Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
File: insJq1RYUceJ0sqolCujnOoT6T4.mft (raw, json)
Hash identifier: dQ+d1QMHRjdPkTTpYcyTuz3ayq2aAo0z3FyT6DagxUw=
Subject key identifier: 88:79:27:F6:67:11:6F:D5:3C:DE:E1:EF:9A:53:A4:38:E0:9F:92:B0
Authority key identifier: 8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
Certificate issuer: /CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Certificate serial: 019874F4FE3525B677DDB3A7F3FCF58ECF8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 12:01:09 +0000
Manifest this update: Mon 04 Aug 2025 12:01:09 +0000
Manifest next update: Tue 05 Aug 2025 12:01:09 +0000
Files and hashes: 1: GSXQP-yJ0oWFWG7SiFPS52SpSgY.roa (hash: yWv48sy81gH1KSMrgFDXRAC5wY8B4250+tW5tBvtQ4E=)
2: TZjDxa0WLxZ4-HRGPSFJK9LraZg.roa (hash: mYc2KZGGYZLCnNBNUhGV4DJVMUhPM50/TitGKZaaJPU=)
3: insJq1RYUceJ0sqolCujnOoT6T4.crl (hash: iXGvkyCj1kOiBhPZDkvJD1ShAL0S2wH1bQu9XkqyNTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:fe:35:25:b6:77:dd:b3:a7:f3:fc:f5:8e:cf:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Validity
Not Before: Aug 4 12:01:09 2025 GMT
Not After : Aug 5 12:01:09 2025 GMT
Subject: CN=887927f667116fd53cdee1ef9a53a438e09f92b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:0e:df:4f:67:17:73:83:7d:7a:89:33:ce:
cd:72:71:fa:7f:a7:86:56:f3:1a:dc:ad:0f:bd:ea:
2e:f5:24:9a:23:d5:19:53:28:a3:70:ae:63:ef:9e:
7b:70:89:fc:13:82:67:10:83:2c:13:0f:ce:8f:03:
e0:3b:34:3d:24:2a:7c:fa:36:67:d7:4d:32:b4:43:
6f:84:07:10:df:bd:4d:33:36:ed:35:44:6d:de:25:
15:c4:fe:f3:71:bf:04:4d:18:87:57:9a:a3:e2:b9:
cd:d4:ac:15:6a:8f:0c:8e:8b:81:51:38:09:f3:21:
62:c0:71:69:3f:f9:95:3c:45:7f:ff:9f:fc:f6:77:
64:77:be:41:db:b1:13:2f:e8:14:71:eb:b1:90:9a:
4c:19:db:c2:57:ce:86:17:71:62:83:60:6b:c8:6e:
4c:9c:95:da:6b:0b:9a:6a:a2:ca:f8:73:af:e0:08:
71:3b:17:cd:08:8b:e2:1d:cf:96:7c:4e:99:ab:06:
55:53:c2:9a:ce:84:9e:74:29:33:c9:0e:96:1f:31:
4e:06:04:1a:c3:d4:87:1f:9e:9a:88:21:69:9e:f3:
db:fc:35:8d:62:fa:52:68:1f:1c:a8:f5:05:07:f7:
f3:81:32:fc:0c:ec:b6:74:5c:e4:16:16:64:a5:b5:
17:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:79:27:F6:67:11:6F:D5:3C:DE:E1:EF:9A:53:A4:38:E0:9F:92:B0
X509v3 Authority Key Identifier:
keyid:8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:48:02:33:bb:4a:58:6a:d7:83:ec:c2:7d:ae:74:3c:5c:c8:
06:e2:48:fd:81:ae:c9:19:2c:2f:8a:cf:2b:d3:20:11:bb:51:
f2:67:66:7a:aa:a6:93:dc:53:14:4d:d7:9d:d2:50:7d:19:18:
e7:b8:79:49:44:aa:e0:02:f1:5c:c9:48:96:e2:aa:49:28:50:
4a:ba:5c:ec:66:ee:d0:17:46:f4:9d:14:ac:2f:a1:ca:44:50:
40:fe:b8:f5:90:17:86:c2:8e:ab:c6:b0:b2:bd:83:96:a7:fe:
f7:a4:cb:29:8a:15:e9:08:13:cf:e7:d3:df:66:f3:e6:c5:37:
c8:aa:d7:ed:74:b7:25:5c:ab:93:af:ce:08:52:9e:91:3c:2a:
b4:6d:be:9d:3b:b6:5c:56:8a:4f:e5:e0:53:bf:53:58:e6:cf:
16:8a:49:45:c0:e6:8a:95:c7:4c:d7:f9:ef:e0:ec:2b:84:37:
15:4a:f1:04:cc:a1:cb:c4:35:0a:23:aa:2a:17:86:1a:33:9c:
29:c2:d3:f9:40:b7:e8:91:d6:8a:ac:b3:b8:0b:fd:17:7f:be:
19:31:a6:d5:16:eb:f5:11:72:bf:b4:6e:64:1e:22:99:7e:c5:
fe:59:7a:df:4a:c0:a0:18:18:bc:56:8f:95:5a:a1:7c:b6:32:
1c:11:dd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:58:36 2025 by rpki-client