Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
File: IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft (raw, json)
Hash identifier: 9Hpt8Je1pAOCovv7gGoQiCgJsY7YbrohrGKOICRwERE=
Subject key identifier: A4:21:FD:18:F4:04:0D:42:BE:F2:DD:7B:BD:02:DB:FC:4F:BD:25:E5
Authority key identifier: 21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
Certificate issuer: /CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Certificate serial: 01992E236995E35E4C200068792968320F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
Manifest number: 04FC
Signing time: Tue 09 Sep 2025 11:01:36 +0000
Manifest this update: Tue 09 Sep 2025 11:01:36 +0000
Manifest next update: Wed 10 Sep 2025 11:01:36 +0000
Files and hashes: 1: 65OBtTjCvSppmw7kLz43nf5_Bv0.roa (hash: gdoaQ1Q9gp77JEHF6QFUxphPMS2cWPxD6n6ohLQUaSY=)
2: 7KVtKRza7VDnZMrMe02kpGBrUpg.roa (hash: eDnVdL3nLyal8dEfu0dA+KtEtGPaNa6zd/fLOYxM2vg=)
3: IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl (hash: nlo8qAglv9BvX23wvj9FCWsS81b5/oXJHu0sUTdHARA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:23:69:95:e3:5e:4c:20:00:68:79:29:68:32:0f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Validity
Not Before: Sep 9 11:01:36 2025 GMT
Not After : Sep 10 11:01:36 2025 GMT
Subject: CN=a421fd18f4040d42bef2dd7bbd02dbfc4fbd25e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7b:7f:d5:17:c4:b6:18:2b:64:c6:61:a8:57:
4e:75:51:b2:60:3d:d7:41:3b:7b:b7:1e:7a:ee:e5:
43:4a:b9:a4:49:04:dd:20:20:a6:58:4c:9d:6c:cd:
35:da:aa:68:32:6e:24:2e:49:39:69:10:e1:fa:96:
db:a1:0b:09:15:8d:3e:4d:ea:ef:f1:d5:1c:49:bb:
c0:1b:d5:54:ed:de:f4:7c:08:d2:ef:8a:10:a3:73:
b4:fe:2d:02:10:c5:92:0d:43:0b:e5:b1:57:ab:2e:
2a:8b:8a:d2:71:6b:de:71:58:0c:46:e1:a1:fb:6e:
d7:60:3b:7d:fa:e0:4e:85:d9:61:ec:5e:bd:c0:8d:
75:44:6d:e9:44:2f:30:d9:30:6d:32:e9:07:e2:54:
1a:3d:7d:58:8f:06:5e:52:be:61:06:da:15:0a:31:
7c:15:52:51:4c:47:98:e8:d0:f5:f3:91:14:7c:6a:
93:6c:2f:4b:73:f7:d0:f4:df:a6:35:16:ed:2f:1a:
3a:ca:4b:69:4e:a3:4d:31:87:e3:9a:88:17:21:fa:
a7:9b:db:74:35:1f:95:25:d5:39:ec:d5:a8:38:c8:
f4:7a:aa:ed:df:68:22:37:5a:3c:4a:1d:cb:79:71:
c0:b6:5b:cd:77:f0:33:e9:fc:34:78:60:a1:62:bc:
c3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:21:FD:18:F4:04:0D:42:BE:F2:DD:7B:BD:02:DB:FC:4F:BD:25:E5
X509v3 Authority Key Identifier:
keyid:21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:6b:c8:7b:7c:53:59:b3:4d:28:cf:ad:2c:fc:77:4f:71:8a:
01:91:d7:e4:af:9f:bf:87:00:da:43:26:8b:ad:36:0b:2a:02:
7a:a1:49:af:23:de:0d:87:02:64:cb:f0:3b:a5:33:f8:a5:77:
64:aa:e2:48:9b:23:d1:f9:89:f4:78:1a:1b:f8:dd:2a:e0:ad:
a6:80:16:83:81:1f:1e:ac:34:57:3c:e9:44:5f:e3:78:d1:4b:
b7:44:80:11:36:c9:54:24:70:56:9c:6c:42:35:66:c7:53:98:
50:d9:94:3b:e1:da:14:e7:09:f1:10:a0:d9:8c:43:ba:0d:58:
61:92:57:e5:bc:1a:07:8a:35:d6:6a:da:2c:60:99:be:87:b2:
8b:ed:72:2d:8d:d6:7f:a8:31:07:5c:f6:0a:7e:df:0a:25:90:
1e:6e:f0:54:1c:90:80:3f:6c:bb:bd:70:b3:ed:26:df:69:76:
ef:46:f1:4e:55:0e:d7:e7:b4:ea:f9:31:db:df:c2:40:c2:87:
f7:72:ea:e8:64:6d:40:a4:1d:3e:40:8a:4e:f6:d6:19:1d:6b:
e1:15:1c:66:3d:fa:24:e4:9a:c8:51:18:54:ee:95:c0:32:4d:
76:f7:ad:ef:d3:4e:4c:8a:3a:28:43:1c:7d:f8:1c:88:de:d0:
71:25:75:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 16:35:00 2025 by rpki-client