Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
File: Ip-w-z0njhsoCnd94gDvvQi6rDA.mft (raw, json)
Hash identifier: 94tr/3ZVqyHVvFZDte4UyJAFCIm99ke3q7LJH2+Ey+c=
Subject key identifier: 73:B2:6F:03:BF:CC:7F:FF:B4:D1:0B:8E:0A:F6:6D:C7:D0:55:6B:36
Authority key identifier: 22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
Certificate issuer: /CN=229fb0fb3d278e1b280a777de200efbd08baac30
Certificate serial: 01987306994C6A24D9E4221BB8A66DAAD08A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
Manifest number: 088D
Signing time: Mon 04 Aug 2025 03:01:08 +0000
Manifest this update: Mon 04 Aug 2025 03:01:08 +0000
Manifest next update: Tue 05 Aug 2025 03:01:08 +0000
Files and hashes: 1: EdKpa32IZ9Dnd3k-vmeHaMU23Tw.roa (hash: WGOFdfPIgmzQx9aGUgM6u6XYxnkTJOLa0M2Z4HLrsFA=)
2: Ip-w-z0njhsoCnd94gDvvQi6rDA.crl (hash: oWoSgi6VYgKod5eIGC8NwoOtwZ8ImuxyIkcCqAV4enI=)
3: TaMd7DA-6NrsYwAIJaSvClB4fpo.roa (hash: dkRPf4s5CoCdHNuMtPMADul0c0mdFRvVK8/5OUkpYlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:99:4c:6a:24:d9:e4:22:1b:b8:a6:6d:aa:d0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229fb0fb3d278e1b280a777de200efbd08baac30
Validity
Not Before: Aug 4 03:01:08 2025 GMT
Not After : Aug 5 03:01:08 2025 GMT
Subject: CN=73b26f03bfcc7fffb4d10b8e0af66dc7d0556b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d6:35:f0:df:98:36:93:ee:ad:e3:6f:4f:9f:
69:0b:a4:b9:bb:7a:ea:6a:1a:44:1e:5f:d2:f5:f0:
ae:c9:f2:6a:2c:0f:c8:af:00:07:7d:06:14:67:db:
b4:d7:18:34:fe:c1:00:7c:df:ab:d3:3c:02:08:4b:
5a:15:c8:2d:ca:b5:c7:3b:b9:1d:f2:b8:6a:1a:51:
f8:1c:db:7f:9c:53:fa:26:00:f6:a5:29:0e:0c:b2:
fb:da:51:65:fc:82:1e:c4:ff:9e:ad:76:d9:3a:8c:
23:f3:69:33:74:af:2a:4b:46:6b:88:e8:2b:b4:9c:
05:0a:10:db:68:8b:37:a6:dd:8a:98:55:c3:ee:0e:
7d:c1:f0:9f:b7:5f:0f:c5:08:e3:fd:52:af:0d:e8:
7a:db:fd:bd:3f:27:50:cf:46:d8:48:e6:c4:5e:3f:
3e:e9:db:40:3d:d4:95:aa:df:86:92:65:d4:ad:1c:
56:e9:04:b4:50:df:a1:42:b6:14:bb:d3:9c:c4:86:
dc:b1:5b:0e:35:de:85:85:2a:38:b0:57:88:33:1e:
2c:ee:2a:a4:f4:e6:df:7b:a5:79:17:01:ca:4e:72:
25:b2:95:25:56:dd:30:a2:f5:21:13:02:47:a2:d2:
40:5e:6a:9e:e2:97:59:ad:ae:f5:da:01:62:6a:53:
67:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B2:6F:03:BF:CC:7F:FF:B4:D1:0B:8E:0A:F6:6D:C7:D0:55:6B:36
X509v3 Authority Key Identifier:
keyid:22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:3b:ac:84:6a:db:5a:c8:db:e4:77:c2:1b:14:ed:bb:28:73:
4e:4b:42:77:36:66:55:1b:f4:1d:77:d6:d1:c2:ba:dd:fb:a0:
50:38:c3:f7:42:80:57:f8:2a:27:1a:0d:65:93:07:93:d4:91:
15:6c:a0:08:de:73:4e:77:a8:fb:27:ad:2a:92:9d:d3:59:b0:
9b:7c:f5:54:8c:b2:21:b3:9e:d7:0d:5a:38:b7:4c:b1:6e:4e:
ff:70:bc:93:1c:15:44:f1:84:c0:e3:10:0f:73:dd:e3:91:59:
c2:77:6f:28:89:63:e1:10:55:09:7e:6a:dd:df:cc:66:f2:55:
70:3b:51:86:e3:75:18:29:ee:15:af:74:51:92:29:45:ab:0d:
7d:0e:3c:f0:cf:8e:34:5a:ad:14:43:f5:46:73:24:da:fd:f6:
95:04:7e:a3:fd:20:3f:93:f7:c6:78:ac:c1:ab:68:f9:a2:62:
9d:4c:f9:90:22:49:38:ee:44:45:28:06:50:c0:14:d7:cf:83:
d0:ee:47:03:f3:68:df:e7:a1:72:f1:ca:dd:3a:ce:cb:25:5b:
44:d7:57:11:81:43:13:ec:60:1b:f4:29:d5:70:ab:76:97:c8:
11:f9:60:86:bc:f2:05:2f:1e:b1:32:05:1f:b9:84:73:e2:d3:
5b:2d:fa:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:36 2025 by rpki-client