Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
File: IEmVw2J_eqzf4jkV5ELj05AGMa8.mft (raw, json)
Hash identifier: cXRG1R0vFpgfCxYH4mnKIs1w4Gx8kOSVn8vfzfc1wM8=
Subject key identifier: A2:01:25:86:B7:C6:17:CB:B6:98:4A:97:61:AC:C0:CC:13:52:15:F5
Authority key identifier: 20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF
Certificate issuer: /CN=204995c3627f7aacdfe23915e442e3d3900631af
Certificate serial: 0199228CC18A5C1DC3D5665ACFD680E82ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
Manifest number: 071F
Signing time: Sun 07 Sep 2025 05:01:13 +0000
Manifest this update: Sun 07 Sep 2025 05:01:13 +0000
Manifest next update: Mon 08 Sep 2025 05:01:13 +0000
Files and hashes: 1: 9-7PXLkycA5xYo3u8CzH5ezxMXA.roa (hash: LxSeuXbVik2u1NmfM2g79qr+/r9wrH4InvPIstg23Fs=)
2: IEmVw2J_eqzf4jkV5ELj05AGMa8.crl (hash: SeBrYIiCuNTHdU8H2+i1LnTrkShe84IZd9XYy0bm8gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:c1:8a:5c:1d:c3:d5:66:5a:cf:d6:80:e8:2a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204995c3627f7aacdfe23915e442e3d3900631af
Validity
Not Before: Sep 7 05:01:13 2025 GMT
Not After : Sep 8 05:01:13 2025 GMT
Subject: CN=a2012586b7c617cbb6984a9761acc0cc135215f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:c4:c5:25:9e:c9:3f:23:cb:b0:01:84:2a:
8e:4c:d0:14:5a:b3:11:08:59:84:a4:5f:6f:3e:bb:
2f:48:81:cc:55:fe:eb:d6:7b:b5:8d:43:2f:d6:f7:
f9:cd:7c:8f:6a:6a:bb:49:42:13:4c:ef:57:a4:b4:
55:1f:a3:c6:54:3d:c8:ef:36:62:c7:fb:9e:36:42:
78:0a:60:63:8d:d4:44:8f:8d:5c:d6:2b:e3:c3:4e:
47:61:10:79:86:78:43:6e:5e:36:6b:10:32:b5:80:
24:72:01:34:f5:b2:04:38:69:6b:bf:09:fb:ac:41:
f2:17:13:8f:57:70:a6:e5:f0:f1:fc:4d:54:89:49:
5b:62:dc:e6:c4:05:5a:24:ed:52:37:0e:27:0e:38:
d7:38:07:8e:ff:1a:df:a6:89:04:8f:98:3d:58:5c:
56:f3:63:e9:86:13:92:8b:9b:3d:f8:81:d2:c0:21:
a0:53:27:be:3e:1a:27:0c:87:02:97:0d:ff:b3:85:
0b:9f:02:fa:39:29:ca:8b:2b:92:bb:fc:ea:17:c7:
ce:77:5f:a4:8e:82:9a:58:14:23:ef:59:a7:5d:14:
b8:8a:54:fe:2d:72:88:5f:0d:0c:1c:7b:df:ee:a3:
11:fa:7d:b8:54:54:6f:c2:b5:48:16:fd:6d:ec:6d:
21:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:01:25:86:B7:C6:17:CB:B6:98:4A:97:61:AC:C0:CC:13:52:15:F5
X509v3 Authority Key Identifier:
keyid:20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c1:ea:78:41:6b:6b:7f:cd:c7:b5:67:5c:37:78:ef:14:c0:
ba:99:5b:02:94:e9:d1:e6:2c:21:e7:53:41:6e:79:89:55:4e:
43:dd:b0:7d:1f:5d:e5:28:8b:dc:c6:31:b0:06:4e:92:68:9f:
f7:12:36:6c:ac:16:40:b5:69:40:fb:66:da:85:2b:21:db:8c:
4a:ca:88:2c:fb:e4:e1:61:a8:43:34:a8:c1:ab:7b:8f:34:df:
8e:50:50:8f:7e:e8:57:2e:f9:e4:ce:d1:bd:8c:b9:45:77:bf:
26:cd:cb:8a:12:e4:09:b1:ad:ec:40:14:ac:16:0d:d5:24:44:
88:17:df:a0:73:0f:89:3f:05:f4:b7:d6:d2:47:53:c7:f7:32:
6e:26:ca:57:5d:97:bc:8a:0b:af:5e:6f:c1:00:5e:97:b7:1e:
97:1e:3f:d5:30:da:61:4d:6d:cd:d7:ca:15:21:8b:8e:59:58:
0b:fe:af:9c:bd:44:98:bb:90:d0:41:85:8c:01:8d:0d:94:b7:
1f:da:76:c7:70:72:a8:8e:c6:c9:85:21:74:41:90:7c:f9:ae:
f3:8d:85:34:3d:d3:b7:1a:82:36:fe:0d:d5:33:7b:56:fd:8d:
ea:b2:06:f0:38:b8:0c:8f:6b:2a:d9:d2:42:7a:fb:60:bb:a6:
0d:fe:8c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:05 2025 by rpki-client