Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
File: ioNVXKoizpubFoNQOhTjzdg24Bs.mft (raw, json)
Hash identifier: 71fYAGTjVA5lhvHhePXYyly4fWwvmaGu4EFu931GS8o=
Subject key identifier: 22:78:DD:B7:9B:17:37:76:79:52:3B:3B:71:7D:F5:2A:FD:4F:BB:16
Authority key identifier: 8A:83:55:5C:AA:22:CE:9B:9B:16:83:50:3A:14:E3:CD:D8:36:E0:1B
Certificate issuer: /CN=8a83555caa22ce9b9b1683503a14e3cdd836e01b
Certificate serial: 01989335FC588F6315D32232E60E683A3FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
Manifest number: 0E95
Signing time: Sun 10 Aug 2025 09:00:45 +0000
Manifest this update: Sun 10 Aug 2025 09:00:45 +0000
Manifest next update: Mon 11 Aug 2025 09:00:45 +0000
Files and hashes: 1: 8ltVewMht9tkkoh6ikhHpmbvP28.roa (hash: qZH42qz06gavyuSaiRbHo+yLoZK1W5iI0G1jpEdB8DA=)
2: ioNVXKoizpubFoNQOhTjzdg24Bs.crl (hash: /91LUJZAgTDDJHD+SPvml53WX4bJFTwu2QkmDRNNxdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:35:fc:58:8f:63:15:d3:22:32:e6:0e:68:3a:3f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a83555caa22ce9b9b1683503a14e3cdd836e01b
Validity
Not Before: Aug 10 09:00:45 2025 GMT
Not After : Aug 11 09:00:45 2025 GMT
Subject: CN=2278ddb79b17377679523b3b717df52afd4fbb16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:e1:ef:37:9d:bb:f8:ee:85:f3:ce:03:36:
65:e9:db:5e:ee:5a:de:38:59:e5:12:e7:bd:d2:81:
90:33:6e:36:be:ec:53:f9:93:57:e8:ca:c8:d4:33:
61:49:44:b1:20:64:7b:f5:93:1f:8b:45:86:eb:96:
16:ab:6f:21:f0:ca:6d:40:c8:cf:9b:a3:4f:8b:fe:
7e:f9:d4:58:8a:e2:99:ec:4f:d0:0f:92:a2:e7:c4:
92:71:ad:10:88:ea:b3:57:6a:2f:70:b5:66:67:20:
9c:6f:4a:18:4b:64:7c:5a:6a:33:a9:fa:65:ef:c7:
cd:97:24:a4:e3:d4:60:32:14:d6:25:dd:2c:93:b8:
db:ff:e2:f5:d9:f7:49:10:d4:8f:b7:2f:3b:c2:66:
c6:1f:11:e9:2e:c7:29:b1:22:9a:49:6e:28:23:41:
22:14:21:ad:eb:20:29:4d:50:71:48:d9:3e:47:5b:
fb:fa:1f:49:0a:d0:72:48:bd:e9:af:38:d6:21:bb:
4b:04:04:9e:30:c8:28:40:f1:16:43:09:7f:91:b7:
76:69:27:b6:83:c6:48:80:e3:8d:2c:90:b2:a6:4b:
50:dc:52:d5:49:43:aa:9f:2f:28:e2:18:8c:65:f1:
bf:f1:d6:cc:4f:c2:82:88:c6:b4:ee:fe:6f:a5:b0:
84:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:78:DD:B7:9B:17:37:76:79:52:3B:3B:71:7D:F5:2A:FD:4F:BB:16
X509v3 Authority Key Identifier:
keyid:8A:83:55:5C:AA:22:CE:9B:9B:16:83:50:3A:14:E3:CD:D8:36:E0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:0d:5b:2c:ec:a2:e2:ee:45:34:83:c9:bd:85:46:2a:ca:2f:
80:5b:ae:fe:12:57:44:76:34:45:8b:db:8d:19:59:89:5d:a3:
e3:1d:ce:d6:df:52:32:ff:fa:92:5f:9f:87:b0:bc:10:ce:4d:
6a:78:e3:60:c2:b1:5a:9b:72:79:1c:c9:c2:56:c1:d8:91:6b:
50:75:b7:61:49:ee:42:d0:34:64:f2:93:2b:de:67:27:d6:8d:
2f:72:f9:3c:a3:7a:be:c6:39:fa:26:8a:33:1f:0f:8e:f5:64:
14:1e:5d:08:d6:68:38:3a:a0:eb:8a:4d:10:88:14:72:70:fb:
2a:b1:bc:61:0d:e2:4f:c0:dc:af:c1:e2:b5:f4:9e:f3:00:47:
06:78:c2:1f:3e:e2:76:50:5e:2a:56:16:df:55:6f:cf:d3:02:
10:84:18:1d:07:0b:2f:dc:bc:52:77:7b:22:61:d7:ad:37:24:
f9:31:1c:d7:2c:b5:d3:61:34:06:8e:38:12:aa:cf:4c:cc:31:
5f:3c:35:48:33:be:1e:c2:98:b4:ed:bd:92:42:23:b8:32:8e:
b6:15:27:b4:e5:29:61:bc:16:e7:36:12:15:79:1c:40:92:c3:
07:f1:c2:5e:e2:cf:3c:13:c2:01:05:da:ba:e9:d8:7d:1a:e9:
b3:c4:80:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:49 2025 by rpki-client