
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
File: iiJ8Nfko2ci4_3wlch79R6kNy2c.mft (raw, json)
Hash identifier: zu4FZnxlZ9SS8ANqCOTxzyYqrWsP5ShDLGsxQdUYfoQ=
Subject key identifier: F5:29:04:44:E0:DE:AC:63:16:82:A7:E1:B0:36:B4:FC:05:7D:E6:3F
Authority key identifier: 8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67
Certificate issuer: /CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67
Certificate serial: 01987ED3B0F42FF2B3082872FA4EA34958E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
Manifest number: 1324
Signing time: Wed 06 Aug 2025 10:00:59 +0000
Manifest this update: Wed 06 Aug 2025 10:00:59 +0000
Manifest next update: Thu 07 Aug 2025 10:00:59 +0000
Files and hashes: 1: K7N-hRXidANMpYlZJ_rYSwLoLCk.roa (hash: tqDwe1a97FYihn4sdeIxy/I7wKkMHB8gK4badlQZXTs=)
2: iiJ8Nfko2ci4_3wlch79R6kNy2c.crl (hash: 4QF9/vPSjSztmwamcPZWuLHw8f1jPHJ3RimcfslIH/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:b0:f4:2f:f2:b3:08:28:72:fa:4e:a3:49:58:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67
Validity
Not Before: Aug 6 10:00:59 2025 GMT
Not After : Aug 7 10:00:59 2025 GMT
Subject: CN=f5290444e0deac631682a7e1b036b4fc057de63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4b:0f:3f:a2:3c:8d:a7:e3:59:dd:93:7c:01:
0c:2f:32:dd:af:ed:9e:aa:28:c1:21:f9:bf:c7:ea:
b2:24:64:83:16:23:89:fa:1e:18:56:1b:f2:c6:91:
88:91:83:cb:46:9c:78:dc:69:ed:fe:62:8e:87:f4:
92:6b:45:06:ba:9f:a7:6b:e9:77:35:3f:c0:ec:5c:
41:72:71:c6:45:1f:66:3c:7e:67:b8:d2:23:d3:ed:
ca:e2:48:36:67:f7:73:e9:bc:4a:00:a3:a8:cd:d5:
7d:db:49:9f:ab:a8:91:0b:06:54:24:d8:91:f4:27:
cc:b3:9c:dd:8c:fc:be:cd:fb:7f:df:2e:29:7a:6b:
e3:17:dd:9d:4d:da:ee:29:97:ac:95:85:be:af:cd:
2e:d4:a7:f3:d4:34:06:e3:1b:b4:d2:f8:44:95:34:
17:f0:4c:39:58:2c:44:b8:64:c3:fe:1f:e8:a1:94:
c5:63:be:91:c9:f4:ea:11:57:cd:cf:0d:1a:ed:34:
d2:13:bc:b5:b0:fd:94:28:77:35:7c:bc:94:1d:a2:
5b:9f:86:ff:93:81:fb:b9:69:d2:06:9a:69:06:cf:
26:60:94:2d:f5:90:00:80:5c:5d:b8:ab:4d:a8:16:
70:da:c1:a5:70:8a:84:8a:03:8b:33:e8:c6:49:57:
70:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:29:04:44:E0:DE:AC:63:16:82:A7:E1:B0:36:B4:FC:05:7D:E6:3F
X509v3 Authority Key Identifier:
keyid:8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1a:3e:37:89:b4:e2:b5:66:f3:a3:b2:4c:8e:40:a0:36:89:
88:53:30:62:e1:b6:b5:47:48:e1:89:36:f9:53:a9:ff:bc:93:
40:66:78:44:bc:d9:4b:ed:c6:4b:9d:67:a9:71:80:f9:89:e5:
ca:9c:1f:f1:1c:74:3e:fc:fd:67:40:72:fd:a3:98:e2:ca:2e:
5f:58:79:b3:63:7f:3a:66:3d:3b:0f:9f:ad:df:b1:69:b9:26:
18:f5:21:de:73:75:9a:11:2f:69:4d:3a:65:30:ee:9e:2c:8f:
1e:e8:dc:a8:ba:07:b7:a7:6f:d6:34:d5:ca:c0:13:62:0d:52:
12:1f:b6:89:42:87:5d:bc:b2:7d:03:7f:c2:f6:c3:31:4f:0e:
46:5b:6c:c4:a1:7f:70:f4:3d:71:25:fc:31:9f:4e:0c:70:32:
4b:96:59:db:1c:a2:6d:d1:a0:8b:df:7b:cf:4a:c2:f1:be:bc:
d6:4a:1f:44:86:ad:d9:35:03:b1:c2:05:43:ae:f4:76:dc:2a:
23:f5:70:17:ad:03:d0:27:f5:ce:69:40:a7:25:f0:08:fc:bf:
37:b5:bf:dd:46:20:a9:c2:54:76:b0:8b:35:14:8d:97:fe:3b:
79:0a:b6:bd:47:fd:3b:ed:9d:c3:cb:f1:2a:fc:20:77:8c:d8:
c8:09:eb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:24:33 2025 by rpki-client