Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
File: i3P4NzXIqxCgqNROFwEo8COEbnk.mft (raw, json)
Hash identifier: JISJ6nOYaFp0PeayJVEUU4REVebDGpKnyF1X8Exed+I=
Subject key identifier: 5F:A7:1C:CD:86:E3:CB:1F:E5:D8:D5:9F:FF:7F:21:BA:A6:F4:CE:EE
Authority key identifier: 8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
Certificate issuer: /CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Certificate serial: 01988C8F4BF7ADEF54DFF9CB4A7350940F0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
Manifest number: 04E7
Signing time: Sat 09 Aug 2025 02:00:58 +0000
Manifest this update: Sat 09 Aug 2025 02:00:58 +0000
Manifest next update: Sun 10 Aug 2025 02:00:58 +0000
Files and hashes: 1: L3ocwI9skWdmpza9Qr_soDnI5iA.roa (hash: 9lUp3ywFYQ08BYq4aJkqYCgUsr8TmtCB3L7KRcDWSOM=)
2: i3P4NzXIqxCgqNROFwEo8COEbnk.crl (hash: wILg1i6d6de/J/2GhV/8BHcIW9rv1xgvVXnGEiBWq1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:4b:f7:ad:ef:54:df:f9:cb:4a:73:50:94:0f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Validity
Not Before: Aug 9 02:00:58 2025 GMT
Not After : Aug 10 02:00:58 2025 GMT
Subject: CN=5fa71ccd86e3cb1fe5d8d59fff7f21baa6f4ceee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2b:fc:74:53:3b:05:a6:33:4b:8b:65:0e:d1:
3b:ff:11:5c:39:33:d8:51:42:af:39:5a:1e:8d:60:
f5:a7:e2:d7:0e:bd:92:d9:1a:c0:2f:30:4c:b8:2e:
27:2a:e0:17:98:0d:99:e9:2d:99:fb:34:a9:9e:a2:
88:25:45:98:4b:a4:21:a0:b6:2f:42:b6:2e:59:73:
9a:f0:d7:06:08:5a:08:9f:94:cf:e5:97:f9:f8:b2:
f9:4d:72:5c:3f:59:21:4c:5a:06:63:0c:11:ca:08:
c4:6d:43:d6:30:7f:e6:b0:7d:24:1b:3f:ef:b2:be:
7d:5c:57:35:08:e8:ff:01:6b:42:ff:4f:cc:3d:2d:
15:e9:f2:51:c8:d4:d4:16:10:5b:83:21:cb:bf:4e:
85:a9:97:e2:9a:bc:84:1b:56:59:46:ca:c0:f1:13:
29:e0:ad:bc:37:bf:e8:11:a2:00:cf:f4:0c:c7:5f:
71:f7:65:a3:5b:09:17:87:a6:17:7a:a6:5f:98:81:
9c:61:ed:59:d3:e5:aa:e5:0c:6d:5c:8e:27:36:cf:
f9:18:eb:0d:3c:7b:e5:2c:31:02:e6:4b:d3:04:d3:
0b:5c:c3:ed:96:86:4a:8b:d9:1c:9b:e9:61:c7:38:
06:09:ca:12:fe:8a:08:6f:ed:c4:66:1b:35:49:bf:
5e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A7:1C:CD:86:E3:CB:1F:E5:D8:D5:9F:FF:7F:21:BA:A6:F4:CE:EE
X509v3 Authority Key Identifier:
keyid:8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c2:d3:6e:50:7f:9e:77:fc:32:c3:b5:b9:bd:fa:5b:86:94:
9a:d3:c3:b6:e7:ca:8c:58:b2:65:9e:19:50:c8:27:52:bc:1b:
1a:5b:f7:35:13:af:f0:ea:06:4b:7b:f7:94:c8:e9:12:c1:02:
ef:fd:16:ce:9b:6b:21:9c:a7:15:49:a8:40:1b:e3:59:f5:d5:
e8:d8:ed:30:c0:17:34:bb:a4:8d:28:50:0b:34:d5:50:45:9b:
ba:2a:63:db:b5:a0:4e:a9:d1:25:7e:26:17:88:6b:a4:8b:80:
a6:58:f1:82:ef:8e:a1:a5:d8:ec:58:7c:17:62:c9:c4:a7:2d:
fe:72:10:70:e7:ea:27:aa:5e:88:2a:a8:5a:bb:0d:96:e9:f9:
a7:03:e2:e3:41:e0:fa:d2:99:71:34:06:9a:ab:0d:ae:0e:31:
19:ec:4c:3b:69:0a:aa:ea:20:5f:5a:b8:33:a5:2c:7b:e8:13:
a2:26:34:d1:c5:a7:4e:96:94:91:fe:ad:a2:cb:ee:91:ee:92:
0d:7e:39:5d:2b:1f:a4:61:7f:b9:d0:34:ba:ea:8a:57:41:d0:
70:fa:cc:87:74:89:8b:43:85:85:5b:cb:41:fb:c8:7a:82:15:
9d:33:6d:b9:17:5d:2e:e0:83:fc:83:33:82:9c:65:01:60:a2:
08:4e:d8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:35 2025 by rpki-client