Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
File: i992xUueaTXDCptMm6kwmsRw7AI.mft (raw, json)
Hash identifier: r1n7OnmrOBTEIbheBC+Oh+sriqhK4+TltsRigfg14hg=
Subject key identifier: 90:5A:EC:D2:13:4C:DE:27:8E:A9:11:96:88:62:1D:E1:20:0C:47:27
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 01987418F801FB3FF4C818259911A120E388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
Manifest number: 133D
Signing time: Mon 04 Aug 2025 08:00:49 +0000
Manifest this update: Mon 04 Aug 2025 08:00:49 +0000
Manifest next update: Tue 05 Aug 2025 08:00:49 +0000
Files and hashes: 1: LJ7hoCqQnwfHChqeU9U8SkKdeqI.roa (hash: 8CqH09siYzyZJ5O1vmsPNnnOW14dzrYfcCdsDYcxu10=)
2: VmLWF2kLf7eTv8bwMXbk9b_Me2E.roa (hash: 1ItZnIffXoYbRBfY7mSWO6cvW2p6OOPwlCKSIhvogDA=)
3: Zrtik5m7bnw4gbxdEJLGgHXAz9o.roa (hash: ztZ7RR7wyKUwf1RAErkEUuWfC4cJblHm2hjCh/OBgRU=)
4: hWi--eNkI9TK8tV0GdIuvuJQyDc.roa (hash: h6dcszo7jHVlG8sKlZpn1qh++xSjCv//ZGRVVxrrlrM=)
5: i992xUueaTXDCptMm6kwmsRw7AI.crl (hash: KPmb89SXagU1FEzRFYW4zTPpERjxESh4OVk34i5o898=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:f8:01:fb:3f:f4:c8:18:25:99:11:a1:20:e3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Aug 4 08:00:49 2025 GMT
Not After : Aug 5 08:00:49 2025 GMT
Subject: CN=905aecd2134cde278ea9119688621de1200c4727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:00:0c:8d:1e:40:a7:fe:4a:e0:5d:a2:f1:6f:
a8:57:06:2d:9b:88:b7:4d:9e:f2:1a:c2:4c:04:3b:
ee:cb:ce:7a:d0:17:9f:d5:07:cd:7b:e2:7a:a4:9a:
02:bc:c1:62:63:6f:3f:d8:d9:ee:5a:8a:dc:d7:c0:
7a:19:58:66:d5:8e:5d:e2:f0:7c:60:e0:b3:2c:30:
fe:0c:6a:68:5d:dc:03:2f:16:e7:6a:3a:12:97:8d:
e8:5d:69:72:18:dd:af:6d:ad:95:80:85:3f:a7:81:
fe:97:39:c0:1f:70:f1:f9:f7:9d:fc:8a:03:c4:df:
89:a5:0f:05:4f:16:9a:48:84:01:f2:a6:a1:e6:8f:
69:6b:a6:ac:28:9d:f1:c6:4c:68:4f:dd:e9:f3:2b:
89:10:e8:7a:49:10:66:d7:3d:0b:2d:07:c5:f5:bc:
b9:9b:18:78:f0:85:c4:80:c5:39:15:70:3d:5a:85:
42:36:77:b7:9c:c2:53:bc:a9:3b:40:34:3c:c7:39:
78:5e:34:1b:cc:2d:cd:50:0d:8a:9d:50:cf:1f:fa:
be:9c:b1:8d:4a:12:38:1a:c9:eb:7e:37:2d:5b:fa:
02:cb:ed:fd:60:71:aa:9f:b5:56:96:21:08:87:eb:
8b:7b:87:47:25:65:8f:35:8f:a4:b1:49:24:b5:03:
ac:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5A:EC:D2:13:4C:DE:27:8E:A9:11:96:88:62:1D:E1:20:0C:47:27
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b4:86:8a:cc:45:85:c3:41:b8:5c:e6:90:ba:27:2a:9f:fc:
b1:6a:4c:a4:ca:de:4a:d0:5d:10:c9:eb:23:0b:7f:16:62:e0:
89:d7:04:98:5f:f4:5d:e1:44:8b:2e:30:89:ae:ce:af:08:1f:
bf:dd:7a:d3:69:4b:c8:ea:1e:7e:db:74:1a:49:be:1a:33:63:
9d:7c:2e:78:39:c9:58:1b:b2:e8:62:eb:4c:71:c3:19:21:5f:
4e:cc:d5:9e:18:32:8b:a8:8d:52:c2:7f:02:df:1c:13:b2:2f:
44:7e:ee:f4:b9:85:a0:7e:1a:62:da:05:46:15:37:a8:25:4a:
17:a6:84:80:87:e9:71:23:b1:d1:99:71:68:a6:66:4c:5c:ea:
7f:cc:61:57:f7:4d:d3:05:eb:63:31:6d:bb:84:68:50:07:26:
3b:2f:45:7b:36:5b:66:9a:0d:cf:af:13:72:99:ea:c7:6c:d7:
ab:3a:eb:19:ce:96:a4:f1:c3:ef:33:e4:7f:de:59:fa:5e:1e:
fe:30:d8:e7:68:9b:a4:13:54:44:25:cc:9a:6d:95:a8:79:68:
7f:26:0a:20:40:ab:75:54:87:86:21:b5:10:d2:61:15:ce:ee:
dc:ac:4a:2a:6f:f8:8f:c5:03:84:51:f7:1a:8c:0d:5c:b7:54:
40:44:99:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:54 2025 by rpki-client