
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
File: iuE5rwiZ9da1syWBNz7aMDfqMMA.mft (raw, json)
Hash identifier: UkAnJuIBti6oPytfnMYf0SRq+WROOxNDsAwpkIbmWGk=
Subject key identifier: 2F:2C:F5:F8:3B:4B:FC:EF:FF:A9:F4:A9:08:F9:B8:E9:30:24:8D:CF
Authority key identifier: 8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
Certificate issuer: /CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Certificate serial: 019885435A71E8D60A56A7A799D2B5F4B666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
Manifest number: 0CD7
Signing time: Thu 07 Aug 2025 16:00:40 +0000
Manifest this update: Thu 07 Aug 2025 16:00:40 +0000
Manifest next update: Fri 08 Aug 2025 16:00:40 +0000
Files and hashes: 1: NGjcJESkWKoe17DLj5CiFkjFkhs.roa (hash: GPilr/syUwSnDgvatxbmfR2uNG9m+2J2hRVuK9V/K4A=)
2: iuE5rwiZ9da1syWBNz7aMDfqMMA.crl (hash: u73S7r3JehivBxOcGXXdpntO9SbAKDrNbwyVJUhNrug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:43:5a:71:e8:d6:0a:56:a7:a7:99:d2:b5:f4:b6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Validity
Not Before: Aug 7 16:00:40 2025 GMT
Not After : Aug 8 16:00:40 2025 GMT
Subject: CN=2f2cf5f83b4bfcefffa9f4a908f9b8e930248dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:df:0c:50:c6:9a:e3:c3:46:3c:2c:61:97:71:
06:5c:93:75:55:8a:81:a8:69:af:cb:20:84:6d:4f:
2b:80:39:45:17:74:ce:bc:40:98:ed:a5:83:8c:21:
bb:2b:fb:d2:ab:5b:2d:49:7c:f7:5a:bb:4a:5c:35:
ee:cc:de:0f:f4:e5:b0:8b:33:33:ba:0d:3a:65:a8:
21:89:a3:94:b2:15:02:8e:eb:c4:a3:6f:10:fb:b8:
f7:b2:51:c1:b9:d8:de:32:44:1c:de:16:cd:1f:f9:
02:00:d1:aa:ce:f7:b9:b8:ca:45:98:70:8d:e2:15:
8a:62:f2:37:7a:c2:b5:f6:ee:e8:c6:10:3f:a7:6a:
98:ed:19:46:ff:dc:ae:6b:65:00:98:c1:62:e0:46:
2d:85:33:92:20:8b:7d:67:3a:53:d4:f3:27:b8:5f:
ad:cf:7e:51:a1:82:d1:23:d3:33:99:18:9a:80:57:
49:4c:97:4e:51:a5:21:67:1c:ea:a7:bd:e0:b2:68:
ba:aa:cc:18:9e:87:95:92:f0:c1:f3:42:f9:fa:a3:
69:75:6a:ac:45:e7:43:7d:98:6d:ce:da:ce:6d:22:
84:e3:a9:5e:58:ed:c6:4b:f3:c9:29:f1:b2:eb:16:
7c:88:34:7d:45:bb:71:97:ba:1c:b8:98:d2:ab:42:
4d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2C:F5:F8:3B:4B:FC:EF:FF:A9:F4:A9:08:F9:B8:E9:30:24:8D:CF
X509v3 Authority Key Identifier:
keyid:8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:15:91:1e:7b:25:3f:72:6a:86:f7:3f:e6:bc:45:75:d1:76:
e4:7d:08:f4:c6:27:a1:59:45:ff:89:bd:21:23:91:f2:a0:40:
e2:d5:31:4f:ed:be:ff:fd:3b:5e:8f:47:3c:4f:4b:64:bc:72:
0d:ba:df:7a:b5:e7:6d:11:d0:1d:37:d1:d5:57:dd:f2:30:92:
93:c2:ae:d2:5d:7e:5d:8b:4c:69:51:ec:67:3b:91:f2:85:1f:
8b:89:fc:17:f8:1f:2a:51:9d:c1:ea:03:f6:18:19:82:73:2f:
fe:f0:ad:d0:f7:c3:3b:4c:26:3f:a2:8d:0a:44:6c:a6:3f:e1:
a6:07:ae:29:25:87:c8:11:4a:2d:f6:9d:95:c5:18:ae:8e:39:
12:5a:0f:51:9d:a6:75:7d:56:a3:5f:fa:81:cf:e1:2d:b9:65:
cd:d2:30:15:c8:d2:d5:ab:f2:67:d6:a6:0c:4e:42:90:79:c0:
e7:e1:d6:58:4a:45:24:f5:28:b0:63:64:e4:43:03:48:1c:1b:
0a:31:1c:b1:16:38:4c:ca:22:c6:d6:9b:19:ac:bd:9c:25:b9:
92:50:1f:17:c5:e1:bd:87:18:f3:bf:25:7c:a4:ec:6a:cd:83:
b6:e5:15:0e:1b:e8:d8:37:a7:32:be:8e:a8:0d:fa:45:fa:e0:
55:c5:82:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:46:55 2025 by rpki-client