Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
File: cIPC79QTNUG2RbZheEzd1JxInFs.mft (raw, json)
Hash identifier: 9/9rd6kxKE4+wfwU/LbXm3xMyy4KKF7F+umxKDUvf7c=
Subject key identifier: 4F:42:F6:4F:46:47:33:5E:D5:DD:ED:87:AA:5D:78:BB:86:9F:EA:E4
Authority key identifier: 70:83:C2:EF:D4:13:35:41:B6:45:B6:61:78:4C:DD:D4:9C:48:9C:5B
Certificate issuer: /CN=7083c2efd4133541b645b661784cddd49c489c5b
Certificate serial: 019873E28FC788252272C968E0DAE3A8FE86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIPC79QTNUG2RbZheEzd1JxInFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
Manifest number: 84
Signing time: Mon 04 Aug 2025 07:01:24 +0000
Manifest this update: Mon 04 Aug 2025 07:01:24 +0000
Manifest next update: Tue 05 Aug 2025 07:01:24 +0000
Files and hashes: 1: WvOZemqg-ypHTTal2SMuUFTSuok.roa (hash: 2VHKeSfOF/+IIaH05goA5gK0Fp6ZUSiibX9gEoU9FvE=)
2: cIPC79QTNUG2RbZheEzd1JxInFs.crl (hash: wzgiZEZGuPjJ+1i7sWcveu5o4oEer59sLNPTyufn4MM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cIPC79QTNUG2RbZheEzd1JxInFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:8f:c7:88:25:22:72:c9:68:e0:da:e3:a8:fe:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7083c2efd4133541b645b661784cddd49c489c5b
Validity
Not Before: Aug 4 07:01:24 2025 GMT
Not After : Aug 5 07:01:24 2025 GMT
Subject: CN=4f42f64f4647335ed5dded87aa5d78bb869feae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:82:96:cb:e8:be:18:39:70:70:f4:be:2c:ac:
e3:5b:39:d3:76:ee:54:81:03:c0:dc:1c:c1:22:a4:
61:74:05:89:99:10:9d:27:23:ed:f3:bb:ff:d1:b6:
94:da:96:00:b7:3d:d7:4e:a5:c7:99:82:ec:a3:a0:
7f:60:e9:8c:bc:90:7e:ae:c6:99:03:d5:e3:68:e9:
69:10:41:5c:87:50:26:61:9b:de:f8:5c:b0:3e:c9:
72:12:a1:f7:2e:68:e8:b9:d8:77:c2:7a:23:1d:10:
fd:f9:35:6e:8c:75:87:ac:7b:26:3c:09:22:08:4d:
e6:40:9c:79:43:d7:90:25:12:de:6e:d3:5e:e6:a0:
d6:2c:04:65:52:8e:a3:f8:bd:64:02:ac:5e:59:72:
e3:39:49:84:74:64:33:b9:73:2b:f1:77:93:15:28:
45:0a:b4:25:db:b2:9b:85:b4:2d:6e:74:ba:56:ea:
8d:2c:cf:5f:f0:48:b1:5c:d3:2e:61:7d:6e:8d:27:
a2:cc:14:16:6d:09:27:99:99:06:b0:3b:05:07:ae:
53:10:ac:9b:a6:79:8e:70:c6:64:25:00:cc:7c:de:
3d:64:59:af:41:67:18:35:10:bb:d9:22:89:e5:da:
b3:88:34:e3:65:41:23:0c:71:5b:4a:26:df:f6:ac:
25:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:42:F6:4F:46:47:33:5E:D5:DD:ED:87:AA:5D:78:BB:86:9F:EA:E4
X509v3 Authority Key Identifier:
keyid:70:83:C2:EF:D4:13:35:41:B6:45:B6:61:78:4C:DD:D4:9C:48:9C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIPC79QTNUG2RbZheEzd1JxInFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d36409-8845-4fa3-9dbd-9834171eb7d6/1/cIPC79QTNUG2RbZheEzd1JxInFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6e:cf:b9:8e:11:e7:2e:6b:21:0e:c2:f3:93:94:c1:99:c5:
f5:b3:54:9d:37:f6:0e:ed:85:e5:73:71:62:95:89:69:01:64:
11:10:67:b2:8c:07:37:9f:f2:22:ff:4f:f7:4e:87:7f:55:15:
13:a2:8c:df:7e:5a:d1:76:c6:83:ed:e3:c5:7e:c1:a7:a6:76:
d3:c7:be:dc:1f:67:c7:de:8f:b3:39:cd:93:55:a9:8c:44:5b:
33:12:eb:e3:4c:df:67:45:3a:d4:79:b6:ad:78:bb:c9:60:ed:
99:cb:02:10:91:4d:9c:60:e3:8f:98:5e:4d:89:bd:4f:82:d6:
28:94:f4:f5:8c:dd:53:be:89:9e:22:21:55:0b:29:02:60:8b:
fb:fb:2c:1e:bb:9c:9c:c8:bf:99:d3:72:34:e9:bf:7e:f9:77:
90:a2:1a:30:d9:95:e6:fa:36:d4:d0:d8:d8:70:2f:70:20:16:
7c:34:6c:74:d6:ed:04:23:39:80:0a:80:20:b1:24:22:60:d6:
88:79:1b:f1:b2:70:12:5d:34:e7:9b:7e:d2:1d:08:3f:47:59:
b8:c7:71:df:fe:6f:f2:75:b6:dc:95:eb:7d:57:94:a4:a0:08:
23:b2:41:7c:4c:d9:9f:d8:e6:28:34:c8:02:a7:a2:71:5f:f7:
5e:3c:c5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:23:13 2025 by rpki-client