
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
File: iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft (raw, json)
Hash identifier: dwGd/Rs3lFYyn14oG7JSqdz4KkeK7sIPryOOUxnpy5s=
Subject key identifier: 4E:18:83:86:F9:DB:42:DA:64:9C:47:30:97:92:4A:EC:FA:61:7E:D1
Authority key identifier: 88:E9:FA:23:DA:4F:E9:7A:A9:E0:F3:91:15:62:05:59:A2:9F:6B:70
Certificate issuer: /CN=88e9fa23da4fe97aa9e0f39115620559a29f6b70
Certificate serial: 01988C21AA3BEE29D95041C604249B5BDE85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
Manifest number: 03CA
Signing time: Sat 09 Aug 2025 00:01:13 +0000
Manifest this update: Sat 09 Aug 2025 00:01:13 +0000
Manifest next update: Sun 10 Aug 2025 00:01:13 +0000
Files and hashes: 1: 0iDUFJnxa3p3pYn9wOd7dy5ufak.roa (hash: 3azQw0QyMVpE4/ttRjyWB6+sGCTH0gc4+eCuZ8gfhjY=)
2: iOn6I9pP6Xqp4PORFWIFWaKfa3A.crl (hash: qNtZ++JL9dYZwjZXWvTGYhSAYS/PVQ2Nx+QrCQyQqvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:21:aa:3b:ee:29:d9:50:41:c6:04:24:9b:5b:de:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e9fa23da4fe97aa9e0f39115620559a29f6b70
Validity
Not Before: Aug 9 00:01:13 2025 GMT
Not After : Aug 10 00:01:13 2025 GMT
Subject: CN=4e188386f9db42da649c473097924aecfa617ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:53:94:88:11:e1:95:6c:f5:a8:96:29:2a:7a:
cc:29:ec:d2:00:ac:a7:65:15:c5:0a:05:f1:a3:74:
26:3f:52:64:ea:d1:14:c6:80:ae:0a:61:9b:76:63:
91:ae:29:7e:a4:1e:49:6b:41:95:96:5e:18:81:68:
8d:a5:44:04:aa:38:a9:ef:8b:2b:8b:56:9f:0a:a1:
ef:d8:d8:a5:99:13:f7:71:55:18:ab:29:bc:a1:6f:
cd:12:da:19:f6:52:c3:f8:97:96:14:7a:c5:d5:09:
03:c9:85:7a:47:51:f8:f1:70:8d:a1:bf:86:77:3b:
47:fc:e7:85:60:cd:4d:53:28:ca:a9:5b:65:5d:f0:
93:c4:39:9a:04:d2:39:8b:3c:f9:f5:36:bc:07:0d:
2e:e8:57:11:b8:90:52:8b:3f:67:bc:a0:35:dd:5e:
6c:94:94:72:a4:3e:2d:31:98:b5:90:69:fe:50:68:
bf:64:5b:9c:09:73:f1:ba:22:55:4f:9f:85:77:56:
47:ec:f7:23:02:28:cd:66:80:af:1b:5b:a5:6e:1a:
ec:a9:af:c0:51:d6:d3:ab:0b:01:98:22:67:37:1a:
8c:cd:28:76:17:84:f0:e1:be:a3:ba:30:d3:e0:3d:
9e:c4:b7:ce:3b:5d:53:89:f7:71:3b:c1:bc:6e:6f:
5b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:18:83:86:F9:DB:42:DA:64:9C:47:30:97:92:4A:EC:FA:61:7E:D1
X509v3 Authority Key Identifier:
keyid:88:E9:FA:23:DA:4F:E9:7A:A9:E0:F3:91:15:62:05:59:A2:9F:6B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOn6I9pP6Xqp4PORFWIFWaKfa3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6d15c0-80cc-4edf-8f14-3e2478947e6e/1/iOn6I9pP6Xqp4PORFWIFWaKfa3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:4e:ab:6c:25:e0:d7:40:bc:be:5b:e5:18:aa:f1:5e:aa:c1:
f3:91:a9:38:a8:02:1c:02:99:71:a8:1c:3e:67:05:95:1c:61:
32:5e:74:59:f1:36:ee:34:b2:94:aa:0f:c1:09:7e:90:25:d9:
5e:1f:9a:2f:90:61:d5:77:cf:10:26:f4:70:08:56:cc:79:00:
b8:a9:ba:a1:b8:6d:ae:2a:37:be:6b:55:38:fc:45:12:2c:d8:
da:45:c8:07:f2:f8:4c:05:ba:66:63:50:07:ca:2c:fb:ff:8b:
30:32:b2:c6:7b:55:ac:4d:3c:12:c0:6e:df:82:2b:89:b6:59:
21:23:f7:a8:ee:fb:c0:8f:b8:4d:c4:28:62:80:48:03:76:56:
84:d2:7c:8d:71:d8:f2:b5:d6:e7:db:73:eb:3d:56:32:44:4f:
11:9a:ff:3f:0e:0c:ae:ab:69:d7:78:3b:58:36:39:07:a7:6e:
76:bb:22:bc:c3:d1:27:22:bc:1d:ee:e8:33:7d:b4:bc:db:d4:
ea:67:84:77:27:61:25:5f:d4:3d:84:2d:be:59:8f:96:53:a6:
e5:84:9f:f0:a4:56:ad:d7:1b:32:02:ba:cd:7b:60:8a:fa:0a:
4e:9d:55:38:f5:27:2e:77:d9:02:81:47:5a:8b:3d:d5:4b:c7:
98:c6:27:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:52:47 2025 by rpki-client