Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
File: ip_Szd9LRN55pb_Iyhmlb1UutOg.mft (raw, json)
Hash identifier: vOvb456+WOfO+3Eso+ihsSLb9D4NJokFW02BHkAKnR8=
Subject key identifier: AC:8F:C2:13:D0:C2:78:8A:1D:B7:33:72:DC:AB:08:BE:29:4C:B4:47
Authority key identifier: 8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8
Certificate issuer: /CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8
Certificate serial: 01989712B52D5FA9DF1657CE4A16020A318B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
Manifest number: 02C4
Signing time: Mon 11 Aug 2025 03:00:42 +0000
Manifest this update: Mon 11 Aug 2025 03:00:42 +0000
Manifest next update: Tue 12 Aug 2025 03:00:42 +0000
Files and hashes: 1: EjHQSd2Nf6QUdVOjBa5Ak5N3IUs.roa (hash: 9F79YDrAyrZr3jGxVCvlmn8UnHKM3CvRjuESh5xZJzI=)
2: ip_Szd9LRN55pb_Iyhmlb1UutOg.crl (hash: 9nxMNjW++ybREEmklTolgD7OrQoRyRT/FqxI8CPQgsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:b5:2d:5f:a9:df:16:57:ce:4a:16:02:0a:31:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9fd2cddf4b44de79a5bfc8ca19a56f552eb4e8
Validity
Not Before: Aug 11 03:00:42 2025 GMT
Not After : Aug 12 03:00:42 2025 GMT
Subject: CN=ac8fc213d0c2788a1db73372dcab08be294cb447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:52:7e:7e:6c:de:c4:68:4f:06:3e:7c:c0:01:
66:b3:02:d5:b3:9c:97:61:6f:5a:c0:67:68:c6:82:
34:64:88:e9:95:e8:82:45:23:a5:74:42:3f:f9:7c:
19:b0:dd:e3:1f:20:4d:49:db:cc:9e:90:48:7d:47:
16:d6:09:49:e6:e5:fe:4a:6e:a5:35:f0:1a:9d:72:
76:63:60:01:95:8e:74:e3:3c:e2:0f:11:ff:15:c5:
25:c7:90:c1:01:3f:c5:34:5b:f2:0b:5c:8a:42:28:
1d:79:75:e2:64:fd:a3:3a:44:2c:cc:bd:a0:32:95:
4a:73:33:4d:f3:2a:11:e6:9a:f1:cf:d8:da:cd:63:
6e:ac:48:49:ca:19:08:4b:5b:b8:49:f8:42:62:af:
b8:b5:9a:3d:3d:1c:75:61:0a:7d:79:d5:68:93:49:
cb:6d:3d:2d:74:1b:ac:be:86:dd:8b:e8:98:aa:43:
68:87:76:41:74:d9:91:a7:6e:32:66:f6:15:c9:bc:
88:8e:74:65:fa:d4:6a:8b:7b:12:b6:af:aa:4e:fb:
61:cc:de:97:c5:ce:e7:76:85:81:d2:43:ec:4e:bf:
ff:93:cc:2c:55:96:db:95:76:78:25:36:17:55:22:
57:42:e7:fa:14:7a:aa:ab:7a:f4:b0:55:dc:95:cd:
69:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:8F:C2:13:D0:C2:78:8A:1D:B7:33:72:DC:AB:08:BE:29:4C:B4:47
X509v3 Authority Key Identifier:
keyid:8A:9F:D2:CD:DF:4B:44:DE:79:A5:BF:C8:CA:19:A5:6F:55:2E:B4:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ip_Szd9LRN55pb_Iyhmlb1UutOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/985867-d6c9-4db0-b808-44ef5674fe30/1/ip_Szd9LRN55pb_Iyhmlb1UutOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:93:ec:7b:37:43:43:f8:f9:f8:a2:28:7b:eb:1e:1e:00:a6:
17:9d:ec:b8:2e:34:e3:0b:88:19:d4:04:de:80:55:31:b0:ce:
39:c6:b0:ce:36:77:1f:35:80:de:1f:71:a3:12:7f:22:1f:8b:
e7:6e:51:8f:9d:8c:ff:e5:13:5e:81:73:f2:23:e6:dd:b4:02:
c5:bd:b8:dd:a0:c0:6d:4d:f4:7d:0b:30:3e:04:da:34:c2:e7:
ad:32:d6:37:ed:74:e7:2d:41:70:c2:eb:3e:6c:07:f1:32:d9:
f3:68:50:9c:4a:a4:fd:72:12:a2:ba:1b:9d:1f:b4:8a:fb:c4:
e7:39:d8:7b:6f:be:c1:b0:4f:b1:fb:26:1e:24:d7:ef:52:f6:
7d:4b:b5:73:be:18:51:da:22:b5:06:a9:69:b8:9b:a5:51:6c:
75:fa:6f:1b:95:77:76:5a:74:e5:42:d0:34:fb:ea:82:b9:d9:
5f:5e:94:94:ca:64:84:88:7a:ad:77:34:fd:a6:ea:81:43:79:
8c:dc:99:f1:d9:0a:ce:94:77:80:a3:f4:55:91:30:00:ee:59:
3f:e7:14:b2:c3:71:e5:c0:93:bb:9e:c6:a3:71:8a:fc:e9:0e:
5e:1c:66:f3:e0:0f:25:c8:44:54:93:97:d3:2f:67:7d:ba:0e:
61:34:a0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:57:06 2025 by rpki-client