Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
File: ijJOTOdpObTbV9XTUMKtAHtZgOE.mft (raw, json)
Hash identifier: TSp/LiE8DTJk4KQrST3kRB/zkMPdFqJzjr2lF7WCmmc=
Subject key identifier: D9:E8:92:63:0D:37:5E:ED:1E:A2:3F:E8:52:10:86:D8:06:04:FF:FF
Authority key identifier: 8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1
Certificate issuer: /CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1
Certificate serial: 0198729835904A4A9672021D2EBAFBDDBF74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
Manifest number: 104C
Signing time: Mon 04 Aug 2025 01:00:34 +0000
Manifest this update: Mon 04 Aug 2025 01:00:34 +0000
Manifest next update: Tue 05 Aug 2025 01:00:34 +0000
Files and hashes: 1: SK-KQGjpFxAKGGZG9gSs78w75A0.roa (hash: /f4qVORCandIpf7G2G6ex0CoHR+bR91wiJ0+KeMblkM=)
2: ijJOTOdpObTbV9XTUMKtAHtZgOE.crl (hash: lGshk5871Q0BcizpVi0SJ4CoiOFy6rdKh4p8REEJz6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:35:90:4a:4a:96:72:02:1d:2e:ba:fb:dd:bf:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a324e4ce76939b4db57d5d350c2ad007b5980e1
Validity
Not Before: Aug 4 01:00:34 2025 GMT
Not After : Aug 5 01:00:34 2025 GMT
Subject: CN=d9e892630d375eed1ea23fe8521086d80604ffff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0d:44:bc:b9:3c:ec:84:1b:77:00:ad:8a:fe:
5a:2a:59:e6:94:f9:3b:ad:a8:e2:e1:4a:35:a6:d7:
3c:e8:94:cd:f0:7b:28:e8:4a:0a:7b:b9:49:5b:6f:
5f:38:f2:05:4b:89:bb:16:17:2e:fb:fa:2e:02:db:
a7:a3:fb:31:26:64:62:8a:56:44:83:98:07:bc:27:
c8:28:08:94:13:7a:ac:dc:d4:69:65:78:e2:16:2a:
92:cf:ec:1f:2f:92:d5:85:8b:5f:87:7e:26:76:2a:
50:5b:de:73:1a:f6:7a:74:5f:c3:4a:ea:8f:d4:2f:
49:04:11:14:5c:37:13:cf:f0:bd:b0:57:89:d9:d9:
51:21:c0:88:14:ff:fd:29:59:6c:02:42:75:f4:23:
7d:17:1a:90:a1:51:70:4a:bc:88:2a:71:92:58:c4:
ef:df:3f:72:6c:d0:43:c0:05:3e:1e:96:3b:ad:32:
fb:f7:3e:a8:90:96:03:de:b7:c3:cc:01:d9:cd:dd:
02:14:c6:c9:0f:90:41:32:f3:05:34:46:91:f7:b1:
54:9a:85:9b:48:bb:70:9d:ca:45:35:98:cb:e1:59:
75:77:7f:72:30:78:88:ed:f6:22:04:23:0b:d4:28:
d4:32:d1:f8:b0:0e:d1:59:ef:3d:cf:75:d7:3f:d5:
7f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E8:92:63:0D:37:5E:ED:1E:A2:3F:E8:52:10:86:D8:06:04:FF:FF
X509v3 Authority Key Identifier:
keyid:8A:32:4E:4C:E7:69:39:B4:DB:57:D5:D3:50:C2:AD:00:7B:59:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijJOTOdpObTbV9XTUMKtAHtZgOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dcad13-e9e8-4d4f-afc2-62bc8fc755dd/1/ijJOTOdpObTbV9XTUMKtAHtZgOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:d5:39:c1:6f:1b:ad:aa:04:28:8c:88:bd:b9:f1:c9:2d:3b:
dc:bf:0d:95:02:4a:ba:99:51:61:3d:0d:f6:60:64:44:6e:d2:
58:55:fc:db:cb:50:49:14:1b:e0:90:9b:2c:8a:e1:df:9a:8a:
c9:f5:0a:76:01:6f:d4:30:ac:ab:fd:81:af:32:61:d7:b3:7e:
aa:e9:f5:06:a5:2a:90:eb:b8:6d:e5:d4:03:15:37:c5:e6:50:
42:b9:1c:2a:25:65:22:ee:47:86:38:51:ff:92:c9:da:dd:ac:
28:05:27:4d:20:3a:97:f7:d5:7a:95:aa:1e:28:f6:48:91:2c:
1d:45:a2:cd:ab:78:51:c4:3d:b4:4c:43:36:1d:8f:00:cd:e3:
9e:94:e5:ad:89:43:bc:37:e5:86:b4:7c:13:e4:a8:dd:d8:97:
9a:e3:af:17:90:2e:e3:fd:9a:bf:5a:42:87:1d:2a:0c:56:0e:
c8:fc:6d:40:d8:ba:a2:32:ef:62:90:ef:e6:90:29:12:3c:49:
6b:7b:af:9e:d9:82:df:79:ee:63:1f:64:b3:d9:6a:86:f9:3d:
0b:15:d9:24:8c:03:c3:56:c8:81:b3:9e:f1:e6:d0:64:95:1c:
a2:f3:8b:1c:19:08:1d:35:e9:30:ac:e6:4b:28:8c:4b:83:4d:
3c:18:a6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:47 2025 by rpki-client