Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
File: iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft (raw, json)
Hash identifier: Nf3ixZ5ABbvggaeSjf3qACPy1VLJlCD/7jZj3YyWYDw=
Subject key identifier: 93:87:D1:E8:42:B0:67:77:50:12:95:86:99:16:A8:92:BF:98:9A:67
Authority key identifier: 89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
Certificate issuer: /CN=893a58124ce9cc43783955255e7f583905cdb14e
Certificate serial: 0198971316BCA52516861BC5D0FAAEEDD8C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
Manifest number: 0E92
Signing time: Mon 11 Aug 2025 03:01:07 +0000
Manifest this update: Mon 11 Aug 2025 03:01:07 +0000
Manifest next update: Tue 12 Aug 2025 03:01:07 +0000
Files and hashes: 1: iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl (hash: NTc86EyroId9+6Qg6KGhiQYJnQArSLH8JMScjqosPX4=)
2: t9nkji_Xq4DRGMttbRDw-jVfqPI.roa (hash: MJaMfbYXB+V545skyyIWbRiW1FYp9UFjL+ooREdIKpc=)
3: x3UpgxINfYGtKCtOQQ8nTKqnfYQ.roa (hash: bx0oE168u4Tmbz20f8oi8B9aCfZBYtjemV0iReEb4PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:16:bc:a5:25:16:86:1b:c5:d0:fa:ae:ed:d8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893a58124ce9cc43783955255e7f583905cdb14e
Validity
Not Before: Aug 11 03:01:07 2025 GMT
Not After : Aug 12 03:01:07 2025 GMT
Subject: CN=9387d1e842b06777501295869916a892bf989a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:97:57:ad:6d:f3:b2:0f:f8:db:75:43:40:c2:
9b:79:0e:99:34:6e:15:9c:77:0f:2f:f5:00:5e:2d:
a6:79:c0:e8:c7:a7:08:89:01:fa:3b:41:92:2a:6e:
9a:9f:a8:30:36:08:df:87:d2:fa:0b:d3:6b:48:1a:
aa:93:2a:94:ad:80:2f:91:a1:18:09:a6:fe:09:63:
7f:30:dd:33:69:cd:c7:87:01:2d:20:35:88:45:85:
53:ee:c3:f1:cb:7c:0f:4b:68:ee:58:f5:cd:f5:c8:
8b:4c:8f:06:43:a3:ab:4e:b8:49:9e:6c:cd:a2:21:
7c:81:2e:be:b4:45:b8:e4:9e:09:03:13:78:01:25:
d9:65:d3:76:17:f1:5b:ec:49:11:f1:1c:5f:af:33:
f1:70:ca:d3:e6:e1:15:74:37:b4:17:e3:fc:7c:02:
2d:ac:f0:77:e5:d8:a9:1e:00:9e:64:56:a5:c6:8d:
f2:9f:60:f7:9c:8b:ca:08:e4:ec:24:ba:a6:8c:0a:
6b:e4:3e:54:bc:69:30:34:8d:28:ac:8a:4e:2a:18:
44:db:02:07:4a:86:a8:3f:a5:2b:71:94:77:80:b3:
5f:03:32:59:e9:29:ee:22:17:5d:a9:bd:92:0b:ac:
8e:df:c3:b3:a1:56:d2:8f:f4:1e:70:2e:1f:2e:cd:
75:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:87:D1:E8:42:B0:67:77:50:12:95:86:99:16:A8:92:BF:98:9A:67
X509v3 Authority Key Identifier:
keyid:89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:0c:18:79:1b:be:0a:bb:8b:5f:c0:74:1d:0d:e1:b0:64:1e:
cc:42:54:df:49:22:98:c1:f4:4c:69:0d:54:44:20:61:3d:66:
bc:0c:e3:f0:d4:82:5a:a4:0d:94:2b:e0:85:b6:2f:2c:87:d0:
85:39:9d:72:32:ac:ff:d6:ef:60:bf:0c:70:89:47:8e:b1:a2:
3f:8e:f3:97:d8:c0:e2:ed:e7:93:9f:f9:2d:e9:b4:44:29:85:
c3:4e:b3:de:f4:5a:4a:9b:1f:8b:ad:a2:aa:e4:4f:9a:35:c3:
4f:ef:22:0a:b1:a9:cd:21:eb:75:63:57:e9:32:de:3d:41:8e:
c6:e1:bb:6f:9c:9c:8e:bb:cb:86:ca:f6:e1:64:0a:ce:94:5e:
d1:28:88:25:4c:b2:a2:bf:7b:d7:21:8c:5c:17:96:05:44:39:
35:57:e1:02:f5:7c:ed:0a:50:4b:08:8b:bc:c9:62:e5:37:f6:
8f:df:0e:8d:c6:33:5b:2a:25:26:5b:cf:16:73:41:77:c6:95:
c4:dc:3f:e0:f9:12:86:60:79:ff:20:ee:fd:e0:d0:7e:78:7e:
8a:5a:7b:63:c9:54:85:69:9d:69:95:6c:ab:4a:97:9e:34:8c:
3b:1b:19:00:8d:7f:7a:bf:cf:9b:9d:82:be:dd:25:2d:5e:a9:
d7:85:78:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:27:00 2025 by rpki-client