Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
File: iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft (raw, json)
Hash identifier: +ae5BPIpLIi8bOvKCslJMHMwKoXSR4uSU4RM0Tp4sH0=
Subject key identifier: C3:02:6D:BA:8E:AF:58:74:65:0C:AA:B7:F4:45:2F:10:DC:5E:86:4B
Authority key identifier: 88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07
Certificate issuer: /CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07
Certificate serial: 01987D8B341E95A9F64EA0D0D7F62507213A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
Manifest number: 15AF
Signing time: Wed 06 Aug 2025 04:02:11 +0000
Manifest this update: Wed 06 Aug 2025 04:02:11 +0000
Manifest next update: Thu 07 Aug 2025 04:02:11 +0000
Files and hashes: 1: KYtWtlgqE5B9oPVpa5XtMWrTy2s.roa (hash: S7OWPBmD/em3aOMLq183MKVqtbhQIKvOUTkiCEiDOio=)
2: iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl (hash: Finytx5tMaflhHthen1k/1KcoNzhvdAnc6YBxIBC8O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:34:1e:95:a9:f6:4e:a0:d0:d7:f6:25:07:21:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07
Validity
Not Before: Aug 6 04:02:11 2025 GMT
Not After : Aug 7 04:02:11 2025 GMT
Subject: CN=c3026dba8eaf5874650caab7f4452f10dc5e864b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:e4:8a:c1:43:29:3f:22:ef:97:bd:1e:b3:
11:e7:92:a9:78:f6:ce:22:f4:3b:14:af:de:8b:e4:
3f:8c:2a:e7:db:f1:d2:25:80:7d:39:3b:71:37:c2:
71:29:d8:ed:b8:b3:01:c8:aa:df:b0:89:ca:ba:32:
83:d7:24:f3:13:77:03:38:be:14:6e:af:c3:85:d4:
a5:8e:fc:67:ed:83:9c:e9:03:f8:c5:0a:d0:60:b5:
b8:a8:75:d2:31:51:67:b2:50:7d:a9:d2:a9:83:81:
df:f1:44:b0:dc:c6:0b:38:81:44:f5:b2:b9:fd:f7:
45:1a:6d:5b:85:0b:f5:72:1e:83:d9:31:6b:ff:36:
45:12:4b:bf:c5:46:24:d5:8d:83:4a:7e:b0:8c:17:
9b:42:6b:82:80:0b:72:78:c9:f8:db:98:6a:c0:06:
51:cc:2a:10:3b:c1:d0:44:12:6f:28:29:2f:4c:61:
d2:d7:cc:83:a3:5f:c7:b4:2a:c5:f7:2b:d3:c6:fa:
2d:66:d1:b0:f8:b7:93:1f:a9:90:32:f0:01:10:0d:
5f:eb:2e:e6:73:4d:42:98:0d:32:0c:d9:c0:c7:7c:
08:4b:37:e6:db:ae:8f:0a:b6:d8:df:26:6c:52:2c:
14:72:df:97:3f:8e:8b:e1:47:ba:8d:a7:a4:a0:1d:
c4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:02:6D:BA:8E:AF:58:74:65:0C:AA:B7:F4:45:2F:10:DC:5E:86:4B
X509v3 Authority Key Identifier:
keyid:88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:07:d3:28:3f:7f:f6:17:6a:ab:8e:24:25:6f:e7:c3:a7:31:
79:b0:9a:27:d0:54:f0:1f:5e:ff:83:1d:93:4f:86:1c:de:1e:
c3:53:f7:f8:77:19:af:09:a6:30:18:4a:64:a7:75:03:05:e0:
f5:32:66:37:85:0e:b7:bc:26:ee:d3:44:f1:31:18:e9:bd:d6:
5a:44:c1:ee:99:aa:ad:a0:ee:ad:b1:f1:61:7b:1c:6f:81:60:
d2:71:44:94:9d:f5:9c:a3:31:52:b6:43:c8:86:53:65:e0:79:
10:7e:7a:0b:ee:2d:04:3d:d6:67:27:22:9a:ce:66:93:d4:32:
1c:3f:70:ab:32:9b:61:ba:d2:cd:0d:f1:b9:d6:ae:64:d2:c5:
55:20:2b:8c:4a:d6:9c:6b:1c:ee:db:a0:ca:63:48:eb:96:02:
6b:7f:36:03:d9:58:94:f4:7f:38:32:14:ae:05:02:aa:f3:1b:
0f:d6:af:ac:67:b3:ca:e2:5f:bf:b1:50:7b:6b:9a:22:b4:85:
dd:40:42:6f:11:c2:ff:0b:5f:c2:8d:58:0e:8c:8f:1f:b0:20:
a2:88:a0:dc:14:f2:e3:9c:29:bb:89:1a:03:d4:07:4c:b5:f4:
ae:b3:26:40:f0:fe:c6:af:01:bc:cc:00:b0:97:e1:a1:b7:7f:
cd:87:43:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:53:03 2025 by rpki-client