Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
File: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft (raw, json)
Hash identifier: vM3KaAnXon5bV7G7wQ7FCJSIMMpqtUb9N6ALfi/APDo=
Subject key identifier: 89:68:B5:A7:DF:16:F3:98:DF:D4:93:EB:C6:F3:5D:9D:57:03:F4:57
Authority key identifier: 89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
Certificate issuer: /CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Certificate serial: 019880F902F004E7C0D7D7CB3779F17102FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
Manifest number: 15F4
Signing time: Wed 06 Aug 2025 20:00:59 +0000
Manifest this update: Wed 06 Aug 2025 20:00:59 +0000
Manifest next update: Thu 07 Aug 2025 20:00:59 +0000
Files and hashes: 1: QdF_t5GM6hFZDI7Ycz1kPbhRE0s.roa (hash: gZA+5nFU0e3J+dZOb0p/gBtvIfB/51rVDEOTe4nlfP8=)
2: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl (hash: Angd5i4BTv/DENKKJqHTle2Wc9gsquvYXGKd//ro9X8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f9:02:f0:04:e7:c0:d7:d7:cb:37:79:f1:71:02:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Validity
Not Before: Aug 6 20:00:59 2025 GMT
Not After : Aug 7 20:00:59 2025 GMT
Subject: CN=8968b5a7df16f398dfd493ebc6f35d9d5703f457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bd:54:b6:0f:6a:d7:1c:c8:f3:8a:dd:a0:89:
eb:e8:b7:5d:9a:8d:85:66:78:ac:15:ac:62:c6:4c:
e0:51:11:78:d2:c2:5d:12:38:94:09:37:ae:5c:51:
eb:7f:c9:9d:e1:74:25:ec:59:b2:f6:c3:59:92:5a:
9e:64:4b:64:0c:7d:0c:ea:a4:5c:0e:f4:3c:81:90:
a9:e2:aa:9b:fe:2a:01:39:c7:6a:4a:b6:3c:e0:70:
e8:52:1f:60:87:35:0f:ba:67:5a:90:99:a1:c9:ec:
98:1d:df:61:73:94:3d:8f:57:7e:b7:ae:aa:2c:4c:
41:18:25:ea:25:05:20:bd:d5:70:d5:b1:d4:ef:d4:
1b:b3:82:89:32:ba:45:2f:03:50:4d:05:fd:81:b2:
24:ab:13:00:98:76:59:78:3a:47:08:7e:4c:66:10:
4b:57:1a:1a:72:13:86:79:ef:39:23:bd:c4:8b:4b:
0b:a0:a6:b2:91:bc:03:f1:df:be:bf:c8:ec:fa:c5:
4b:1b:5e:7a:4c:18:41:45:f1:2c:d8:9f:af:af:10:
c2:e9:53:86:fe:f0:12:25:2b:ed:ee:d3:42:44:db:
e8:82:95:45:80:00:79:74:85:a7:35:09:87:9a:07:
12:8f:e1:32:50:77:f9:bf:88:bb:39:35:96:ee:24:
3b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:68:B5:A7:DF:16:F3:98:DF:D4:93:EB:C6:F3:5D:9D:57:03:F4:57
X509v3 Authority Key Identifier:
keyid:89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f8:4b:09:13:0d:56:ff:fe:c4:28:42:ef:d2:41:ee:30:7b:
59:be:45:37:18:c6:ad:ed:c4:e4:16:93:47:29:80:8e:7b:03:
82:52:19:c6:d5:8c:9c:44:13:c2:1a:38:31:1c:13:31:ea:a0:
2a:e3:c3:97:4c:52:64:a3:71:fd:02:79:76:5d:0c:1d:ca:a8:
d9:21:f8:2f:eb:e8:0b:a5:ca:85:6f:a3:11:e5:86:a4:4a:c0:
e1:82:b0:7a:48:41:91:47:d2:ef:22:1d:eb:eb:ea:da:ec:99:
86:51:ee:bb:51:4c:f3:19:6a:07:d0:ec:60:e1:4f:15:ee:ea:
94:b3:30:e6:9a:0e:fd:9a:44:40:38:e9:f5:fb:c2:c4:0c:29:
71:e0:f6:b7:66:5a:ab:8e:c3:de:f1:4b:a2:d6:09:e2:67:2b:
6f:27:5e:12:4e:a8:3b:ae:07:5f:bb:75:d1:b2:7a:e7:cf:01:
9c:0b:2a:07:b2:6b:cf:75:27:24:59:ce:06:52:5d:5f:5e:5f:
6d:d5:dd:4a:72:12:6b:12:1a:40:65:85:dd:aa:87:03:0e:50:
7e:50:f4:75:a2:50:f8:51:b2:26:67:91:22:36:83:ed:6d:45:
13:c3:f1:2d:08:11:45:52:b1:12:b2:98:55:5d:14:8b:28:f4:
cb:32:7c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:02:45 2025 by rpki-client