Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
File: iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft (raw, json)
Hash identifier: /byvADyckCQL3I53O2UY4rOma4iI3EPwO8IOxx5wRps=
Subject key identifier: 6E:29:C6:4E:72:42:D0:CF:84:CE:7E:75:34:F1:DC:13:12:8C:99:99
Authority key identifier: 88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE
Certificate issuer: /CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
Certificate serial: 01987A1B8BF5B7D6045C7C84CA8FFB3FDDF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
Manifest number: 0588
Signing time: Tue 05 Aug 2025 12:01:22 +0000
Manifest this update: Tue 05 Aug 2025 12:01:22 +0000
Manifest next update: Wed 06 Aug 2025 12:01:22 +0000
Files and hashes: 1: NOTlqU2dG5SZUtFWrRvKPCIYT_I.roa (hash: fMBaaIac4pSZ5FYQhcUdq0rjdRPBorC9IDyKulvOrp0=)
2: iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl (hash: BpzxrznLeZ5RCp6T/ul1jJIyF8OeRp1c6rOaLgarWPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:1b:8b:f5:b7:d6:04:5c:7c:84:ca:8f:fb:3f:dd:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
Validity
Not Before: Aug 5 12:01:22 2025 GMT
Not After : Aug 6 12:01:22 2025 GMT
Subject: CN=6e29c64e7242d0cf84ce7e7534f1dc13128c9999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d1:b3:b7:45:44:dc:f6:e3:83:a1:d8:d9:27:
c9:bd:3b:9d:21:64:18:e7:7d:54:6b:d3:c2:51:8c:
61:6f:e4:20:b0:34:02:54:bd:54:3d:89:d1:6e:6f:
1d:3b:11:7c:15:e6:a7:05:e6:19:dd:8d:95:1a:18:
21:82:3d:bf:41:cd:34:de:b1:d3:10:de:f7:a3:86:
4e:6b:05:01:0a:0c:3c:df:83:61:53:96:52:da:45:
7e:ea:98:ab:75:a1:cb:27:dd:8d:c6:0c:c4:ce:25:
c9:36:46:42:b6:22:26:f7:3c:81:05:41:f0:2a:da:
3e:c8:69:44:00:2b:9e:e3:46:92:a2:a1:e9:92:dc:
66:c2:cc:2f:d9:04:75:28:13:6d:ae:a2:2e:58:5b:
1d:0b:a5:1f:d3:ce:88:ac:d6:29:91:84:60:9f:5e:
27:e0:24:79:90:1a:79:c3:51:cd:43:c3:71:cb:2a:
a4:10:38:c5:04:f9:7c:2a:37:22:58:d4:de:10:f0:
2c:51:ed:a6:b0:b1:5e:f2:54:91:2b:67:7e:f9:b3:
b6:fe:aa:97:26:bf:69:a9:08:6d:c9:e8:6b:28:50:
7a:7d:13:8e:82:6c:19:3e:d6:ad:5f:f4:4b:73:63:
dd:b4:cc:e1:86:9a:76:16:74:25:f0:cd:2f:11:6a:
a3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:29:C6:4E:72:42:D0:CF:84:CE:7E:75:34:F1:DC:13:12:8C:99:99
X509v3 Authority Key Identifier:
keyid:88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:36:8b:f0:ba:3e:66:2c:96:14:da:d2:7b:27:e6:e5:d5:a1:
fd:fe:b1:0c:4a:2e:b8:d3:c9:58:c7:9b:d9:7f:15:11:95:0e:
15:e9:af:9e:7c:b5:29:5b:a4:8e:15:51:a5:97:1f:06:14:e9:
29:a1:7f:03:cd:35:a0:53:77:db:2d:35:cc:24:85:61:a0:e1:
bf:7e:a1:ba:8a:d9:47:d9:23:14:9b:89:d7:86:0b:3b:80:bd:
60:43:b8:62:a1:a9:e0:9e:ca:e8:06:a8:b2:3a:be:c0:20:23:
b2:96:74:bc:f9:75:ad:3b:85:e4:97:13:81:2b:60:06:90:2c:
79:9f:84:45:0e:b9:51:72:64:3b:7a:89:c4:93:a8:a1:fc:c4:
bb:6c:46:16:ec:29:c0:11:11:9d:86:ae:32:34:53:51:af:c5:
78:e4:c7:01:c6:30:21:d4:1e:7b:44:5b:57:ea:38:3e:c8:9f:
06:45:e2:90:2e:01:d8:b4:f3:9b:ff:21:be:85:6a:81:51:1c:
da:9f:d3:0e:6b:43:c5:4f:59:6e:61:57:02:3c:9d:6c:d9:94:
23:7e:a9:d8:2b:21:c1:93:91:c0:81:50:41:64:34:89:05:9b:
00:3f:b6:f7:65:0e:de:41:cc:a5:b9:57:89:dd:dd:13:c8:ef:
1d:59:e9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:41:57 2025 by rpki-client