Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
File: iuS5P-tx3eKCO3DH27eeD5m1bBs.mft (raw, json)
Hash identifier: QOeWbp/bRRHzsetpm2CPcJtUetEY9bZmyb5fJ7wCkJo=
Subject key identifier: 11:E3:3F:C0:0B:0A:8D:FF:C8:79:C5:C2:A5:1C:E3:E6:79:14:C2:81
Authority key identifier: 8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
Certificate issuer: /CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
Certificate serial: 019889FC9B5F3485CCCCC947D0BCF67E9BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
Manifest number: 093A
Signing time: Fri 08 Aug 2025 14:01:29 +0000
Manifest this update: Fri 08 Aug 2025 14:01:29 +0000
Manifest next update: Sat 09 Aug 2025 14:01:29 +0000
Files and hashes: 1: J2gFJxTXec_tCl5fYmT5ueu90dA.roa (hash: eqh0jr48WZnOgc9VcsakSv2fxPv1f923UQBSwi0u554=)
2: iuS5P-tx3eKCO3DH27eeD5m1bBs.crl (hash: DRMSIH98hIXKg++Rk+oa8voQv+98suiBVb+NA9gq8X0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:fc:9b:5f:34:85:cc:cc:c9:47:d0:bc:f6:7e:9b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
Validity
Not Before: Aug 8 14:01:29 2025 GMT
Not After : Aug 9 14:01:29 2025 GMT
Subject: CN=11e33fc00b0a8dffc879c5c2a51ce3e67914c281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e7:4c:31:e7:2b:f3:52:06:9d:0f:15:61:e3:
ef:b5:6d:a6:1d:c0:3a:2f:2f:71:93:c4:e7:fd:5f:
1b:3d:82:0a:e0:8c:5c:06:f8:36:04:9a:36:94:b4:
c9:19:f5:9e:a5:0b:d0:88:35:6d:1b:f2:cc:95:76:
26:39:4a:a7:b8:b8:7b:31:1e:6f:93:cb:ad:4e:9d:
d2:47:a5:1f:e0:5d:06:29:1f:87:59:32:c9:f8:6f:
71:f4:79:e9:71:74:c4:cf:05:21:ad:7b:6f:5e:ff:
1d:f9:d5:d4:8f:53:b0:bf:01:7c:e3:b3:75:c9:44:
7b:17:31:49:62:c1:ef:59:82:20:52:a0:eb:fd:bd:
ee:0d:9f:02:87:fb:fd:c8:78:c3:86:8e:c9:e3:58:
38:a6:11:03:53:83:76:a3:99:68:3d:1e:d5:24:d5:
09:b4:99:7b:5e:d3:0a:19:24:79:7a:76:26:8b:37:
64:fc:41:65:35:bf:e5:54:3e:10:1d:8d:3e:9b:f7:
21:13:05:89:bf:86:3c:95:b0:3e:a8:4a:47:9e:bf:
88:dc:71:05:94:ef:1c:96:6a:c1:ee:a6:7b:10:f8:
e7:ca:32:01:e6:13:25:46:db:ce:cf:c6:9d:14:4a:
90:35:9f:c0:1f:f6:1c:1c:44:f1:e2:46:ad:4e:32:
7e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E3:3F:C0:0B:0A:8D:FF:C8:79:C5:C2:A5:1C:E3:E6:79:14:C2:81
X509v3 Authority Key Identifier:
keyid:8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6e:e3:c0:c1:76:fd:a6:31:24:e0:0e:62:65:b7:8d:80:be:
f3:33:22:d6:c9:eb:e7:76:65:50:c2:a6:1e:71:0c:e3:88:6c:
2c:a4:51:b9:e1:5a:c8:61:19:4c:84:25:a3:06:b2:a2:c7:83:
d3:b4:15:1b:31:fa:fa:39:50:96:d7:31:10:36:4d:85:cc:f2:
be:19:f0:7e:a0:47:ef:08:99:1f:e7:b8:ad:c1:f7:f1:1e:6e:
6a:46:a9:2f:fa:08:0a:6e:63:a2:51:31:93:65:dd:cf:1f:be:
31:69:d0:fc:84:f6:6c:74:0a:99:78:0a:ee:81:6b:a9:b5:28:
bd:f5:0f:87:26:e6:1d:f2:0c:e5:e5:ac:39:67:01:16:c1:77:
86:1d:27:4f:de:f2:db:d4:0c:70:c0:56:4c:e8:c9:10:0e:a6:
7f:9d:97:8e:81:46:7b:d9:c4:37:ba:81:f9:56:7e:32:63:46:
8a:54:0e:d1:00:e1:3c:c8:17:cb:e3:4c:99:a5:5e:4f:25:56:
cc:66:a9:94:61:ca:a5:81:c8:db:ff:ac:89:5d:f7:e4:40:53:
ab:c8:36:35:47:ff:ab:b6:a2:28:10:e6:9f:a7:03:85:04:5e:
8a:e9:6e:b5:f5:15:65:55:4a:77:9f:c4:55:7c:1e:ee:2c:d2:
c3:24:51:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:35:02 2025 by rpki-client