Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
File: iTmr9x7sEMXZBgn8qfNMuF09VE4.mft (raw, json)
Hash identifier: fPg1j/F92CW0Pezjo4DMSNcGk0bQuarzI1KU2rR7j0M=
Subject key identifier: B9:E0:0D:2A:32:F8:76:FC:41:CB:18:CE:2B:D5:1F:A3:8D:B9:9F:46
Authority key identifier: 89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E
Certificate issuer: /CN=8939abf71eec10c5d90609fca9f34cb85d3d544e
Certificate serial: 019872CF23B1FB77A96B98A0F4B22210AC6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
Manifest number: 0703
Signing time: Mon 04 Aug 2025 02:00:34 +0000
Manifest this update: Mon 04 Aug 2025 02:00:34 +0000
Manifest next update: Tue 05 Aug 2025 02:00:34 +0000
Files and hashes: 1: aOLkUwKlyZCWJaSS1dakY6JU8B8.roa (hash: 9gmA62Oo7ZhqLy8gi4PS0qhVisTPHP1+xk49Xpd1+EQ=)
2: iTmr9x7sEMXZBgn8qfNMuF09VE4.crl (hash: lf+tSjbT9/qsx35gdKy3O537fI6vNbKv25px5gUd2q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:23:b1:fb:77:a9:6b:98:a0:f4:b2:22:10:ac:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8939abf71eec10c5d90609fca9f34cb85d3d544e
Validity
Not Before: Aug 4 02:00:34 2025 GMT
Not After : Aug 5 02:00:34 2025 GMT
Subject: CN=b9e00d2a32f876fc41cb18ce2bd51fa38db99f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e1:f1:e7:d8:fe:53:fa:16:9f:ac:12:06:65:
79:f1:24:48:45:cd:62:d2:ff:27:6f:e1:f0:8b:24:
e1:3b:9c:d9:0a:24:a4:36:4a:0b:02:94:33:ec:52:
8d:d9:43:d0:c6:1d:04:99:be:75:d7:15:87:c0:8b:
d9:54:5c:4b:75:a0:a7:45:dc:47:5d:15:0a:0a:69:
b9:34:3a:7f:61:24:2e:a8:84:8b:54:8b:32:07:1c:
d6:fc:a4:6e:be:59:9f:f1:83:3a:de:75:11:fc:50:
5b:cd:7a:0d:9d:4e:9f:fe:26:0e:73:1e:a2:77:55:
ab:31:4a:b9:70:38:25:44:85:6c:8f:f8:e5:0e:a3:
5a:80:dd:6c:01:95:14:ea:87:a4:9c:ef:0e:06:d5:
42:a2:f6:b2:e5:27:f6:21:58:c4:b6:94:9e:2f:b7:
75:94:55:4d:75:59:fd:7e:35:db:1c:13:d2:c9:27:
83:b5:54:2c:b4:13:17:88:27:b9:9d:36:af:f2:af:
93:18:ad:a6:c7:2b:0a:3b:37:36:f3:18:7a:ae:0a:
52:f2:6a:f9:71:b3:11:74:1e:0f:03:58:b7:25:8e:
fa:a9:53:f1:ee:94:00:dd:ed:6e:1e:2b:61:60:22:
1b:a1:a7:64:74:98:84:67:80:a5:e7:5d:7f:51:d8:
e8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E0:0D:2A:32:F8:76:FC:41:CB:18:CE:2B:D5:1F:A3:8D:B9:9F:46
X509v3 Authority Key Identifier:
keyid:89:39:AB:F7:1E:EC:10:C5:D9:06:09:FC:A9:F3:4C:B8:5D:3D:54:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTmr9x7sEMXZBgn8qfNMuF09VE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/5d1852-afa8-45c5-a6b7-b5ab78960c6b/1/iTmr9x7sEMXZBgn8qfNMuF09VE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:50:60:1a:b3:08:34:98:ed:e7:8e:2d:0d:98:5b:f5:8c:da:
d4:a1:fd:e0:8c:44:62:68:f7:b5:6a:86:16:56:06:26:70:b2:
70:2a:44:1c:22:0a:0c:0e:d0:d7:16:55:be:63:a5:a0:28:12:
b6:b7:0c:54:72:59:eb:5a:7a:d7:c3:16:9e:2c:c0:66:3f:6d:
27:79:0e:72:fd:bb:f4:58:68:e6:4c:74:ad:ce:7c:49:40:8f:
67:cf:6f:05:95:8e:f3:85:06:14:48:c1:4c:b0:dc:d4:6b:e3:
13:1d:1e:79:3f:7e:c4:0c:fd:8b:19:6b:17:11:9f:39:0a:60:
c9:42:d0:b3:2d:b5:e5:30:4b:d4:91:e0:cb:ba:1b:17:49:c8:
e1:db:17:24:d8:66:90:67:21:22:fa:18:0e:ee:a8:cf:d0:f6:
79:88:cc:6c:12:55:37:84:91:73:60:c5:e8:e9:bf:03:d6:81:
ee:14:a2:c6:18:6d:79:1b:f7:64:43:c6:95:4d:ff:20:bb:cc:
73:f9:3e:39:6d:10:fe:4a:fe:cd:d3:a7:ab:76:de:21:60:2e:
a1:bb:21:ce:22:11:07:aa:54:40:73:32:ce:95:21:cd:80:fc:
26:c6:fc:96:8a:1b:73:58:09:f9:34:4a:2a:6a:7b:b9:64:1f:
20:1b:2e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:52 2025 by rpki-client