Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
File: iaQ4np9NXMjEhtaCK-8fRO987UI.mft (raw, json)
Hash identifier: yMgjkFZoo0r538KYWcWsUPalOMUmg5/r/JUihvqswZA=
Subject key identifier: 72:36:31:E4:98:B0:D0:A1:0E:B1:2E:4B:5C:EC:CD:A1:E7:0E:38:D2
Authority key identifier: 89:A4:38:9E:9F:4D:5C:C8:C4:86:D6:82:2B:EF:1F:44:EF:7C:ED:42
Certificate issuer: /CN=89a4389e9f4d5cc8c486d6822bef1f44ef7ced42
Certificate serial: 01987450DEE67591BE5BC76EAACBBCD3DB43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
Manifest number: 0125
Signing time: Mon 04 Aug 2025 09:01:53 +0000
Manifest this update: Mon 04 Aug 2025 09:01:53 +0000
Manifest next update: Tue 05 Aug 2025 09:01:53 +0000
Files and hashes: 1: 8ZpplWrhbVda_aSYHx2pbbAdBWI.roa (hash: KC0Osg8WEd8lVzUhmWMq6YDl/x9/ZL2h5Pd6qvq9PbE=)
2: iaQ4np9NXMjEhtaCK-8fRO987UI.crl (hash: vfyXkv/m1VcjdCDdU9zwjM3S+ttd11VowCxo+X0A6kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:de:e6:75:91:be:5b:c7:6e:aa:cb:bc:d3:db:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a4389e9f4d5cc8c486d6822bef1f44ef7ced42
Validity
Not Before: Aug 4 09:01:53 2025 GMT
Not After : Aug 5 09:01:53 2025 GMT
Subject: CN=723631e498b0d0a10eb12e4b5ceccda1e70e38d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:86:19:0c:f1:55:35:1e:f9:42:53:a8:d6:
c8:79:62:4b:b8:de:23:64:96:d8:92:ab:f3:bc:cd:
d3:cc:3d:14:79:87:91:1e:d8:f6:9d:c5:16:c9:ae:
ed:8f:57:91:05:82:f0:ad:5a:8b:b7:1c:d6:81:95:
fc:73:12:21:e0:8e:b6:2f:66:9c:4c:16:d1:42:8f:
18:93:a5:79:8c:79:a8:ec:5b:44:ae:8e:98:5d:79:
74:90:06:3d:eb:f5:2a:93:e0:2a:bd:d5:06:c7:db:
a1:b8:6c:02:53:a7:3d:44:5e:2f:5a:27:65:3b:c1:
a5:b8:fd:4f:a8:39:3c:6f:6f:13:52:52:ea:ed:b5:
b9:e0:2c:ea:58:19:a4:6e:0e:66:82:74:c3:f8:ee:
63:15:c3:63:3d:fb:dd:e9:74:12:40:36:ab:9b:0b:
0d:c1:e7:6a:cd:47:2e:0c:77:c7:ea:45:90:42:6a:
70:32:50:23:cd:fe:74:8f:80:bd:d5:3d:86:f3:56:
eb:ff:3e:e2:83:b2:bc:03:37:7e:1f:79:b3:34:f1:
68:6e:58:13:8a:63:6f:5c:fe:e0:f0:2c:5f:e3:c5:
82:40:0d:d1:3c:31:7d:88:3b:4d:88:c1:99:5c:24:
94:94:7f:72:66:83:46:e6:aa:ad:79:76:c0:8a:84:
ac:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:36:31:E4:98:B0:D0:A1:0E:B1:2E:4B:5C:EC:CD:A1:E7:0E:38:D2
X509v3 Authority Key Identifier:
keyid:89:A4:38:9E:9F:4D:5C:C8:C4:86:D6:82:2B:EF:1F:44:EF:7C:ED:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:45:26:80:19:09:6c:b0:06:8f:19:bf:f5:d7:04:f6:f8:75:
fc:2b:05:dd:89:d5:bf:fc:3d:95:02:c4:8e:24:e3:5c:cf:ba:
b6:d9:20:de:09:4b:fc:9f:1e:07:aa:ed:17:48:ad:de:d6:cd:
0e:5e:b5:c8:58:67:08:9f:ce:0d:9c:65:dc:86:11:29:4b:6a:
d8:a5:f2:2f:76:a6:66:cc:e2:43:cf:05:b3:4f:3b:83:09:da:
1a:94:88:3c:31:db:d3:96:98:8d:c3:a5:44:7c:9b:b3:65:5f:
ee:36:b0:08:ed:92:de:f2:dd:fa:c9:bb:ad:c8:84:c4:e4:f6:
c8:15:dd:24:66:18:b7:ba:fc:77:b4:79:48:1a:eb:b7:14:f2:
9b:ab:78:df:8d:ae:f2:6c:1e:dc:c1:2a:e5:14:c0:1d:22:de:
56:84:9b:85:8d:b3:86:27:42:dd:eb:29:c0:ef:23:d4:ab:a3:
0a:33:27:eb:03:77:cc:d7:7b:41:b3:c8:7e:6b:2c:59:6c:da:
f1:22:5c:62:12:56:eb:38:35:5d:f5:07:86:7b:d9:c3:9e:0b:
ea:5b:00:12:fd:0e:f0:bf:15:72:10:a5:ac:f8:16:4c:12:32:
99:f2:5a:62:a9:cc:27:1a:5d:c4:f2:02:f6:42:c3:86:0a:82:
d8:e2:ce:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:47 2025 by rpki-client