Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
File: iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json)
Hash identifier: tRXKwFr9+U5M30czQ01FpNtZa6iPd3DiYL/QYwzVKcg=
Subject key identifier: CA:94:B7:5D:4E:4B:C4:97:29:F1:8D:BB:FA:D7:20:5F:5A:E5:10:72
Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Certificate serial: 019877C0979A343686697D288258A60D807A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
Manifest number: 0C86
Signing time: Tue 05 Aug 2025 01:02:46 +0000
Manifest this update: Tue 05 Aug 2025 01:02:46 +0000
Manifest next update: Wed 06 Aug 2025 01:02:46 +0000
Files and hashes: 1: 8l1JGPKaxK0LdzidLYE5O7KO7uc.roa (hash: iLVJNEHjRSQZgufW9Xco39laNybFCSoPb4TytjD2nas=)
2: ZaUvqR58Anq8vLQipN0wr5eky28.roa (hash: SPNO6fIwJVYF/onFgsSackS0wfwUe38bLzIxAklnkrs=)
3: dXGr5BqS128mRLd0J3At49a2qzg.roa (hash: wuoQDj1SJzE/S7y91rkdzuUmyIzNX+hGJtJoYwKPBvU=)
4: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: kYkcvu7LbHIgnHtK3r6B4mY3Dl5xcJfB4MCFk4QbGto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:77:c0:97:9a:34:36:86:69:7d:28:82:58:a6:0d:80:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Validity
Not Before: Aug 5 01:02:46 2025 GMT
Not After : Aug 6 01:02:46 2025 GMT
Subject: CN=ca94b75d4e4bc49729f18dbbfad7205f5ae51072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:13:ba:90:09:47:fb:65:e3:dd:e2:58:45:72:
d3:66:63:de:28:6c:c7:55:65:84:9a:28:8c:62:08:
a9:49:43:dd:39:9d:05:98:1c:0c:18:2f:ce:3c:fe:
83:e5:d1:87:56:3e:07:06:95:2e:96:ab:02:b4:7f:
4c:ce:6b:88:e8:50:22:19:5b:bf:5b:dd:ce:d6:b3:
1c:fb:30:09:ff:23:84:7f:22:43:75:92:29:09:45:
87:be:f2:67:e8:b0:e6:c1:61:75:e9:8e:31:d0:ae:
e3:cb:e6:58:f5:c2:9c:d9:03:f2:c2:0f:3f:88:b8:
40:fa:12:23:26:f6:3d:ca:a5:34:df:97:87:f0:b9:
f7:e3:1c:25:d7:2f:5c:88:c4:98:f3:ea:23:38:b8:
b9:93:77:7e:af:5e:0e:67:a4:7f:45:45:5a:f3:bf:
25:fb:fe:18:5a:23:ae:68:1a:df:0d:82:ba:4f:20:
15:e6:86:b6:25:f0:5c:f9:2f:fb:48:d2:b6:8b:3e:
43:a1:3e:83:00:18:11:e7:86:97:09:11:49:b1:fc:
9f:2e:d1:ac:8f:90:9d:09:82:34:ec:f7:e6:4d:6f:
84:6f:b8:97:67:5a:37:23:0e:33:65:18:6b:f5:95:
12:15:85:cb:e1:4f:59:7e:9b:a8:b1:97:ec:30:10:
7e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:94:B7:5D:4E:4B:C4:97:29:F1:8D:BB:FA:D7:20:5F:5A:E5:10:72
X509v3 Authority Key Identifier:
keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:54:94:ad:a9:a3:dc:ff:02:9d:7c:80:e1:6d:94:d0:93:35:
7a:c4:9c:a2:e0:4c:7a:87:08:cd:77:59:ee:d3:be:8e:7a:4f:
da:1f:f4:50:a1:c9:f8:d2:eb:17:86:8d:04:31:57:b5:7c:40:
5b:02:c6:20:97:2d:c1:06:0b:99:90:66:f8:f0:cd:b2:ec:2f:
bf:a5:5e:82:dc:42:fd:76:b7:60:7e:f9:ba:f9:f3:29:f0:8e:
9e:29:e5:dd:5f:a8:ce:78:ac:17:76:f5:b5:80:c0:e0:15:f4:
ac:bc:15:b8:84:2e:41:54:87:31:d1:81:de:e4:83:81:e0:e5:
62:9f:bd:7e:51:9c:7e:77:f9:55:ff:20:9e:04:b1:07:d8:70:
20:d8:5b:93:69:1e:ae:51:88:4c:1b:10:9a:67:b3:d5:9c:d0:
71:93:82:52:b1:f3:a8:32:f8:20:7d:a1:99:36:45:43:a2:34:
17:8b:14:e2:65:b2:82:fe:bd:da:69:37:27:ee:85:5c:9e:b4:
27:b7:43:9d:b6:c6:bf:3d:6c:33:34:3f:a9:e3:67:34:14:68:
77:32:ca:c1:32:0e:8b:a7:a5:c6:41:cf:db:cc:f2:18:e0:4f:
39:b3:43:83:b6:57:d9:e2:77:7a:0a:a5:5c:1b:62:77:9b:0f:
cc:82:4d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:21:00 2025 by rpki-client