Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
File: iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft (raw, json)
Hash identifier: OV8RMdZdbT8YksMVkLRE96Io37MMLTPuX2YuA4XYd00=
Subject key identifier: 46:69:1F:C0:7C:F1:8B:8E:89:C5:68:40:87:CA:05:18:E0:A6:AF:E8
Authority key identifier: 89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
Certificate issuer: /CN=8916aaa5d252fd90145fedac683762d6e2074155
Certificate serial: 019888B2A216B184D5C4BB028F70797EAE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 08:01:04 +0000
Manifest this update: Fri 08 Aug 2025 08:01:04 +0000
Manifest next update: Sat 09 Aug 2025 08:01:04 +0000
Files and hashes: 1: EJO9ljE1s0Q84FuNpxDY98O5gUs.roa (hash: MidhZCUKLP8FjCtsor/fdefcfGoS6d1va0RAyvBU+x4=)
2: iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl (hash: QmU6Xg7wMxYchg75hMhWyhQQnZXxo7T6CxmtxUWymNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:b2:a2:16:b1:84:d5:c4:bb:02:8f:70:79:7e:ae:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8916aaa5d252fd90145fedac683762d6e2074155
Validity
Not Before: Aug 8 08:01:04 2025 GMT
Not After : Aug 9 08:01:04 2025 GMT
Subject: CN=46691fc07cf18b8e89c5684087ca0518e0a6afe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4f:95:fb:24:b6:c5:f6:2d:94:12:a7:d4:5d:
b3:f2:de:36:04:94:b9:f9:17:67:8c:6b:e9:bd:c4:
97:99:d0:dd:4d:ea:5e:fb:40:e2:63:21:44:6e:da:
dc:82:9c:eb:51:cb:1c:42:2f:f2:e1:6c:1d:21:dc:
7a:2d:f6:2e:bb:ce:0b:e7:f1:96:42:77:5b:b1:5b:
f9:d8:17:40:ab:b3:bb:8e:3e:d6:70:55:3b:a4:de:
55:fe:27:43:f9:c4:2a:b1:13:d4:36:98:11:23:a4:
65:76:24:3d:d9:93:5b:ba:74:d0:2e:e7:d2:f1:fb:
18:73:54:32:80:63:d2:e7:0e:63:df:ef:18:39:81:
a0:0e:05:ed:87:a5:d8:41:5e:ae:65:6a:ec:4d:9c:
39:a1:74:f7:d3:63:8d:26:a0:cd:63:86:e5:3e:d9:
c7:7a:76:95:1c:ae:ff:5c:5d:f3:8c:18:37:e9:79:
6c:32:06:82:0a:e1:e9:d2:2d:12:da:b7:f6:f0:67:
8c:92:8c:b4:ef:0c:74:99:db:fb:b0:12:55:cc:94:
de:9b:68:e8:26:ca:11:09:9a:eb:b8:5d:1f:9b:6b:
65:c9:92:0e:4d:04:ce:4c:9b:fa:07:16:06:24:71:
65:37:5f:69:4c:ab:bd:b7:80:d2:b7:f1:71:4c:c9:
cf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:69:1F:C0:7C:F1:8B:8E:89:C5:68:40:87:CA:05:18:E0:A6:AF:E8
X509v3 Authority Key Identifier:
keyid:89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8a:ab:a9:8d:59:15:71:3b:57:cb:3f:61:b5:18:23:1e:19:
a9:5d:fb:b8:81:aa:fd:39:22:72:a6:5f:fe:c7:55:61:07:2b:
36:60:b0:96:1b:84:14:90:b1:8b:4e:89:aa:92:db:b1:7f:42:
91:b3:80:d2:63:93:de:5b:25:69:86:76:0f:54:81:0c:82:72:
43:4c:cc:81:e2:fa:a8:79:83:cc:d8:50:89:2b:57:ef:c9:8b:
0a:62:d9:30:53:61:88:be:c2:95:af:c1:fa:24:53:6d:40:df:
a0:1e:2d:6d:5e:a3:3a:04:ce:a8:52:97:ea:ba:df:89:a2:c0:
5d:65:79:a5:f3:85:46:54:d0:cf:ab:14:8f:8c:e4:a1:d8:0c:
6c:59:18:91:a0:6c:c2:86:a6:c2:64:cb:8c:0e:40:7e:11:7a:
00:12:73:b2:a1:db:68:c3:60:90:94:b8:6e:e0:9e:46:f6:fa:
5d:60:8f:7d:ae:e2:0f:7a:03:33:0c:a2:ce:34:d2:f8:1a:24:
ef:9a:77:c7:bc:85:67:32:f3:cd:bc:a2:00:43:52:13:8e:69:
77:11:36:9f:3e:b8:07:b8:54:e3:ba:00:c3:75:10:0d:26:d4:
57:34:18:3f:98:6c:dc:0d:6c:8f:51:5c:a5:d2:0d:73:c7:35:
af:d1:79:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:48:34 2025 by rpki-client