Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
File: irYGzqebWr6BaDpjN5s5KJssq5M.mft (raw, json)
Hash identifier: wwkDSnK6+rpH+XO8cQkddkYHeuARA/upGaAPsZ/nmVE=
Subject key identifier: 3A:29:94:37:CC:FD:E0:45:D3:B3:AB:AA:A1:56:1F:7C:AF:87:0E:12
Authority key identifier: 8A:B6:06:CE:A7:9B:5A:BE:81:68:3A:63:37:9B:39:28:9B:2C:AB:93
Certificate issuer: /CN=8ab606cea79b5abe81683a63379b39289b2cab93
Certificate serial: 01988E0FDCEEFA5C65DBAE51B50CFDEC0BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
Manifest number: 07A8
Signing time: Sat 09 Aug 2025 09:01:00 +0000
Manifest this update: Sat 09 Aug 2025 09:01:00 +0000
Manifest next update: Sun 10 Aug 2025 09:01:00 +0000
Files and hashes: 1: Ol66WOHM5O0qZSOG9y7yOIgJsCo.roa (hash: tBXkTjKhKw+qp8WtoR3ZkzeeWQpNfDqudYVdDHWc62c=)
2: irYGzqebWr6BaDpjN5s5KJssq5M.crl (hash: 5jsQafytmJFZ5zTx4L9TfeRSaPosFaKJaZxBG0kWAoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:0f:dc:ee:fa:5c:65:db:ae:51:b5:0c:fd:ec:0b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab606cea79b5abe81683a63379b39289b2cab93
Validity
Not Before: Aug 9 09:01:00 2025 GMT
Not After : Aug 10 09:01:00 2025 GMT
Subject: CN=3a299437ccfde045d3b3abaaa1561f7caf870e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b2:6e:95:f1:f8:bd:25:02:cb:c6:91:f5:c7:
bc:ef:1c:16:ff:72:aa:8e:c4:9c:41:80:db:ee:13:
0d:db:1e:9b:54:86:98:ea:e8:06:d7:b2:83:5d:46:
df:f8:47:81:ee:80:ed:f7:72:8b:40:07:f2:c5:26:
31:fe:a0:86:06:77:16:d5:dd:92:ad:7f:b8:a9:a9:
18:9f:07:f0:6a:46:d4:20:df:6d:eb:2c:51:10:ff:
5b:44:9e:8d:d1:3e:3b:9b:f5:82:5f:cf:e5:80:94:
c1:cd:22:e2:40:94:e5:5a:0b:1b:b8:0f:92:10:fe:
71:76:df:1c:41:2b:bc:71:9b:cb:c4:63:94:2b:26:
a9:11:69:a4:b3:59:2f:97:04:51:3e:dc:7c:fa:b6:
05:c5:82:1e:4c:98:2d:cf:60:e4:57:72:18:a6:a2:
91:7e:67:5a:ea:f1:e8:d2:48:51:83:a4:f4:d8:52:
8e:94:2e:5b:4a:ab:cc:ef:d4:fe:2a:b0:0f:b0:c2:
d6:64:2f:bf:8f:db:fb:6e:7c:56:dc:4c:73:0b:6f:
b9:a1:5f:14:ba:c9:92:27:ad:7f:5e:26:3b:65:60:
72:1d:19:cc:96:18:08:15:de:59:f8:70:83:f6:19:
24:89:76:f4:8e:ef:10:27:2d:0c:70:dc:7f:29:b4:
f5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:29:94:37:CC:FD:E0:45:D3:B3:AB:AA:A1:56:1F:7C:AF:87:0E:12
X509v3 Authority Key Identifier:
keyid:8A:B6:06:CE:A7:9B:5A:BE:81:68:3A:63:37:9B:39:28:9B:2C:AB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8d:29:4d:7a:db:56:e4:91:dc:4f:c8:f4:04:88:78:46:48:
bd:35:1b:f0:3d:21:e5:ef:52:1b:54:24:b8:1b:01:39:40:ea:
df:1d:8c:b1:55:73:c9:e2:50:93:8f:21:08:60:91:03:4c:e7:
2a:54:41:40:e0:9f:05:f7:58:b0:10:bc:5d:5b:70:5a:29:7c:
a6:8d:68:12:1e:dd:df:55:00:ca:57:c0:86:4e:d2:6f:03:ae:
95:69:73:72:b8:0f:9f:9a:7a:90:52:ee:10:0d:95:dc:5d:5e:
0f:73:86:a7:4a:23:f8:c3:56:f7:f1:6a:49:ed:89:92:ec:02:
c5:5c:27:39:7a:37:31:66:5b:58:83:bb:6a:b3:db:f6:d7:60:
57:9f:f6:ab:64:bc:dc:55:7a:7b:43:da:ab:95:9d:e6:59:c2:
1b:85:eb:d4:a0:2c:81:59:21:86:0c:56:38:b5:93:14:af:c4:
38:e8:e9:40:6d:31:b7:24:b3:49:e2:5c:08:40:14:04:60:1f:
70:45:f5:09:3b:8c:70:88:7c:50:e5:89:54:4e:a5:07:a1:e7:
f6:eb:94:fe:c0:9c:91:08:2c:15:ca:26:d3:55:53:0b:07:1f:
74:b5:5b:3b:45:cd:d9:4b:2b:c9:ad:75:37:85:aa:4f:b6:81:
b1:9f:1c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:11:38 2025 by rpki-client