Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
File: IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft (raw, json)
Hash identifier: RQv9p1pVZYUIe6YjEoc4ruwnNoMzFfmE61NI8cbOtq8=
Subject key identifier: ED:79:77:27:1B:30:B0:D8:55:B6:0A:F2:99:BF:6E:87:7E:F6:8F:0C
Authority key identifier: 20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57
Certificate issuer: /CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757
Certificate serial: 019921E7EDE7F06E105ACA9B4B76D3E475E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 02:01:11 +0000
Manifest this update: Sun 07 Sep 2025 02:01:11 +0000
Manifest next update: Mon 08 Sep 2025 02:01:11 +0000
Files and hashes: 1: EoTaeWkOJz05rIXfnxtfbquyeqw.roa (hash: YVkUO2wCaslx/q3WOT6glv2Y26dcalE699S2nCt2534=)
2: IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl (hash: Cm/Bw3Gw12NOi50iCTjkLIlXIRWbeNPICk3YnSlJI6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:ed:e7:f0:6e:10:5a:ca:9b:4b:76:d3:e4:75:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757
Validity
Not Before: Sep 7 02:01:11 2025 GMT
Not After : Sep 8 02:01:11 2025 GMT
Subject: CN=ed7977271b30b0d855b60af299bf6e877ef68f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:f6:1c:f8:4f:d9:94:72:79:f7:1b:d4:f0:
88:49:17:bd:60:6e:9f:74:00:90:7f:03:0c:1c:f3:
a5:66:19:c1:8b:bf:9b:e9:19:81:72:f5:a1:9b:57:
5f:12:74:4a:0c:cf:e3:33:c0:8c:d6:45:43:20:3f:
d0:4e:e7:6f:0f:1e:04:0b:78:2c:9c:16:f3:d4:60:
e8:19:cd:c5:83:6b:a3:c3:31:cc:de:d3:69:b1:4b:
cc:f3:77:ba:3d:90:4e:83:78:bc:9c:c5:fe:3a:6f:
46:e3:78:4b:13:94:20:fe:8b:78:97:38:a6:25:85:
27:72:2b:13:17:6f:f0:29:58:56:13:4e:71:82:1a:
84:6f:0c:cb:31:56:77:7a:d7:dc:d8:62:4e:6c:b3:
a6:b4:5c:e8:1f:f3:2c:db:fe:47:19:70:9a:14:5a:
84:49:16:46:33:cf:7a:35:88:3b:df:0c:49:23:4f:
ad:0f:82:7e:28:56:87:6a:8c:69:79:ac:e2:22:3a:
cf:bb:69:38:b5:40:c7:e7:7a:1f:e5:59:5e:8e:ac:
b0:90:af:9b:14:4b:c5:cd:7c:85:cb:9a:9f:87:60:
2e:53:77:b5:75:e9:e2:b2:de:e1:e1:22:b0:4b:ec:
27:b8:01:8a:8a:5b:f7:4b:fd:88:c1:8a:46:4c:e2:
9c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:79:77:27:1B:30:B0:D8:55:B6:0A:F2:99:BF:6E:87:7E:F6:8F:0C
X509v3 Authority Key Identifier:
keyid:20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:0e:fa:53:f0:f7:2e:fe:dc:2d:52:02:c0:cb:be:7c:98:69:
70:7e:1c:9e:f8:77:07:c2:31:f2:fc:da:e9:18:ca:5c:91:fb:
aa:3d:01:66:af:74:83:2b:15:20:d0:15:c3:23:1d:94:40:4a:
a2:c3:84:2f:23:f2:a9:7d:3c:65:32:c3:83:a0:f7:d6:52:ee:
0a:83:19:8d:0e:e1:6a:c5:e6:61:82:56:35:7e:04:db:6a:a5:
6c:7f:57:51:61:50:33:8c:68:1f:85:3f:f9:af:cc:21:8e:4d:
d5:a3:a5:e0:b4:84:cb:c4:2d:25:58:e2:28:b4:33:f5:8f:0e:
3a:06:dc:f5:71:c4:a7:86:9e:8f:8e:be:c3:bf:3f:17:5d:1e:
e0:dc:d8:0e:3d:88:a5:11:5a:7e:45:37:bd:78:89:45:91:61:
e9:11:1c:41:af:59:df:69:38:e0:fa:de:7f:c7:1c:8c:ce:c2:
23:59:dd:fa:dd:8b:ca:43:c3:c2:31:1c:ea:35:79:f2:3e:dd:
2d:b9:03:fb:61:f5:50:94:93:64:17:68:34:6f:cc:6a:18:c3:
c6:b2:25:e8:d2:37:91:7a:3e:ad:29:4c:a5:d9:3d:fd:63:32:
3f:8a:71:e3:97:40:c2:29:59:f8:3a:d0:04:29:17:5b:97:ff:
c4:b8:de:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:12 2025 by rpki-client