Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
File: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft (raw, json)
Hash identifier: hHM/S1e4HwQ/Zcw7WadgN1wPXN2bskYVBBWkb6c/Z5E=
Subject key identifier: 9C:20:01:66:C0:15:50:08:53:DF:5B:59:D5:25:14:B1:09:C3:DD:65
Authority key identifier: 88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
Certificate issuer: /CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Certificate serial: 019872CFF8C80A85804D2308A1C6A749A262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
Manifest number: 09B0
Signing time: Mon 04 Aug 2025 02:01:28 +0000
Manifest this update: Mon 04 Aug 2025 02:01:28 +0000
Manifest next update: Tue 05 Aug 2025 02:01:28 +0000
Files and hashes: 1: 11w9K2dCR0A6XsEVx-Vg9m7G5bM.roa (hash: hj3QFv3Y2FaAu9Oijuk6KKEMBTD9UQTUqjejPr1gs7c=)
2: MR9ZuC-IL_jZ4767dS-IkZgCrJw.roa (hash: Vi7lFCDHTrpEyk68a6k87cSkUHM4wyPXzIO5RtGzU1U=)
3: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl (hash: QT8VAF/9Pr5UQSJOl269sCgUVvToXNlCNzyZ0vEmD4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:f8:c8:0a:85:80:4d:23:08:a1:c6:a7:49:a2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Validity
Not Before: Aug 4 02:01:28 2025 GMT
Not After : Aug 5 02:01:28 2025 GMT
Subject: CN=9c200166c015500853df5b59d52514b109c3dd65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fa:a7:05:1d:20:93:4a:b6:ae:ed:61:f3:f1:
26:0a:e1:4e:0c:c7:3a:88:52:7a:73:fb:2b:ec:f9:
4e:fb:95:92:cf:49:8f:fb:cc:bc:c3:aa:b9:93:40:
ba:9f:d6:d0:5e:a6:5c:47:b2:eb:09:ff:53:f2:0e:
94:e7:6b:86:17:64:96:a1:55:94:7a:2c:e4:7f:5c:
95:d7:55:26:cf:fe:92:cc:b2:01:d6:60:45:31:5f:
83:b7:db:07:f1:86:dc:17:72:87:90:be:a1:a7:ed:
28:c1:1a:f8:e3:9a:a5:fe:0b:90:1d:df:c4:3d:ac:
02:c9:d1:bc:4d:45:69:f5:f2:5e:ce:8d:b0:91:2f:
99:9f:71:23:cd:ff:73:0d:31:57:9a:35:08:f3:fa:
14:1d:8e:22:80:f4:2b:92:6a:c0:36:67:7c:4e:82:
5c:65:09:43:c1:bc:93:8b:50:b5:5c:25:a8:c5:6e:
43:26:a6:cc:04:45:17:25:f9:32:01:1d:f2:1b:96:
f1:37:f0:e6:93:6e:a6:3f:c4:04:4d:a0:62:0b:ec:
7b:23:e0:98:4f:9c:d9:5f:5f:e7:eb:78:4e:f3:2b:
a5:4c:4a:52:da:60:09:a9:9d:db:b1:db:1c:35:6a:
c8:e2:46:3f:c9:1a:f7:68:32:17:92:f5:e8:65:43:
a5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:20:01:66:C0:15:50:08:53:DF:5B:59:D5:25:14:B1:09:C3:DD:65
X509v3 Authority Key Identifier:
keyid:88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:da:e4:46:e9:b7:8b:e5:7d:83:ba:20:de:19:94:ae:e5:a8:
69:db:1d:71:58:7b:6a:15:d3:56:9f:1c:da:c1:7b:b4:20:c3:
81:4f:4b:16:a0:42:fe:97:3f:ca:9b:e1:00:92:b6:71:76:5b:
23:e9:0b:0e:c4:85:eb:4e:1e:71:89:fc:98:db:fc:93:7f:11:
f1:72:7e:53:35:c9:1b:54:10:50:2b:ff:62:ac:6a:8c:82:f8:
5a:29:cf:81:7c:dc:f3:07:37:e9:18:7b:dc:d5:55:21:7d:b2:
8a:0a:1f:46:88:c5:fb:bf:0e:ad:b1:70:24:9c:a0:fc:26:59:
b5:2d:37:e0:f8:72:15:cc:f3:7f:12:ea:87:06:41:3b:17:27:
b4:82:53:96:f5:11:97:00:99:2a:8b:94:2d:da:82:8e:67:0e:
fd:c1:ab:13:83:f9:9e:a0:9f:21:37:62:a3:1a:1f:fb:8b:d1:
56:4f:4b:ec:60:63:75:d9:4e:a6:12:3f:9f:41:32:4c:63:6c:
80:d7:26:1b:50:be:ec:7a:82:13:4f:30:f7:35:61:3e:ea:b0:
e5:59:27:3f:11:10:a4:9f:53:b1:95:44:8a:72:a6:5f:1d:e8:
27:1f:a9:02:32:d6:07:43:af:cc:ae:18:a4:05:19:ec:d0:56:
d7:68:ce:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:59 2025 by rpki-client