Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
File: iC-gGQL06MNH8hFuRkXaGmtOCWI.mft (raw, json)
Hash identifier: x9U7JxkkYFYIOPWsnPWbsf8YTMR6lIWshwqfjyvwE5o=
Subject key identifier: 66:8F:19:4D:93:10:D4:B8:49:C8:F7:CD:EF:FA:A2:BB:FE:5F:13:17
Authority key identifier: 88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62
Certificate issuer: /CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
Certificate serial: 019873E328251BE5827277C36DE1177D4328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
Manifest number: 13D7
Signing time: Mon 04 Aug 2025 07:02:03 +0000
Manifest this update: Mon 04 Aug 2025 07:02:03 +0000
Manifest next update: Tue 05 Aug 2025 07:02:03 +0000
Files and hashes: 1: ENS55DqOSCIACYKV88lsj2-9Qt0.roa (hash: DHbJggMAa2s1Y5SQ9CvEy1KweRl3G7QnT7Ch9hrVq4Y=)
2: Eh5XcZTOlwwjICZ8D5e6YinN9to.roa (hash: i3hRAhyXtajePfAySoecKpTzxKsfIbEuHCpoNygQqoo=)
3: iC-gGQL06MNH8hFuRkXaGmtOCWI.crl (hash: sCMYbOV908R87/egUgbEp5ukBrFfXNPUeemjpPWWLfM=)
4: rqFZA9uVkdGBL0x6Ei0L9MHEurQ.roa (hash: L0IGvxVXiMO117M8Wm4IgrHBTq1xuhWbcFCP05D3zJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:28:25:1b:e5:82:72:77:c3:6d:e1:17:7d:43:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
Validity
Not Before: Aug 4 07:02:03 2025 GMT
Not After : Aug 5 07:02:03 2025 GMT
Subject: CN=668f194d9310d4b849c8f7cdeffaa2bbfe5f1317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:30:29:54:83:72:7e:ee:dd:56:de:d0:c2:06:
5e:57:75:86:30:48:f3:05:f1:81:96:dd:63:a3:b8:
64:3f:7e:f8:d7:69:45:7d:b3:91:7c:25:c9:50:d2:
7d:36:8f:56:d0:51:4d:9b:7c:ca:f3:8f:b1:2c:9b:
9c:3d:78:1c:d1:61:64:9a:ef:20:3f:93:99:bf:e1:
cf:8d:93:41:65:6d:62:02:ae:95:6c:cc:63:8c:68:
20:40:c8:51:0d:9f:7f:47:21:ae:e5:c1:44:7c:d1:
a2:d2:f0:ca:27:da:68:e7:6f:da:7d:b5:69:3e:38:
47:c9:53:f3:9d:4b:68:da:f9:8e:36:17:ea:d5:9d:
1e:e7:e5:bf:62:52:23:90:dc:83:1d:0e:6b:d8:00:
62:11:ef:01:af:b4:11:43:69:56:f4:08:14:5f:67:
4a:29:5b:d0:b8:eb:90:91:03:6b:82:f0:54:b3:07:
6a:fb:db:14:fb:2c:be:8c:43:82:e5:2b:3e:89:4a:
b0:87:e4:bc:66:b4:b8:0a:4e:33:c4:39:3c:c9:41:
6d:b5:44:ae:c1:a2:97:93:98:8e:03:a1:43:29:53:
28:18:16:09:89:be:9f:9f:bb:f2:4e:29:c2:10:4d:
a9:a6:0b:15:17:3b:bf:d4:55:f3:38:74:32:a7:ba:
2b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8F:19:4D:93:10:D4:B8:49:C8:F7:CD:EF:FA:A2:BB:FE:5F:13:17
X509v3 Authority Key Identifier:
keyid:88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:01:51:1d:e4:de:37:66:0f:e7:69:46:d9:79:0b:ab:32:3d:
a4:cb:6e:4c:f9:bf:9d:05:ce:1b:62:36:ff:59:2f:39:12:75:
39:cf:c0:da:29:d0:21:5e:19:cd:d2:02:8c:3e:ed:db:0e:86:
d9:f1:12:2b:0c:05:12:d7:61:33:85:3a:43:45:48:51:de:c1:
53:e3:73:d7:65:27:b7:24:fd:65:85:41:12:ea:a1:37:e5:ab:
58:7b:89:f8:d4:08:61:ac:db:8a:37:6f:64:1b:3f:1c:86:44:
e5:fb:2b:1f:69:92:0c:a1:ff:80:a9:b9:33:5d:4b:5f:02:b8:
93:fa:ea:5d:0b:9f:39:bf:93:ec:d6:36:bc:6f:01:49:09:54:
e5:8d:e2:0b:43:b8:af:a4:95:1c:f6:b9:b0:62:c1:67:5c:28:
d6:5b:94:1c:72:e2:98:13:a6:b6:3a:b8:cb:a8:01:07:86:09:
49:0b:4c:c5:bc:8b:ee:23:28:ed:2f:6d:3b:12:7d:4d:4b:b2:
99:cc:96:39:3d:c0:aa:88:d2:fc:b4:78:48:34:14:5d:d9:f8:
d5:75:df:8d:e3:8a:4b:10:da:d8:1c:31:6c:86:bb:0c:89:73:
c8:a3:18:63:e5:c0:46:05:7e:31:32:a8:f8:af:b0:d8:0c:ce:
80:ab:64:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:43 2025 by rpki-client