Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
File: iiQuCntgz9644OA_-a7DPlq30sg.mft (raw, json)
Hash identifier: v7cuti8BYiDzS7y3U8b9Q4/yP/2Ff/3opNnnXrApfXw=
Subject key identifier: FA:8C:68:53:74:03:66:D4:D5:B3:12:26:12:90:2D:99:7E:78:A3:C7
Authority key identifier: 8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
Certificate issuer: /CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Certificate serial: 019874BD8317F17CB339C50593D4279D7CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
Manifest number: 0A25
Signing time: Mon 04 Aug 2025 11:00:33 +0000
Manifest this update: Mon 04 Aug 2025 11:00:33 +0000
Manifest next update: Tue 05 Aug 2025 11:00:33 +0000
Files and hashes: 1: iiQuCntgz9644OA_-a7DPlq30sg.crl (hash: Wv/9OKjEkF1HWFI9shf35uAxCpPMtDxx8ZjA0sQtGvw=)
2: siJjmLBZP9diFC7BYX9p7SQAfZw.roa (hash: Gsh0pNObMeNVow5ebFzkqw16IE2NyBLNNUC8IDCqBag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:83:17:f1:7c:b3:39:c5:05:93:d4:27:9d:7c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a242e0a7b60cfdeb8e0e03ff9aec33e5ab7d2c8
Validity
Not Before: Aug 4 11:00:33 2025 GMT
Not After : Aug 5 11:00:33 2025 GMT
Subject: CN=fa8c6853740366d4d5b3122612902d997e78a3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e7:58:4c:de:fc:49:d5:aa:55:42:34:dc:e9:
b7:37:32:e7:04:d3:cb:0a:f9:f7:49:2b:57:07:f3:
4c:d9:71:26:b3:94:6f:b8:df:e1:b9:11:15:89:1a:
03:95:77:a5:3b:5a:93:00:ff:65:f2:11:11:8c:6e:
39:58:c3:41:81:8c:89:3d:c3:84:ea:b1:21:1e:ef:
91:6b:d2:e1:07:ae:34:9d:6a:1f:6a:81:c9:4f:fd:
55:9b:e2:f1:80:94:e0:b9:ad:9e:04:54:cc:4e:94:
12:d3:30:f0:41:c7:a9:00:60:51:28:4e:44:5d:ee:
fc:fa:77:93:65:b9:b6:1d:79:e0:23:4a:4d:34:41:
3a:37:50:84:2d:3a:d4:b9:d4:89:80:ee:ee:f0:86:
15:06:ce:d3:50:b4:20:37:63:81:28:e1:9d:20:d5:
97:79:d9:26:f6:5e:b0:b0:99:66:98:f0:ea:81:c4:
5d:3a:e6:11:cc:71:90:5f:ff:f2:00:5a:ee:b0:95:
03:cb:29:81:69:76:bf:a4:96:e2:25:35:cb:50:2e:
a5:34:8f:91:fa:15:6b:e6:42:a0:a8:f1:bc:5a:e6:
10:d7:63:5b:a9:62:b7:d8:cb:d2:b5:2e:c2:ad:25:
6c:57:d0:29:6b:1d:93:7e:99:66:4e:85:7e:68:78:
bd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8C:68:53:74:03:66:D4:D5:B3:12:26:12:90:2D:99:7E:78:A3:C7
X509v3 Authority Key Identifier:
keyid:8A:24:2E:0A:7B:60:CF:DE:B8:E0:E0:3F:F9:AE:C3:3E:5A:B7:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiQuCntgz9644OA_-a7DPlq30sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7bd0e9-abe1-4a74-8955-8a8d4c6918b4/1/iiQuCntgz9644OA_-a7DPlq30sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ef:1e:ed:6a:8f:d8:36:f4:31:51:cc:90:a0:98:4c:a3:0a:
f6:ae:75:18:a8:23:a1:f9:0c:2a:b9:3c:0c:97:82:87:22:78:
c8:ba:7d:b9:7c:f0:f9:c0:74:90:df:73:4f:0f:39:c4:a7:98:
0a:fa:10:ea:ac:5a:f0:e0:4d:a8:26:29:e6:f8:b0:7f:bd:c1:
d8:47:af:42:69:cc:23:65:15:d8:e9:2a:de:cb:7e:53:94:f9:
62:38:9b:42:f6:a4:21:e8:0e:29:fc:a0:bd:a2:61:c0:13:0a:
65:9d:5b:87:76:a8:c6:d4:47:c4:48:cf:a4:74:9b:1b:f1:b2:
26:fb:4a:f0:15:4b:5e:c8:6a:d7:13:62:dc:69:62:dd:ac:54:
60:33:20:c6:33:cf:43:1e:f9:6a:c4:3d:fa:7c:53:37:25:2a:
58:25:ea:ac:36:57:a1:03:4f:76:3f:18:40:4b:ea:e9:4d:06:
b5:90:df:b0:0c:1b:66:52:d6:0c:3a:85:02:47:ee:9d:1d:e9:
8d:4f:a5:a7:d5:11:40:18:7f:4f:76:98:11:86:6b:32:b9:5c:
1d:f7:40:f4:eb:40:7f:9a:9c:96:e1:c7:6b:ec:c2:5e:68:07:
43:f4:af:2d:ac:91:14:73:3d:5c:b7:da:e1:1e:65:db:2a:ef:
ef:49:4c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:35:03 2025 by rpki-client