Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
File: i58lgoNRffGYWTiOE7rRrgJopfs.mft (raw, json)
Hash identifier: +HsCdljOGP43ncJRcaXH8vHlaZZ9dVLw/6dfj8eRjQk=
Subject key identifier: 1A:CD:04:13:44:F7:0D:F6:B9:43:EB:0A:41:3F:8B:E9:21:77:51:FF
Authority key identifier: 8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
Certificate issuer: /CN=8b9f258283517df19859388e13bad1ae0268a5fb
Certificate serial: 019897129D3F6314B8054036B3AE51CF9534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 03:00:36 +0000
Manifest this update: Mon 11 Aug 2025 03:00:36 +0000
Manifest next update: Tue 12 Aug 2025 03:00:36 +0000
Files and hashes: 1: aUEo_6I1NIoEpJrfmKA_-34y2x4.roa (hash: qf/pPhy348tojuz4A7OR24KHAsQ8d6peWd65flxSoJ4=)
2: i58lgoNRffGYWTiOE7rRrgJopfs.crl (hash: yVsd5o4xb9lf4nG4Z6NYDPIT8MajL7vS6nhil59BZIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:9d:3f:63:14:b8:05:40:36:b3:ae:51:cf:95:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9f258283517df19859388e13bad1ae0268a5fb
Validity
Not Before: Aug 11 03:00:36 2025 GMT
Not After : Aug 12 03:00:36 2025 GMT
Subject: CN=1acd041344f70df6b943eb0a413f8be9217751ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ee:4e:89:bf:50:a5:66:ba:43:07:d5:f7:b7:
8f:9b:27:62:55:01:24:52:3c:29:0a:76:b3:9b:e0:
a0:0d:17:4f:95:43:36:31:62:e0:a9:ae:22:b1:e1:
ff:a3:6f:62:2d:2a:23:09:1b:d6:e6:a4:bb:a9:df:
c4:48:45:31:86:c7:d6:a7:34:1b:74:99:ff:7f:c7:
97:1b:1b:4e:65:c1:1a:24:cc:4d:5c:8c:b0:54:6a:
21:54:8d:5d:0b:01:84:6a:42:29:ed:ee:75:f9:f1:
b4:24:75:d3:22:c9:d4:1d:5e:27:f4:84:7f:19:89:
f9:e8:9b:9b:b4:56:d4:36:6c:42:9b:2e:92:4b:e1:
89:63:89:03:4e:1b:36:87:ce:7e:ac:df:4a:8d:fa:
1a:ac:e2:2d:6c:8c:9d:b9:76:55:cf:7b:6d:b5:30:
09:b8:da:f3:03:e5:97:7c:d3:66:d9:3d:a6:fb:67:
bf:20:c2:24:6b:dd:36:d1:17:1f:96:89:2b:f3:bb:
95:44:75:e0:e6:2d:46:eb:c5:c0:51:52:b3:cd:fa:
fb:52:8b:ad:3c:b3:23:5e:43:9c:cd:52:05:56:6e:
36:a3:3c:1d:dd:0f:0f:de:d8:5d:48:73:c3:b4:b8:
54:14:8f:db:a2:6a:45:31:a3:d1:ec:a8:e2:b3:b3:
45:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:CD:04:13:44:F7:0D:F6:B9:43:EB:0A:41:3F:8B:E9:21:77:51:FF
X509v3 Authority Key Identifier:
keyid:8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:09:c5:f1:e3:52:80:35:3e:5f:c2:21:42:d8:b7:0a:9c:64:
41:70:03:c5:e7:ee:28:bc:c9:08:05:58:6c:24:80:6e:fd:26:
ca:27:38:98:78:f1:29:51:43:bf:a8:be:64:86:5d:50:b9:d5:
54:d7:22:28:56:b2:52:59:78:f8:f1:28:32:b9:b1:6d:6d:d6:
25:33:e8:cc:7b:6f:48:24:1e:e6:20:41:28:44:6b:fc:66:e3:
58:84:f9:50:2c:c3:c2:ce:a5:5e:7b:0c:d2:65:da:16:ca:12:
82:30:ea:2a:f8:eb:16:82:2a:68:dc:cc:60:4d:d1:b1:4a:59:
d0:2b:1b:a7:2e:cd:28:d6:14:f9:20:45:49:25:5e:0c:ef:02:
51:ba:c5:5a:18:df:92:fb:e2:40:5e:96:46:79:24:86:15:ed:
00:94:f8:74:2f:5b:a4:0c:c3:0a:e7:ee:db:5b:5a:02:a7:4c:
4d:40:88:fa:27:eb:c7:a6:ee:a7:21:47:54:ad:7f:66:14:d6:
de:46:ae:60:c1:c7:4c:f3:7a:24:9d:d9:bd:be:81:9a:13:d8:
a8:5c:fd:61:3c:e5:01:8d:66:3c:b2:9f:6f:84:d4:98:fb:5f:
70:0f:0d:ce:7a:32:50:76:49:d9:8f:13:1d:2a:4f:db:b5:67:
b7:93:6d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:28:17 2025 by rpki-client