Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
File: iPNC3REnxnrxEWqx-ZfifLTIhOg.mft (raw, json)
Hash identifier: S1jmx5JaL7Mmc/PRlUwJPhz2xiDN/BWZDFWs1krF0ME=
Subject key identifier: E1:AC:11:F9:12:EE:83:24:42:F5:3C:E0:64:32:00:C2:8C:7A:1C:C8
Authority key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
Certificate issuer: /CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Certificate serial: 0198801DBE8235C02A47A49890AF57677795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 16:01:29 +0000
Manifest this update: Wed 06 Aug 2025 16:01:29 +0000
Manifest next update: Thu 07 Aug 2025 16:01:29 +0000
Files and hashes: 1: 0tVPRt7zVqUIIvmXairhGKRXv0U.roa (hash: dhSo1lkIbUUIXrPA3/k2AFZiXI7dxBUbTf590V+gQts=)
2: iPNC3REnxnrxEWqx-ZfifLTIhOg.crl (hash: Ep9fFUUpXq9iI8SGM0ntoCqmotMWDtCx220iiaUJpec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 16:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:1d:be:82:35:c0:2a:47:a4:98:90:af:57:67:77:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Validity
Not Before: Aug 6 16:01:29 2025 GMT
Not After : Aug 7 16:01:29 2025 GMT
Subject: CN=e1ac11f912ee832442f53ce0643200c28c7a1cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:12:f3:08:86:e7:69:9a:8f:a4:ba:4b:43:67:
50:c2:82:f2:e1:6a:78:63:9b:f5:10:1e:79:a8:cb:
a3:6b:ee:2a:0e:b6:33:fe:b3:ef:5a:9d:be:de:ee:
8f:04:94:4d:1b:70:03:c9:c0:6e:25:80:00:73:76:
36:4c:f9:86:7d:00:90:fd:be:48:5e:e7:05:18:c0:
87:eb:d8:41:84:08:1d:a4:ef:6e:f3:b3:dc:30:54:
7f:ca:c9:a7:9a:29:b7:44:77:4c:c2:e4:66:91:da:
6e:ce:85:e4:e6:c9:cf:e0:0f:ee:e5:5f:77:e2:6c:
31:80:00:ac:7e:c4:c6:14:01:98:8a:5f:b8:d3:f0:
4c:06:da:7c:38:27:c5:2a:ca:3f:6e:e6:33:89:c7:
a9:9b:72:a3:be:7f:84:43:02:01:c7:cd:71:19:50:
76:51:f3:cd:c1:dc:71:4b:36:f0:60:33:b8:9f:92:
63:8d:c3:06:6a:c9:07:3b:f4:df:2b:aa:45:b1:3f:
ef:8c:1d:6d:c5:a7:2e:bb:98:94:fa:0f:d9:d2:fa:
44:88:f0:54:52:8a:d2:f7:6f:2c:4a:cd:db:9a:cb:
50:a7:7a:fc:3b:b5:33:a4:52:85:4b:6e:ff:73:64:
41:47:45:b0:bf:8f:df:d1:32:95:e1:a7:10:7d:33:
27:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AC:11:F9:12:EE:83:24:42:F5:3C:E0:64:32:00:C2:8C:7A:1C:C8
X509v3 Authority Key Identifier:
keyid:88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:50:5d:72:db:d5:bf:73:91:4a:69:ef:fe:cc:46:e2:06:94:
5f:44:6a:3e:0b:ed:a9:e8:1a:37:3e:e1:a4:d3:15:48:0b:f4:
de:a5:f4:65:37:87:3f:04:a5:0c:eb:13:19:11:76:c9:a7:dc:
36:f6:75:bd:fe:b6:cb:ac:be:67:d1:7d:06:69:66:32:04:87:
14:7c:9d:61:98:bb:f8:62:f4:81:ed:74:26:dc:18:45:c7:92:
88:d3:d5:50:15:12:86:1e:9d:2e:57:a1:8a:08:51:00:16:b6:
1f:a8:d5:e0:9a:4c:fb:7b:72:54:82:9a:29:0d:bc:ed:d8:2f:
e2:9a:a8:c2:60:e8:a6:c2:82:e6:3a:b7:fd:ed:39:57:a4:6c:
cb:b5:c0:0d:70:3f:83:29:d6:f6:d9:23:58:02:e3:02:a1:16:
89:3f:6f:88:c9:2f:b8:02:f6:64:c3:42:1f:4e:6e:80:51:06:
29:a2:bf:54:dd:5d:25:da:59:77:1a:c2:11:b7:ed:eb:26:05:
b2:37:5b:cb:41:e6:64:c7:f2:e7:75:e3:b3:18:75:f1:a3:13:
2c:b1:3b:63:01:24:4b:00:41:5f:4f:4c:cd:d9:45:2f:29:71:
c5:6b:de:ca:3f:fd:23:f9:45:47:df:e6:d0:6f:f9:0d:98:10:
cd:12:50:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:26:48 2025 by rpki-client