Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft
File: iPhM2j8rn5Z9noqEhdmeaht_fG4.mft (raw, json)
Hash identifier: hcNac+gf38SKKjXyA9QFEZ/vhyR7Ah68oCOGnF+Wj0s=
Subject key identifier: B9:18:AA:34:EF:6B:91:C8:19:50:FC:D7:C7:74:A0:03:D9:C8:21:AC
Authority key identifier: 88:F8:4C:DA:3F:2B:9F:96:7D:9E:8A:84:85:D9:9E:6A:1B:7F:7C:6E
Certificate issuer: /CN=88f84cda3f2b9f967d9e8a8485d99e6a1b7f7c6e
Certificate serial: 019873E1F9A414DB6CAA899BB4F94D4247B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft
Manifest number: 02FD
Signing time: Mon 04 Aug 2025 07:00:45 +0000
Manifest this update: Mon 04 Aug 2025 07:00:45 +0000
Manifest next update: Tue 05 Aug 2025 07:00:45 +0000
Files and hashes: 1: iPhM2j8rn5Z9noqEhdmeaht_fG4.crl (hash: 9KKYnjMBqWaEJKm8UOgozPr+fv+mksPz42M0ry7XXEM=)
2: txmFyUOnE8z2a-lXpSSWeNlZGdM.roa (hash: tHzEEY6u+Izo5THIfW02uc7TbpIzTWXGA5LdSe/FigM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:f9:a4:14:db:6c:aa:89:9b:b4:f9:4d:42:47:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f84cda3f2b9f967d9e8a8485d99e6a1b7f7c6e
Validity
Not Before: Aug 4 07:00:45 2025 GMT
Not After : Aug 5 07:00:45 2025 GMT
Subject: CN=b918aa34ef6b91c81950fcd7c774a003d9c821ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:48:68:b0:8e:56:b9:53:67:9f:c3:c3:66:3c:
53:f9:94:cc:23:7e:99:94:72:fb:ee:9c:32:83:07:
cb:d5:de:a2:89:72:6c:8f:a9:a3:ee:c8:d1:d4:48:
41:39:e8:dc:97:5f:b2:7b:c8:d3:15:00:6b:46:56:
05:38:c6:7d:0a:e3:ce:64:c3:2d:db:36:91:18:7f:
e1:5b:a8:c0:33:7e:a3:10:4f:d5:ac:a5:2b:dd:95:
e4:b6:13:55:45:35:ee:54:15:30:5d:1f:51:75:25:
fb:7f:8a:61:e0:15:5a:89:49:1d:8d:b8:48:58:53:
28:9d:93:e7:4e:e1:21:80:be:e9:43:f2:ab:88:1b:
b5:8d:e3:17:64:52:8f:79:62:78:80:c1:d8:20:00:
d2:cf:bc:9f:dc:a9:48:28:45:18:c6:79:ab:8b:e8:
f5:81:a6:42:1c:6b:bd:60:3a:b3:54:cb:24:44:a3:
e8:2a:6e:e4:4c:c3:0c:5c:d3:6b:4f:af:34:dd:53:
09:11:80:db:d5:31:2a:1d:9e:51:61:e8:04:bd:bd:
b3:e6:fb:94:bf:40:e8:47:88:95:85:a3:10:95:b2:
5c:4f:f7:05:f7:ce:73:53:1c:26:aa:7d:bd:0d:45:
80:92:24:64:c9:54:02:1c:70:13:6f:52:c8:16:5e:
61:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:18:AA:34:EF:6B:91:C8:19:50:FC:D7:C7:74:A0:03:D9:C8:21:AC
X509v3 Authority Key Identifier:
keyid:88:F8:4C:DA:3F:2B:9F:96:7D:9E:8A:84:85:D9:9E:6A:1B:7F:7C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ae:e8:be:55:a5:6c:2c:3a:ad:1a:21:70:08:8e:18:76:38:
40:6e:47:d9:1b:3a:fb:d2:d3:fa:7b:0c:e5:cd:86:10:58:0d:
86:58:4d:d2:4e:e1:b0:71:99:3c:20:90:e6:62:94:77:79:bc:
ee:6b:c7:eb:fb:fa:6d:f4:17:92:c8:4b:80:1e:d8:6f:ea:73:
54:f0:0b:cc:99:f3:26:ca:da:9e:e1:93:94:53:bc:87:49:45:
78:e9:8f:84:b1:1b:f1:57:54:75:71:d8:46:e9:d5:fc:39:e4:
61:35:36:f1:26:24:2e:c9:43:e9:d6:b9:96:4e:fc:8c:90:17:
d1:3e:0f:4e:44:0b:e1:f5:b5:d1:a0:79:32:fb:30:f8:4b:04:
e3:53:6f:0f:68:a5:9f:ef:8d:68:e2:a9:b3:cf:ba:ae:d7:e2:
e9:f1:db:f0:6f:07:87:b7:72:2d:db:2b:b0:2f:3a:86:35:51:
df:84:7a:b6:a6:9e:6c:b7:94:a1:f6:ed:4b:e0:05:3e:a8:6e:
c5:1b:1a:3d:b5:0a:ad:b4:03:49:e2:0e:82:a6:42:44:d8:d3:
5c:dc:69:2a:16:ad:58:b6:8e:f8:66:b8:a2:0f:58:d0:f7:81:
94:6d:af:7e:23:cd:dd:16:47:47:8c:67:f1:53:e4:74:77:c8:
2c:ea:ad:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:25 2025 by rpki-client