Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
File: iYh94B2LHL1Qt126yRM59mF6TYo.mft (raw, json)
Hash identifier: YNVfWghTJltPGuOWEuAtZfhVxxeOi+jacuXQo+JYi0M=
Subject key identifier: 60:F6:44:97:CF:5D:C0:29:64:7C:CF:62:0F:9A:15:C6:4E:78:64:27
Authority key identifier: 89:88:7D:E0:1D:8B:1C:BD:50:B7:5D:BA:C9:13:39:F6:61:7A:4D:8A
Certificate issuer: /CN=89887de01d8b1cbd50b75dbac91339f6617a4d8a
Certificate serial: 01988F5910EA6F8E08CEA5B025EFB8FAF835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
Manifest number: 14FB
Signing time: Sat 09 Aug 2025 15:00:35 +0000
Manifest this update: Sat 09 Aug 2025 15:00:35 +0000
Manifest next update: Sun 10 Aug 2025 15:00:35 +0000
Files and hashes: 1: iYh94B2LHL1Qt126yRM59mF6TYo.crl (hash: OCWpXC3csGH0QTG65l1n+RAFiDwf5UKmQ/J5XEkUW3A=)
2: jAe0olQrTlqlwekCa7zU__XvOnI.roa (hash: lpxqZITJHJnTC06LkfUlinyvWGfnxykj2N1zFv1cD0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:10:ea:6f:8e:08:ce:a5:b0:25:ef:b8:fa:f8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89887de01d8b1cbd50b75dbac91339f6617a4d8a
Validity
Not Before: Aug 9 15:00:35 2025 GMT
Not After : Aug 10 15:00:35 2025 GMT
Subject: CN=60f64497cf5dc029647ccf620f9a15c64e786427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3f:d1:db:e4:58:c6:52:9d:16:aa:c0:54:76:
b3:dc:1a:c5:05:6f:9a:a6:b2:1e:09:4a:02:f1:a6:
e1:cf:81:f0:9c:e5:ca:a3:91:53:0e:ef:4d:1b:03:
43:13:cc:39:7d:fd:1e:9e:11:df:72:87:6b:ba:2e:
f0:b0:1f:27:2b:01:75:65:35:ae:2b:46:bf:26:ba:
39:03:0e:57:c2:2c:1e:77:21:53:7a:45:4a:7f:cd:
8e:4b:3c:6e:00:b7:9f:13:7d:c3:58:b5:a7:f8:53:
0b:7b:c8:c6:0a:59:50:fa:7c:74:ff:d8:69:28:d1:
d6:38:8b:6b:48:80:04:1e:00:4f:4f:fb:d0:01:0d:
27:61:71:d3:61:af:0c:9d:bd:f0:40:99:ed:86:8d:
3c:97:34:0d:2e:8c:95:98:61:9d:5d:0e:81:07:de:
95:94:36:59:94:63:08:69:a8:63:1b:05:b6:ae:7e:
5a:8f:84:40:69:ff:89:3e:90:a0:45:54:ea:7f:2b:
32:a9:0d:6c:54:cb:9c:c5:af:94:88:e1:56:50:dc:
42:fc:a4:c0:b6:af:4e:11:fe:8d:6d:19:b4:20:3a:
7c:05:6b:90:3b:3a:00:4f:98:55:b9:6b:99:58:d4:
4c:e8:33:be:4d:4d:15:09:85:9b:b2:7b:cb:3d:36:
d2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F6:44:97:CF:5D:C0:29:64:7C:CF:62:0F:9A:15:C6:4E:78:64:27
X509v3 Authority Key Identifier:
keyid:89:88:7D:E0:1D:8B:1C:BD:50:B7:5D:BA:C9:13:39:F6:61:7A:4D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iYh94B2LHL1Qt126yRM59mF6TYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9ce742-0c5d-4c34-8765-5ed5157ced0a/1/iYh94B2LHL1Qt126yRM59mF6TYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:74:87:9e:44:bc:8c:ba:fc:69:3d:ef:fc:2f:73:b5:a2:c7:
a4:eb:f5:17:e6:35:13:64:84:2e:da:f6:f8:40:ec:9a:a6:b7:
12:d7:29:9f:89:a5:23:49:de:b2:94:3a:9f:71:ed:fd:dd:70:
16:dd:be:e6:0b:a3:bc:70:f1:d7:78:63:58:2d:9c:16:58:e6:
7b:3e:6b:ec:f4:e9:cb:85:ff:5c:57:b6:2c:3e:e5:e8:77:b9:
e5:f8:92:e0:13:3b:89:27:f1:2b:b3:9a:26:90:e8:d9:26:a4:
bc:0d:49:15:27:17:e1:2d:64:55:21:3e:4d:84:c0:a4:a7:5b:
b4:59:23:02:88:b4:de:95:6a:ad:d5:70:88:fe:e6:8e:d7:ed:
94:b0:bc:de:ed:2b:52:57:69:36:53:f6:84:87:89:5f:b1:75:
93:35:f6:bd:90:8c:bb:36:61:79:a2:d2:ec:9f:98:98:50:0b:
00:6d:8b:f1:f0:6f:c5:0c:24:a2:60:85:c9:16:77:e4:75:5b:
ba:e1:f8:b8:9c:1e:c1:2b:92:3f:1f:62:25:78:10:e2:a0:cc:
8c:43:43:c4:c2:53:a4:da:f0:0d:bc:f2:12:6a:47:e5:cf:cb:
7c:ba:8a:1d:74:6e:27:25:f5:23:9a:e5:4a:83:55:47:d0:50:
36:98:8e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:39:31 2025 by rpki-client