Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
File: IAs7I0VxCglvajTX8Im-seP8U4g.mft (raw, json)
Hash identifier: VxonjmJeMVB/9FRa0tDHEgFJX05x59YtqoIWitR1rDk=
Subject key identifier: 99:02:BF:D4:C8:9B:83:EA:B2:A5:E9:C1:AE:F5:83:34:0D:53:9D:93
Authority key identifier: 20:0B:3B:23:45:71:0A:09:6F:6A:34:D7:F0:89:BE:B1:E3:FC:53:88
Certificate issuer: /CN=200b3b2345710a096f6a34d7f089beb1e3fc5388
Certificate serial: 0198733CEC9CE49F6237EC0320DEF0A0A625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
Manifest number: 0438
Signing time: Mon 04 Aug 2025 04:00:29 +0000
Manifest this update: Mon 04 Aug 2025 04:00:29 +0000
Manifest next update: Tue 05 Aug 2025 04:00:29 +0000
Files and hashes: 1: 3twUXXIP_KmiWrUBvyT5612yZdA.roa (hash: i8TOwD+JQVgsZynDBd1FE+mCLj4YL4GBf0bnlreCNh4=)
2: IAs7I0VxCglvajTX8Im-seP8U4g.crl (hash: vR1loAION3/EYaSIJatwXL3CjrUufAax9MV0Ic8bLuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3c:ec:9c:e4:9f:62:37:ec:03:20:de:f0:a0:a6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200b3b2345710a096f6a34d7f089beb1e3fc5388
Validity
Not Before: Aug 4 04:00:29 2025 GMT
Not After : Aug 5 04:00:29 2025 GMT
Subject: CN=9902bfd4c89b83eab2a5e9c1aef583340d539d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:16:1c:17:c9:de:80:ca:15:24:82:c2:36:25:
65:73:d9:ab:1a:c9:78:34:c0:81:51:ff:1c:e6:87:
d2:f3:18:e7:c3:09:3c:6b:08:ad:75:6f:b9:be:c4:
1f:b2:c4:fc:da:28:44:17:34:3f:0c:ab:7e:33:86:
a2:cd:ef:1e:b0:68:90:2f:ed:68:e9:a2:0a:4a:88:
b6:ff:8d:43:7c:a0:f8:a6:0a:24:37:87:54:43:af:
3f:98:2d:f7:58:e0:f1:af:36:47:ab:49:f3:e3:f5:
14:6c:d9:e0:40:bd:7f:3a:09:cd:2e:36:fa:15:02:
94:b4:6e:7e:c0:fc:59:3b:9d:e3:52:0c:40:78:f9:
ce:95:e9:6e:d0:42:49:a9:a7:04:40:09:bc:6e:7f:
dd:23:33:3a:04:b5:e2:8b:78:5c:1d:18:5f:81:73:
8f:01:88:a9:d7:40:b2:f3:f5:47:69:c7:43:90:a0:
a9:91:b6:88:15:52:ca:41:c7:40:66:cb:74:26:44:
be:9d:02:e7:17:a7:ac:3f:ec:23:5a:fb:42:95:1f:
6d:d7:b5:0a:09:90:b9:78:fe:0b:01:5d:33:36:26:
a7:3b:0a:70:8b:cc:26:1e:d4:04:5f:19:02:23:25:
13:4b:7e:b9:0e:22:9b:97:d9:d8:f3:dc:68:db:a0:
84:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:02:BF:D4:C8:9B:83:EA:B2:A5:E9:C1:AE:F5:83:34:0D:53:9D:93
X509v3 Authority Key Identifier:
keyid:20:0B:3B:23:45:71:0A:09:6F:6A:34:D7:F0:89:BE:B1:E3:FC:53:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7d:e5:6f:b4:f5:1d:57:39:14:42:6a:11:17:3d:4e:38:97:
c1:46:c0:a6:da:39:38:f4:f1:05:86:42:b2:6e:29:f5:8e:5b:
77:31:b0:04:9e:71:4d:8d:03:7e:3f:20:cd:71:21:68:99:5b:
40:e1:a0:f6:17:45:fd:87:24:04:05:9d:54:07:e7:25:a6:ca:
e5:a1:78:bc:20:a8:23:3d:5c:80:e6:29:5c:19:36:e0:90:69:
42:8a:44:9a:5b:24:ad:1c:80:91:6f:45:52:67:28:ba:64:7c:
d9:69:17:6f:50:b7:69:b4:4b:80:b7:fb:87:eb:59:e0:11:09:
98:c2:4e:86:62:89:c9:ac:12:f4:14:7c:be:bb:bf:3b:d5:69:
92:26:1e:ba:34:c6:6b:0f:e3:fd:e3:d5:5a:94:bc:63:33:e3:
40:37:83:16:c8:40:fb:73:1e:ca:36:6e:e8:27:c4:71:ff:f1:
ca:57:ad:f4:ef:28:d5:4a:d0:c1:49:a3:f8:d3:77:3c:b4:c7:
a8:db:60:e1:86:a3:27:e4:c5:1e:e6:75:c8:76:a6:73:06:01:
34:44:0b:67:7d:7b:9b:9e:37:8c:67:69:d8:f5:83:4e:ef:3b:
20:13:ad:18:63:31:6f:91:ee:7c:0c:cb:5e:b9:0c:5c:fe:5b:
50:db:eb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:04 2025 by rpki-client