Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
File: iwVEhe5ixvGTlhPLogZp7vRQT3k.mft (raw, json)
Hash identifier: jQOSc7ax26pWG87mDryuA0PGxreSgpha7EQiQCsH6Gs=
Subject key identifier: 7F:18:E1:6D:E3:6C:AF:EB:E8:06:99:35:E3:04:F4:74:18:18:E2:56
Authority key identifier: 8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
Certificate issuer: /CN=8b054485ee62c6f1939613cba20669eef4504f79
Certificate serial: 0198898E4851E4794BDAD11E763C419CDDCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
Manifest number: 0C13
Signing time: Fri 08 Aug 2025 12:00:59 +0000
Manifest this update: Fri 08 Aug 2025 12:00:59 +0000
Manifest next update: Sat 09 Aug 2025 12:00:59 +0000
Files and hashes: 1: FmWPQsDQv1I31vsCB-XoPwOttAE.roa (hash: xjF9H58/BASj6CKq3v5pVooMgpKIb+h+UMw0XGNXQo8=)
2: W0D9WIXmr4DG_xEj-xUZT82-dxQ.roa (hash: fBvWuzB9wp05SoO5x+Vb/EneDFqD/kJHT0KgvrAsF24=)
3: aheTt6_pS0K22xA67glREELod8A.roa (hash: qWC2pzWM7a75jc5rNLOSS10p2/VCBqYrjSpxRU7D9zI=)
4: g_SxF-_E_VpwVrwNdmKsnzbOYaM.roa (hash: wSo0WU3KC/Wo2i+eQ7vlG4IlKtTmfnJLRouHYXZqnO4=)
5: iwVEhe5ixvGTlhPLogZp7vRQT3k.crl (hash: Q0FkizlnlSTTuGptMmUPVPaFzlvbsi3MvZqnhfrrV9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:8e:48:51:e4:79:4b:da:d1:1e:76:3c:41:9c:dd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b054485ee62c6f1939613cba20669eef4504f79
Validity
Not Before: Aug 8 12:00:59 2025 GMT
Not After : Aug 9 12:00:59 2025 GMT
Subject: CN=7f18e16de36cafebe8069935e304f4741818e256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6b:d3:f3:87:d7:53:f8:40:ab:3e:bb:ac:79:
31:02:b7:4c:3f:f3:09:54:7f:26:bd:df:bc:68:5e:
2b:0b:30:5b:b0:e0:71:c5:56:a2:78:d9:da:31:2e:
62:1c:0d:c4:25:df:1e:11:22:d4:83:0f:41:7e:c8:
d8:67:8b:e8:6d:6c:29:09:1d:43:d9:f1:47:69:9e:
be:3f:3c:1d:51:8c:33:59:36:86:a0:a4:69:db:cd:
cb:3c:83:8d:59:c2:5d:1b:52:5b:bf:c8:74:04:88:
26:d1:26:f2:c6:53:a4:45:16:30:92:1c:9a:9c:4c:
22:cb:7f:a0:e3:40:fe:31:27:ac:88:d0:d3:b6:bb:
95:67:e9:2a:98:97:8c:f5:91:45:84:6c:be:f2:53:
52:e4:af:14:5d:c3:83:c6:88:c3:9e:61:4a:41:73:
55:a4:86:fa:1b:e2:d1:55:fe:e5:ab:e4:61:a5:56:
8a:98:06:f0:a3:ff:a5:9e:c0:c5:bb:2d:59:15:eb:
2d:4b:08:6f:53:54:f3:34:94:03:c4:d9:0f:19:87:
e6:0f:95:67:45:a3:07:0e:02:8a:70:4d:46:27:8f:
39:f2:90:5f:fd:5b:20:c4:93:91:ef:69:47:60:6f:
40:f5:47:05:a3:88:44:b5:ac:38:ec:fb:1d:ef:60:
9d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:18:E1:6D:E3:6C:AF:EB:E8:06:99:35:E3:04:F4:74:18:18:E2:56
X509v3 Authority Key Identifier:
keyid:8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1c:30:cd:ea:a5:31:d5:71:92:fe:f2:4c:0d:48:7d:26:cc:
81:52:b0:58:08:2f:77:59:1c:b2:e6:a8:6a:b7:ec:39:83:5c:
35:98:9b:52:51:f4:58:e3:94:79:ac:89:d7:68:f2:46:c2:ad:
58:f5:f6:cf:25:65:20:a7:fd:5e:9c:12:28:bb:8c:a6:85:42:
dd:94:51:66:97:86:d8:92:a9:49:75:63:95:3b:e5:8f:61:1a:
41:f6:fc:e1:12:3a:c9:8d:33:d9:df:53:fe:4a:0e:04:87:10:
78:53:28:a0:37:5b:58:39:1a:28:71:57:1c:0b:e5:f2:f1:e8:
99:b8:31:0e:61:68:7a:31:86:fb:d4:2c:a7:5d:77:c4:47:a9:
59:65:f4:82:74:0d:86:25:01:e9:fe:99:05:fe:68:69:67:03:
fb:4d:d8:6a:e7:e2:e1:3b:39:02:e7:18:f9:d0:f3:58:58:fc:
5f:fb:0c:26:3c:8f:ee:5b:ac:73:b3:91:9f:35:08:f9:23:07:
7b:9f:c3:1c:13:c3:62:7d:1d:6a:ad:3c:93:82:f0:03:35:1d:
96:6e:73:40:e9:89:9f:f4:97:50:db:c8:ae:59:bd:6b:da:b3:
8b:23:41:05:fd:0d:ad:1b:0d:a1:01:01:4d:78:71:cf:2e:96:
50:de:b6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:46:45 2025 by rpki-client