Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
File: IXt6sGK8gos0jQUwbmU1R0i51tY.mft (raw, json)
Hash identifier: mmXyzU9RozluqjrrX1vZGJbBoP5ulNMUrS2xx8T6pCg=
Subject key identifier: 85:8B:8C:C2:88:66:BA:0E:00:59:15:C2:1A:6B:44:31:44:69:1C:D3
Authority key identifier: 21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
Certificate issuer: /CN=217b7ab062bc828b348d05306e65354748b9d6d6
Certificate serial: 01988DD89598E5D2BC656A5CE5D156932470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
Manifest number: 09DB
Signing time: Sat 09 Aug 2025 08:00:38 +0000
Manifest this update: Sat 09 Aug 2025 08:00:38 +0000
Manifest next update: Sun 10 Aug 2025 08:00:38 +0000
Files and hashes: 1: 1pYkybGgKOUsse4DTksz46U1UVk.roa (hash: TAfzGG00BI7uAR7rTZh0yLg+7xDY58D62iiCBqbod3s=)
2: IXt6sGK8gos0jQUwbmU1R0i51tY.crl (hash: sJz0l51hLZlBSFC9fsg1PDTPdwqrL/aVKivg+3ihcp8=)
3: VxdHezzHKrkrE2Feoz1POMlVQMY.roa (hash: FkZe/vgHmq1Yaa4HgYSORTSSTc1UQglxGrV02REUteE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d8:95:98:e5:d2:bc:65:6a:5c:e5:d1:56:93:24:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b7ab062bc828b348d05306e65354748b9d6d6
Validity
Not Before: Aug 9 08:00:38 2025 GMT
Not After : Aug 10 08:00:38 2025 GMT
Subject: CN=858b8cc28866ba0e005915c21a6b443144691cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:77:14:4a:a2:91:19:61:d6:c4:44:46:30:75:
56:4d:01:33:42:23:66:64:7b:dd:3c:59:9b:66:8c:
9d:2b:67:9e:1c:a4:73:05:96:d8:7b:81:73:06:f1:
a3:4c:e0:9e:8e:90:47:4a:92:3a:20:61:10:b4:14:
b8:44:b5:cb:37:f1:51:d8:fd:8c:fd:04:4e:34:ea:
f0:20:83:8c:62:d5:26:06:46:c0:e5:25:44:16:9a:
82:50:8f:5d:9a:d2:c6:30:01:2c:eb:b3:95:91:a6:
f3:3d:ea:1b:68:63:98:3e:9f:79:b2:36:ed:ac:8e:
52:a0:c9:db:63:19:15:dc:e4:97:aa:17:20:ac:45:
43:06:5a:72:90:ab:89:ed:0b:5d:cc:3e:08:d8:d5:
0c:8d:ef:99:dc:06:9c:e9:49:b2:ad:91:75:5a:ef:
43:33:29:57:d6:f3:06:f9:7a:9b:3c:bd:c6:dc:60:
c1:03:2e:2a:8c:7b:33:47:89:4a:cf:17:04:49:dc:
f7:d3:18:e0:c8:20:c5:c0:09:45:95:30:5d:4b:17:
43:50:1f:38:49:ba:83:00:68:4e:22:94:33:92:ff:
68:f4:c1:fe:2f:6e:64:21:22:3f:c2:b4:aa:23:4c:
f9:7f:59:65:7b:ce:9d:82:f1:e2:23:e3:62:85:66:
ca:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8B:8C:C2:88:66:BA:0E:00:59:15:C2:1A:6B:44:31:44:69:1C:D3
X509v3 Authority Key Identifier:
keyid:21:7B:7A:B0:62:BC:82:8B:34:8D:05:30:6E:65:35:47:48:B9:D6:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXt6sGK8gos0jQUwbmU1R0i51tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a8dadc-611b-4063-adb6-55b659cd82bb/1/IXt6sGK8gos0jQUwbmU1R0i51tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:1a:b7:36:ed:e2:62:ea:97:a7:bc:9d:20:30:b0:2d:10:0d:
4a:ef:73:0b:9c:35:5c:4e:37:77:18:b0:f3:3f:2d:76:1b:61:
2f:12:73:88:da:03:98:fa:3a:08:c1:0c:b4:e1:75:af:2d:3a:
d5:08:f1:9f:3c:9c:25:ac:a0:97:3e:05:f0:f5:8e:0e:99:30:
35:72:da:8e:a7:7a:aa:3f:c0:d9:9f:2c:38:c1:28:75:ef:c4:
11:5f:a2:ca:35:3d:11:80:e3:05:c6:73:2a:a4:79:0f:77:18:
fa:b3:89:ea:cd:1f:a9:8f:ed:18:05:c5:5a:9a:18:ef:4e:7a:
d3:51:43:59:26:56:5b:7e:33:4b:de:53:25:5d:0d:49:3b:47:
0d:8b:2f:74:e0:3d:2f:40:81:ff:08:72:7d:ad:84:42:2e:ea:
a8:3d:d6:c8:a9:45:b7:1f:43:09:e9:44:1c:32:39:b2:f7:54:
ac:11:cb:e6:f1:6b:fe:56:2e:29:94:1b:a5:92:13:80:09:b2:
0f:e9:c5:0e:f5:47:00:77:de:0e:05:a6:b7:01:30:48:70:90:
b6:89:f2:8d:81:82:a7:c2:de:df:31:57:20:d5:60:9b:65:b2:
86:40:5f:27:af:f6:c7:b6:e6:f1:22:3e:21:73:c0:5a:48:75:
15:42:e5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:31:54 2025 by rpki-client