Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
File: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft (raw, json)
Hash identifier: Y1kVwofX79CrtGVYrGUfg74a86buGgTBUfRKHGD0+es=
Subject key identifier: E8:52:04:E5:E7:2C:04:38:5F:E0:3A:B0:9B:13:A1:40:19:C3:0F:93
Authority key identifier: 88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
Certificate issuer: /CN=88e719f426793b1e9063771460abd311a3dff116
Certificate serial: 0198745081F9959119D1AD04A215DD66E486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 09:01:29 +0000
Manifest this update: Mon 04 Aug 2025 09:01:29 +0000
Manifest next update: Tue 05 Aug 2025 09:01:29 +0000
Files and hashes: 1: 2JOqb_FcM3JCaikWzh1QzLM3NNs.roa (hash: isQtSQoVI4VnIJhK4p6fvX5w7lFtKPVqkwJW/rfKCwA=)
2: KkqNZ54Qewj5mCBLo3rtzCSFt7g.roa (hash: Rbv/KvRW9C13yYdCBXyUxqLUAuWNRC3szrxFy+NiiA8=)
3: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl (hash: FX/SUz+ZNnYP6WkijV3OYIrCXHeEYKMsM0G/Axb6h/0=)
4: soZKqGzihNQNfxzcrDh_Qn-1Tnw.roa (hash: +H581vOHkrLuu+UEmJR0K8H+S0wh9yACSCN32HI4jio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:81:f9:95:91:19:d1:ad:04:a2:15:dd:66:e4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e719f426793b1e9063771460abd311a3dff116
Validity
Not Before: Aug 4 09:01:29 2025 GMT
Not After : Aug 5 09:01:29 2025 GMT
Subject: CN=e85204e5e72c04385fe03ab09b13a14019c30f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:7f:5e:35:bd:4e:58:4c:ad:52:5b:8f:2d:
bc:11:36:bf:cb:41:ca:4a:f0:68:ae:99:fd:1d:7b:
1a:f0:be:8f:fe:62:62:25:a8:ce:f5:60:01:e4:67:
e7:19:64:5c:4a:c5:f3:27:da:8e:fd:63:cf:5e:67:
46:a3:8e:4a:05:96:7f:fa:4a:5c:17:57:5b:6a:8c:
90:f5:1c:e6:91:b9:4d:fc:06:3a:b0:cf:32:10:ab:
c5:81:a9:ae:5c:55:7d:c8:76:6e:a0:71:92:a6:2a:
3c:70:fb:23:2c:00:be:62:1b:de:7d:30:c8:b6:74:
3e:fe:85:3f:1d:a0:0e:d8:7b:43:be:02:d3:3c:e7:
a9:41:91:b2:ef:da:0a:00:b1:e3:91:c8:ca:4b:91:
88:e1:34:c4:6e:68:ec:a1:8f:70:8e:71:fe:e2:23:
0e:4f:7f:a9:0b:77:08:43:c3:aa:45:45:39:11:24:
91:19:77:f3:45:35:25:7e:16:cf:bf:c5:53:8b:d4:
43:5e:e6:cf:f2:53:44:4d:ef:9f:a5:15:c5:16:aa:
27:77:5c:93:9b:e0:42:57:cf:d4:bc:8f:8e:ca:cd:
18:d4:09:2c:b1:d9:65:a6:cf:68:2e:a5:be:1c:75:
b8:6d:19:36:f9:b3:5f:f8:5a:8b:93:9c:07:83:34:
b2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:52:04:E5:E7:2C:04:38:5F:E0:3A:B0:9B:13:A1:40:19:C3:0F:93
X509v3 Authority Key Identifier:
keyid:88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:27:ae:ec:15:8b:9d:70:7d:10:ea:cc:bd:f9:ea:dd:bf:51:
46:82:d0:d7:9c:2f:e5:47:61:6d:66:84:8b:00:bb:1e:b9:42:
37:7f:ab:14:15:11:45:42:e7:e0:01:a1:fa:e6:f2:aa:19:26:
c2:0b:6b:97:de:41:bd:c7:5b:6c:07:c5:2e:a2:84:21:1a:98:
a7:2a:6c:5e:7d:c7:7e:40:39:2c:8c:0b:c3:ef:4b:55:4e:e2:
12:4e:fa:3d:55:80:b5:49:29:35:3a:f4:f1:5d:f4:8d:50:70:
1f:a7:c5:9d:65:07:a0:59:2c:1d:64:1a:bd:2b:f2:67:3c:96:
ef:f0:b0:ad:9c:93:f5:4c:d1:d7:16:15:5c:18:9e:89:cd:ac:
d8:ab:2f:cf:86:88:f1:87:3b:85:8f:dd:4c:99:4c:04:d1:25:
8d:61:a4:6a:12:c7:d0:b4:fb:34:bf:1d:1b:9e:2c:b0:ae:c9:
02:98:98:76:7a:ad:a6:7a:9e:46:de:9a:d7:e6:dd:df:4c:0d:
82:98:cc:81:2f:fd:21:49:ee:61:0e:7f:13:11:a3:68:66:6f:
95:03:19:e8:c7:0b:a0:5b:74:89:c0:9f:27:a5:09:17:c5:f1:
01:84:ed:b2:c6:c8:a6:ab:e8:c0:e5:95:e4:6a:c4:a6:dc:38:
bc:b6:09:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:08 2025 by rpki-client