Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
File: iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft (raw, json)
Hash identifier: GMRshoutUb/Hn3i10HYxDwF79Qh60OXNQTfwZTUNDHo=
Subject key identifier: B1:B3:D1:1A:4D:E5:9B:71:A7:6F:98:E4:23:73:B5:83:3A:10:A9:49
Authority key identifier: 88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
Certificate issuer: /CN=88fc58875608970d9a728347d05ef00d0f1d5611
Certificate serial: 01987ED3D775E30DDCBB53D9BD6D1E315CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
Manifest number: 0F88
Signing time: Wed 06 Aug 2025 10:01:09 +0000
Manifest this update: Wed 06 Aug 2025 10:01:09 +0000
Manifest next update: Thu 07 Aug 2025 10:01:09 +0000
Files and hashes: 1: glHtLecTNUxeR4oxupaJRTlQLos.roa (hash: tjH899kftJHgu4JmkbHHTA84WKPpmWW00cLzLNo7wBg=)
2: iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl (hash: KZcRKCCJ0Aivn8KlpOWqh7LCpQOOy5ECcuS+uKJlanE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:d7:75:e3:0d:dc:bb:53:d9:bd:6d:1e:31:5c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fc58875608970d9a728347d05ef00d0f1d5611
Validity
Not Before: Aug 6 10:01:09 2025 GMT
Not After : Aug 7 10:01:09 2025 GMT
Subject: CN=b1b3d11a4de59b71a76f98e42373b5833a10a949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8c:8e:7e:80:90:ec:0a:5a:ac:7a:dc:91:8c:
dc:c8:bc:a3:25:cd:8c:72:c4:0e:59:94:0d:da:d7:
68:94:d2:17:f5:60:16:1f:61:cb:d7:75:dd:cd:d9:
70:f2:c9:c3:80:23:ef:25:f9:b3:9f:db:8f:2a:99:
4a:a6:5a:10:26:37:88:15:68:1c:60:03:54:7d:a0:
75:cd:e3:0e:37:dd:08:ed:09:aa:28:7b:6d:aa:26:
c1:02:8a:2c:03:63:8d:76:d4:c2:98:53:7f:f3:4e:
9b:cb:ff:14:95:7d:34:67:37:3b:41:76:d9:39:08:
b7:fc:18:79:ea:45:56:46:85:0c:90:8e:92:58:01:
9e:29:ce:14:82:7e:79:12:94:15:35:24:9b:6c:b5:
3f:c5:1c:57:a7:6b:8a:1d:96:c7:39:09:f8:49:fd:
92:bf:33:fa:00:3b:56:84:4f:ba:35:21:6f:80:c6:
ca:a8:8b:a9:20:eb:cf:e8:3d:34:93:33:2a:db:9e:
ea:2c:4f:14:cb:5a:6e:5f:af:1c:a0:48:09:f7:80:
17:2e:26:0e:fc:8b:d8:49:55:48:e1:fb:e6:30:29:
19:4d:1e:d8:eb:8d:0b:82:a8:cf:76:ed:48:8e:0f:
d3:60:d9:60:d9:e5:4b:ed:90:8b:26:0b:6b:a6:43:
c0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B3:D1:1A:4D:E5:9B:71:A7:6F:98:E4:23:73:B5:83:3A:10:A9:49
X509v3 Authority Key Identifier:
keyid:88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:bd:02:25:86:be:02:9d:3f:7f:b9:89:8d:e6:48:ba:b4:b4:
a4:11:88:d3:7f:bf:71:f7:6b:3b:3e:51:d4:bb:a7:70:7c:77:
85:26:9a:3b:a7:50:28:1f:b0:27:24:7f:61:97:e2:e0:b6:56:
59:d8:22:e9:6d:35:18:23:94:b8:ab:f2:18:4e:83:5f:a6:f9:
ad:8f:76:4b:9a:68:cc:55:1f:ad:4f:65:6b:ae:29:87:ee:30:
1c:2e:35:96:85:cb:52:70:0a:12:3b:95:0a:90:57:4f:af:ce:
b2:64:6d:61:1f:30:35:92:8a:77:e1:4d:2f:06:77:ed:ce:11:
b0:e0:10:ee:a2:fa:c7:f2:ce:2a:4b:ca:ce:98:c7:12:49:9b:
fa:39:64:e3:7e:36:d9:64:5c:63:10:0a:73:a3:24:f2:b0:42:
1e:5e:97:9d:32:8a:2c:1b:6a:b8:02:ee:7c:2f:28:da:f0:2a:
a8:0b:de:54:bd:61:cf:65:f8:e8:64:b9:10:e2:86:09:f2:50:
82:3e:c9:3b:d5:9e:46:e9:b4:da:10:94:23:4b:8d:79:b2:67:
a2:95:e4:0f:78:15:03:2b:3a:a6:64:89:0d:0a:7d:ae:68:31:
48:39:9f:39:3b:28:6e:1f:61:2f:62:26:7d:75:d2:64:04:26:
d0:24:5b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:22:30 2025 by rpki-client