Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
File: i42FmAZNtajts6YIQGTNKhrYxuM.mft (raw, json)
Hash identifier: /m0JG/o0ST1p/3Vs6xXbaMgV/hoFUB7epPOkin/s/LY=
Subject key identifier: 05:EB:34:20:C9:57:18:D6:79:93:A6:C8:1F:F7:1C:82:E2:C4:B7:C6
Authority key identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
Certificate issuer: /CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Certificate serial: 019893A39ACD42419AE728CD00AA3272A56F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
Manifest number: 0B94
Signing time: Sun 10 Aug 2025 11:00:29 +0000
Manifest this update: Sun 10 Aug 2025 11:00:29 +0000
Manifest next update: Mon 11 Aug 2025 11:00:29 +0000
Files and hashes: 1: 18pU9OUJZfEjtQtM3d6KCEE-wf4.roa (hash: g9Yx6RdVIwFFC/gP3XLwi8dipV0AyWlMkba67EAqwI4=)
2: f2nWyu3vigJSlBOetOrjZwH1G1A.roa (hash: UMryrqtW8NDhWGWT0rJw80JqEFYALJXz4j6oSIXBhd4=)
3: i42FmAZNtajts6YIQGTNKhrYxuM.crl (hash: HIhSkwrwDFV0IGEBrNAGQy+T+eTH+paDQ2vel/UBy04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a3:9a:cd:42:41:9a:e7:28:cd:00:aa:32:72:a5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Validity
Not Before: Aug 10 11:00:29 2025 GMT
Not After : Aug 11 11:00:29 2025 GMT
Subject: CN=05eb3420c95718d67993a6c81ff71c82e2c4b7c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f0:e0:db:20:fe:b6:6e:d2:f7:dc:18:68:7e:
21:90:73:a0:f0:01:ec:e8:8c:cd:03:47:95:36:b7:
a2:0e:f7:a8:29:6a:3b:d8:b2:71:4f:fb:4e:8b:5f:
49:34:1b:3d:37:31:8a:fc:0a:6b:31:64:3d:a5:99:
4b:79:e8:96:f6:98:a6:a1:32:d6:af:d0:6e:87:20:
77:8f:83:b3:88:bb:a4:dd:62:a6:52:e0:cd:4b:57:
c3:b6:23:5c:c5:2d:3e:39:74:67:a7:3b:9f:f2:4f:
49:e8:3b:f8:f8:92:b9:56:fa:0f:9f:07:69:bb:a6:
62:26:c7:fe:0f:c0:2d:ae:82:23:54:9e:d6:85:06:
73:a1:db:6c:e6:9e:9f:b1:3d:73:d5:ba:0a:3d:eb:
5c:b3:28:b4:de:39:15:8c:8c:01:35:2d:a4:11:3a:
bb:d7:c6:95:94:a9:37:b3:a2:94:0c:a8:ef:7c:34:
c1:57:c0:79:82:5f:0d:1b:1d:c8:36:1f:76:4d:9a:
cd:28:f9:25:7f:bc:1b:74:ef:6b:95:28:bd:f0:9e:
4c:92:5b:fd:73:1f:a1:fb:0d:2a:af:06:3e:32:d8:
1b:b6:e0:69:ce:14:77:75:e4:22:d7:8d:62:1e:c4:
34:17:53:c9:9a:ab:b6:7a:f1:55:f3:60:c6:20:2b:
de:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EB:34:20:C9:57:18:D6:79:93:A6:C8:1F:F7:1C:82:E2:C4:B7:C6
X509v3 Authority Key Identifier:
keyid:8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b0:9c:fa:fa:ea:d9:7c:0f:ba:3d:48:89:02:b1:39:0e:7f:
c2:a4:2b:d7:46:17:32:ab:84:b7:2b:ab:01:0a:92:f1:03:bc:
6a:e7:2c:97:25:bd:dc:53:1d:98:82:54:d4:c4:b3:f5:da:da:
ca:af:2f:ca:38:40:74:f3:69:75:53:d9:92:46:65:be:28:4d:
ee:ba:b2:41:53:a2:c4:36:bb:10:90:da:78:e2:d2:5a:c8:1a:
ca:1a:56:cb:56:42:3c:3e:1b:28:a4:04:ee:cf:0c:e3:4e:3c:
1c:50:97:93:20:42:c1:48:aa:0e:e9:f5:15:16:40:73:3e:68:
3e:69:63:45:3e:84:58:1b:bd:0a:f9:18:3e:16:d9:b1:45:71:
9d:1b:00:a8:75:d7:83:ea:5a:cb:b7:6d:6a:8a:e9:2a:5d:33:
2d:f3:cb:35:3d:77:89:fe:93:c6:65:df:38:5d:49:55:04:61:
c2:0d:a2:87:e5:51:71:86:32:1d:17:94:fe:24:89:84:99:a7:
3e:94:42:7f:bb:01:5e:fd:66:82:96:43:f0:8b:ec:83:6d:10:
a2:9c:e7:a4:6c:10:c0:64:cf:c6:54:a9:fc:6a:2a:58:8b:08:
40:5a:26:21:50:46:d4:f1:24:c3:d4:6b:d5:8f:a8:33:e4:e0:
0f:1e:47:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:19:35 2025 by rpki-client