:e2:ca:15:1e:2f:
1c:93:01:bd:69:8a:75:64:98:46:54:31:7d:38:d2:64:9a:8d:
e4:9c:7b:0c:ff:f1:20:80:dd:11:a4:ed:63:a5:db:8e:c9:c8:
38:ad:06:f4:b0:ab:fe:b5:7d:a2:c7:26:bc:f3:81:a0:27:48:
ca:6a:1c:9e:cf:c5:fb:cc:27:e1:3d:37:05:53:6f:8a:02:82:
71:a9:c8:b6:61:14:29:51:bc:3b:2b:c3:7d:f2:37:3d:1d:91:
a3:2d:54:e4:81:22:3d:d3:f5:be:1d:92:5e:60:51:66:a8:a0:
eb:1f:51:95:4b:de:3a:77:e4:f1:d4:06:dd:9b:82:8c:4b:67:
23:3b:ea:4c:e7:2a:16:5d:2b:76:3a:94:8a:ca:2c:fe:ba:2e:
1a:21:ec:e8:ae:4d:f9:eb:8d:87:b4:d2:95:8d:51:87:25:76:
7f:da:13:9d:5d:ad:36:4d:e8:ed:bc:81:37:cd:16:7c:d9:ab:
9d:8b:b9:6d:2d:02:9c:d4:a2:33:11:c7:20:ce:bd:ba:56:5a:
ab:98:76:c3:2e:d9:d6:c4:2d:88:7e:3f:d1:56:24:c5:68:34:
c2:df:74:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:15 2025 by rpki-client