Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
File: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft (raw, json)
Hash identifier: RNHNyG6rbNMV1BFPDIhUwvES4Y4eDqE7RI048mSxCV8=
Subject key identifier: 22:6B:38:C7:2C:1D:F2:0E:14:BD:56:98:31:15:C2:53:90:11:19:A2
Authority key identifier: 88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
Certificate issuer: /CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Certificate serial: 019873E30783712470ABF15306A66E6E0BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 07:01:54 +0000
Manifest this update: Mon 04 Aug 2025 07:01:54 +0000
Manifest next update: Tue 05 Aug 2025 07:01:54 +0000
Files and hashes: 1: YOyr4rKnnzDrXdmtMOktrTLMhdg.roa (hash: 9XaoEGH44aifrIE9gnosDm/sLWWt90nSBonwPhD6BKU=)
2: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl (hash: /2o3JNNunZJVps0QjzI9Nc6sERP4LFKiHGpaZ33b+Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:07:83:71:24:70:ab:f1:53:06:a6:6e:6e:0b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Validity
Not Before: Aug 4 07:01:54 2025 GMT
Not After : Aug 5 07:01:54 2025 GMT
Subject: CN=226b38c72c1df20e14bd56983115c253901119a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:62:ab:7f:56:bb:88:e0:82:6f:fa:03:23:c3:
1e:2e:91:da:8d:c7:1d:a7:70:37:fa:12:f7:f9:88:
b5:43:bc:e2:a8:a2:4e:10:96:1e:09:7b:7c:de:97:
10:3a:f0:a1:c2:ef:48:98:65:86:7a:3c:63:f7:5f:
11:2e:45:db:67:8f:33:73:6b:b1:0f:5a:bb:e7:1a:
80:13:c9:14:83:01:35:df:d2:ad:ab:b1:84:5b:18:
56:51:05:0d:7c:3d:ee:4a:f1:9b:b9:8c:7f:30:c5:
77:79:30:73:63:b1:b6:0b:d7:6b:55:c3:09:6b:15:
33:db:f8:8e:2f:33:47:d4:57:89:d9:a5:f7:33:93:
7a:bf:c6:8a:c4:b2:fa:f4:5f:3f:21:0a:0e:2d:98:
ec:6f:69:2e:89:28:f1:d8:92:01:23:d2:0c:42:77:
22:c0:5f:b5:56:b4:25:34:29:50:02:ed:d7:73:06:
bd:64:ba:1f:e5:a6:0f:1d:0e:4d:37:61:df:a2:89:
1b:f7:9e:63:58:f6:74:30:39:9e:8b:44:5a:2a:20:
22:a5:0f:69:7b:1e:a6:85:f3:fe:61:75:21:c2:26:
5a:14:36:1b:1d:d3:2e:b8:68:bc:57:8e:42:50:be:
0c:34:34:a9:ef:d6:37:39:37:ef:c2:7e:34:73:34:
d4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6B:38:C7:2C:1D:F2:0E:14:BD:56:98:31:15:C2:53:90:11:19:A2
X509v3 Authority Key Identifier:
keyid:88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:89:c4:ea:d7:19:ec:8a:49:af:b2:70:57:41:c3:fb:f5:94:
73:98:54:60:c9:d4:3f:61:48:ee:ac:98:b7:39:d4:a3:de:84:
5a:0e:e3:81:00:84:4f:cb:10:a1:26:56:7b:6f:6d:45:23:af:
5c:9d:f4:c5:0c:bd:11:bc:af:b8:a5:29:f9:d0:4c:4b:48:88:
58:82:b0:79:9e:1b:d5:71:3d:58:f6:84:92:57:2d:ef:e3:21:
6b:32:ee:36:ab:4b:90:6e:cd:6f:c3:77:41:b7:62:1c:b4:1a:
18:c8:d6:91:db:15:c8:7c:9f:dd:e9:bc:1e:eb:89:47:99:c0:
a3:d0:6e:a3:03:00:4c:72:c4:45:f3:a0:1b:8f:1c:fc:58:d3:
03:6c:7e:72:4a:0f:2b:3b:48:24:36:e2:01:ed:da:46:5c:d1:
bc:89:b1:17:b0:41:67:60:fc:cb:2c:84:d7:9e:36:05:99:97:
13:d8:c9:4a:59:76:80:9a:72:a3:4e:bd:7e:02:ca:02:75:db:
58:14:fe:ec:d3:dd:c9:aa:9e:a9:ed:13:a4:40:1f:f5:17:e5:
f1:97:d5:14:ca:2b:97:6e:dc:c3:fd:3e:ea:65:43:64:d3:85:
3b:a0:3a:cc:17:5a:31:08:08:20:91:be:d9:83:70:5c:c1:69:
6a:e0:00:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:42 2025 by rpki-client