Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
File: i_iimBQfwvRcBy0noL8mJlXLb1o.mft (raw, json)
Hash identifier: JM4RzMrxG1gz0PR2/ZnKLZODZhxP3iPdTWC3AdlgzgI=
Subject key identifier: 26:2E:30:4E:37:55:B1:41:10:2F:66:6B:EF:50:93:82:EE:23:F2:E9
Authority key identifier: 8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
Certificate issuer: /CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Certificate serial: 0198906BEBCE86B9A11AF196578F73FC6A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
Manifest number: 012B
Signing time: Sat 09 Aug 2025 20:00:48 +0000
Manifest this update: Sat 09 Aug 2025 20:00:48 +0000
Manifest next update: Sun 10 Aug 2025 20:00:48 +0000
Files and hashes: 1: i_iimBQfwvRcBy0noL8mJlXLb1o.crl (hash: zPmCilXd1RT0UGwxQopELQATSqx1Meee8OzNjKKaTjw=)
2: w8pMwx-vyyole256lyQ0C_5-WOI.roa (hash: K+srURRGs/DsNg/JW4KWXf2QN5EAfkcbY2aU8MAMJS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:6b:eb:ce:86:b9:a1:1a:f1:96:57:8f:73:fc:6a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bf8a298141fc2f45c072d27a0bf262655cb6f5a
Validity
Not Before: Aug 9 20:00:48 2025 GMT
Not After : Aug 10 20:00:48 2025 GMT
Subject: CN=262e304e3755b141102f666bef509382ee23f2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:c0:73:aa:13:9d:3a:bc:15:92:61:64:24:
a9:9f:10:47:4c:16:23:12:f8:cb:0b:08:31:60:df:
5e:11:f2:fd:36:42:8a:64:23:00:fe:0b:9f:3c:d1:
d1:73:fa:71:7b:c6:be:4f:02:2c:ea:15:fa:cb:5c:
c6:cc:84:c6:b1:10:db:9e:e9:aa:0c:07:27:82:c0:
23:dd:c8:6e:b6:37:9b:24:fc:11:68:5b:a7:54:31:
09:19:bb:ef:f3:6a:06:9e:af:09:85:36:9d:81:df:
4e:fb:2a:0c:dc:74:10:2a:b4:88:46:02:07:6f:9b:
ee:4c:b9:a8:51:ab:fc:3c:47:7f:60:37:67:e5:83:
bc:fb:da:45:1a:3c:bd:82:ee:6e:7a:e4:35:c8:74:
c9:71:ff:8a:68:76:aa:08:4e:ff:91:09:30:45:03:
6b:bc:0c:ca:a2:d4:af:ae:3b:44:13:33:3c:20:25:
2c:c9:6f:be:6f:bd:93:b0:4f:43:61:98:c7:3d:66:
c6:4b:11:34:d6:1a:dd:4f:e7:cb:a1:17:3c:e6:f2:
d5:af:77:40:1e:47:06:78:d4:da:bf:ea:a8:f4:ee:
41:d2:1b:1b:95:92:bb:18:19:cf:27:6d:02:83:a4:
f8:61:a2:e8:a0:54:f1:02:07:ac:d1:ee:1c:0d:4a:
8a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2E:30:4E:37:55:B1:41:10:2F:66:6B:EF:50:93:82:EE:23:F2:E9
X509v3 Authority Key Identifier:
keyid:8B:F8:A2:98:14:1F:C2:F4:5C:07:2D:27:A0:BF:26:26:55:CB:6F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_iimBQfwvRcBy0noL8mJlXLb1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/496442-aab7-409c-9eff-d46ed568f871/1/i_iimBQfwvRcBy0noL8mJlXLb1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:54:ae:86:42:36:2f:63:d0:d1:6f:6b:ea:fd:78:5b:49:59:
c5:ff:bc:c7:93:de:59:95:cc:d0:3a:74:44:f6:9b:fc:52:fb:
b7:97:76:24:8f:17:2a:bb:3c:c2:d0:a7:db:5f:c8:07:e3:76:
f3:5c:cb:b3:a7:cb:e8:d3:3a:d0:e6:c9:13:04:73:50:08:59:
b9:7c:9e:71:79:8d:ec:ab:86:39:11:0d:e6:9d:8d:16:8f:c6:
83:2d:b5:dd:67:18:14:a7:87:e6:8f:fe:41:e6:00:38:ed:ba:
fe:11:07:57:d8:71:d3:ae:23:54:ae:ce:13:b6:30:4b:91:5c:
33:a4:bc:18:19:c6:b6:07:49:e9:c7:6e:55:68:d9:9e:01:bc:
3d:fe:76:25:d8:9a:83:da:ad:d6:0e:11:5f:fd:29:87:05:c1:
88:e0:64:8a:04:fa:5a:b6:c2:d7:2e:98:1a:9f:b5:4f:b3:aa:
ec:45:ef:99:0d:55:98:31:36:db:f5:9b:e7:fc:ea:0e:6a:57:
c1:d0:b2:cd:6c:6e:1e:3d:f0:dc:95:75:dd:db:45:98:b6:ca:
74:df:67:d3:0d:52:73:7f:7b:05:02:1a:74:05:58:6c:61:14:
ca:de:97:cf:ba:12:d0:07:fc:18:90:8d:f8:8f:01:f2:26:c6:
a7:95:39:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:36:19 2025 by rpki-client