Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
File: iNEpp8ePtm0Hc7yZAINX5QfB574.mft (raw, json)
Hash identifier: 13ApOF4h2M3LVCy8fSP5O2D6tZAPDD7Jd7SSQp9/rT4=
Subject key identifier: 22:02:8C:F7:6B:6A:BA:C3:7D:9C:AF:84:C6:D1:89:B0:97:86:94:7D
Authority key identifier: 88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
Certificate issuer: /CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Certificate serial: 01988B0EE100240015F996D932CA4EF38F77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
Manifest number: 0754
Signing time: Fri 08 Aug 2025 19:01:04 +0000
Manifest this update: Fri 08 Aug 2025 19:01:04 +0000
Manifest next update: Sat 09 Aug 2025 19:01:04 +0000
Files and hashes: 1: 76xLkfM6kYxOK1NXh9OOS2MHsHA.roa (hash: 6Sbux0XZ8H/iAJjFbORSyS+kiaCneStSNPq6dnkA+DU=)
2: iNEpp8ePtm0Hc7yZAINX5QfB574.crl (hash: JBF83CojTcwdCsKV2/CevJvKnXZYrVsBnUOTg1el684=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:e1:00:24:00:15:f9:96:d9:32:ca:4e:f3:8f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Validity
Not Before: Aug 8 19:01:04 2025 GMT
Not After : Aug 9 19:01:04 2025 GMT
Subject: CN=22028cf76b6abac37d9caf84c6d189b09786947d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:16:ba:c0:f0:65:2b:37:00:1f:d6:98:66:9a:
5c:d0:a4:92:47:1b:cc:7b:30:98:0e:f0:3e:2c:6c:
1d:c5:3c:b7:6a:64:6c:2b:c0:88:82:28:bf:35:09:
8a:20:fe:5e:19:cd:b2:7f:46:f2:ca:05:cb:17:6e:
67:fc:9f:08:37:04:83:85:58:3b:5d:d3:50:28:24:
7a:8e:9d:03:e2:89:cf:07:ef:54:3d:dd:6b:89:b4:
ea:a0:a5:2a:10:7f:dd:a0:60:14:55:57:01:f7:ce:
eb:2b:33:ae:1a:aa:c7:de:46:60:32:ec:d1:9d:90:
ad:2d:8e:8f:0a:3a:9a:68:ef:31:8c:3f:32:b6:63:
a3:29:29:f1:12:d4:50:00:79:62:9c:d5:6a:a1:2c:
03:8a:2c:b0:df:ae:33:82:00:6d:e2:94:64:70:b8:
5a:ec:ba:64:c3:84:09:72:da:32:4e:9b:33:8c:b0:
a5:67:08:a7:c5:1f:5d:da:20:c1:fb:6e:ec:bc:af:
ae:28:34:cb:c0:81:ad:80:f6:a4:f6:05:37:d3:af:
53:a6:01:b4:c3:91:98:52:9a:2e:1b:01:8e:eb:09:
8c:15:c5:58:fc:a4:40:16:e6:1e:91:8e:d6:f4:14:
26:ad:71:e8:af:28:30:e3:d0:25:23:4b:c8:5f:82:
0e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:02:8C:F7:6B:6A:BA:C3:7D:9C:AF:84:C6:D1:89:B0:97:86:94:7D
X509v3 Authority Key Identifier:
keyid:88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e0:77:19:94:33:42:26:eb:27:8c:90:d9:6e:2b:ea:16:ba:
ea:4a:d7:54:48:4b:3d:d1:40:57:5c:1b:0d:37:43:8e:de:11:
cf:ba:bc:63:d0:c8:b3:6c:1e:2e:d3:dd:72:fb:76:98:ab:e2:
d4:f7:23:2a:b9:e9:b2:e4:15:c1:c6:2c:e3:60:4e:a6:c9:63:
0b:59:c2:a0:c6:a1:f9:92:52:06:7b:af:f3:4c:f4:36:7c:3f:
2d:cb:de:e2:ea:99:49:62:c7:37:0a:35:85:37:31:9c:53:bb:
7f:a5:2c:81:d2:70:78:ee:d4:33:60:fe:79:d0:3c:f8:84:a7:
a1:9a:f9:46:d7:42:8f:9f:1f:60:3e:83:64:e2:c9:46:94:15:
36:a4:60:f2:b5:e4:94:15:9e:ad:91:ae:c9:f1:05:5b:11:cf:
6b:3c:7f:1d:f2:2d:b4:1b:16:69:71:dd:0a:0b:c9:83:14:a2:
4c:f3:3f:d9:6c:76:44:7d:44:70:63:cc:bb:81:e5:6d:1a:de:
3b:20:d8:23:28:8a:2f:07:ae:2e:45:bb:08:4d:c9:23:62:20:
95:4d:c3:0f:71:e3:c8:24:65:4f:63:f9:68:58:2b:8e:3a:8a:
65:7c:0a:ed:80:0f:27:2d:9f:ee:55:1c:dc:1e:12:42:01:b7:
61:aa:a6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 21:02:45 2025 by rpki-client