Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
File: IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft (raw, json)
Hash identifier: JfiL14LITc2TR5+ws7cvKsWGWi1VYfm5YLhWXVGJ//M=
Subject key identifier: 83:FE:91:21:4B:32:F3:18:90:EF:79:4D:70:CF:D8:54:E0:9B:43:35
Authority key identifier: 20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
Certificate issuer: /CN=20feef391f16300157bb78b2eaea06d61c20c945
Certificate serial: 0198A04E0E0F4D8026F0DF71F83E2FD04427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
Manifest number: 0541
Signing time: Tue 12 Aug 2025 22:02:06 +0000
Manifest this update: Tue 12 Aug 2025 22:02:06 +0000
Manifest next update: Wed 13 Aug 2025 22:02:06 +0000
Files and hashes: 1: IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl (hash: hwUP2VI6ccoG3qe7UtwN6DWI8HpVMLzz/DDZ/+OVi40=)
2: bMgRIHfe9czZPsPUKpcmfdHESeA.roa (hash: xt+uVWCgpmniCKO9lfh4KPFwtigjOiclhRJVmau9h3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:0e:0f:4d:80:26:f0:df:71:f8:3e:2f:d0:44:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20feef391f16300157bb78b2eaea06d61c20c945
Validity
Not Before: Aug 12 22:02:06 2025 GMT
Not After : Aug 13 22:02:06 2025 GMT
Subject: CN=83fe91214b32f31890ef794d70cfd854e09b4335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:df:e0:bd:ac:05:89:2c:a2:2e:ed:7e:cf:e8:
5d:c5:83:f0:5b:00:73:02:85:17:be:23:4b:f2:2d:
ad:30:bb:b0:8f:2c:3d:59:6c:59:4e:8e:23:46:b5:
f6:13:2e:54:40:5a:d4:a4:42:e1:03:fe:87:93:1f:
ba:ad:8c:8c:46:4a:8c:6e:31:1a:10:3f:cc:a2:c4:
25:dc:fc:f5:eb:e7:4b:ea:ee:02:f4:8f:79:3f:a4:
d9:0b:55:14:05:60:58:3f:7d:d5:d4:fa:0a:c2:23:
77:a9:f2:91:7d:71:2e:1f:6a:45:15:59:82:d3:ea:
76:f2:4d:f3:d1:d7:ef:ca:09:7d:83:d7:78:87:f1:
84:6a:6b:f0:27:b3:b1:41:d6:43:12:7f:86:a3:05:
20:4b:34:89:fd:b5:0a:a5:5d:9a:60:7b:68:70:9e:
31:e2:69:54:11:82:e3:32:09:9a:12:38:00:0e:5d:
7a:b1:6e:50:fe:e1:be:bb:c3:75:0f:6d:22:e2:7f:
16:58:b5:1e:7a:b1:c1:4e:7d:b3:b8:ff:c0:30:e5:
76:f0:ae:b8:6d:61:13:aa:cd:67:57:5d:ac:84:93:
ea:f6:5d:be:fc:4d:3b:f0:59:95:8c:9f:09:e4:a8:
df:71:89:e1:1f:07:57:62:f0:47:45:6a:d1:aa:15:
b3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FE:91:21:4B:32:F3:18:90:EF:79:4D:70:CF:D8:54:E0:9B:43:35
X509v3 Authority Key Identifier:
keyid:20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:84:53:19:5f:0f:69:fe:f7:dc:54:1d:e6:4d:27:1e:2c:c4:
64:0a:86:83:86:4b:9c:ed:79:50:b6:09:67:01:62:35:81:05:
0e:4d:85:11:41:71:61:02:f2:fc:38:e3:b6:be:90:6e:3b:53:
ba:d1:10:9b:6d:c5:31:df:3f:27:e8:95:34:4d:c0:85:31:0f:
b6:e4:e5:30:a4:9f:0c:03:6f:0f:a8:d8:ee:10:45:5c:b9:95:
1f:cc:92:8d:82:ba:7b:a5:af:e3:3f:d2:e4:b8:62:f2:db:13:
94:79:d9:26:7a:60:e0:47:98:4a:fc:be:b2:41:0e:fb:a1:9d:
f1:14:84:e2:7c:7b:4e:12:31:51:4a:3e:3b:75:53:5e:c3:54:
83:13:31:d4:ce:e7:11:5b:93:6d:a1:c5:36:dd:3c:c5:ff:c6:
e9:59:fe:92:89:cd:c2:66:98:90:af:c7:c8:db:e4:74:85:92:
cc:99:f1:ec:d8:a8:46:76:06:c6:65:a3:e1:2c:cf:eb:19:96:
19:32:f0:27:dc:6f:56:c5:31:8c:a8:7c:55:eb:2b:1e:8a:59:
87:10:60:a5:47:b4:1c:7d:b3:ec:2e:11:c4:0f:57:a5:89:1a:
9a:31:c2:1d:d1:76:97:ee:22:db:b9:ef:b8:7a:69:b6:20:7c:
f2:c2:c6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:17:20 2025 by rpki-client