Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
File: iP4ZBc16825jraY2bBR7Ydhcnys.mft (raw, json)
Hash identifier: rmeMD2tSVEPyD3EhvA31PD3w5xY4hXtU8Gr6KR+jt9w=
Subject key identifier: 88:59:94:E7:B6:09:5E:C3:E7:06:B7:AB:50:48:30:6A:A0:8F:53:22
Authority key identifier: 88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
Certificate issuer: /CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Certificate serial: 01987DC0E3C9186D325F4EBEB774044309D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
Manifest number: 075E
Signing time: Wed 06 Aug 2025 05:00:49 +0000
Manifest this update: Wed 06 Aug 2025 05:00:49 +0000
Manifest next update: Thu 07 Aug 2025 05:00:49 +0000
Files and hashes: 1: DSjiByReVAFtGenTha4D-8dSQJA.roa (hash: LTaqsJLmNorNuR9w6MCAPY47C39e6eSxiN8KzBSficg=)
2: N3Ms1tO5Rc3q58ZodMbwcW3QRxA.roa (hash: QeEjLFu1bfyi8L5wOE2F/BxSn3Wihpq/1jEicr1OiIU=)
3: iP4ZBc16825jraY2bBR7Ydhcnys.crl (hash: qM2Y+sSIcUbJ8b7FAifv4PSeNKL/oOIPlsM3r9jJ5ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:e3:c9:18:6d:32:5f:4e:be:b7:74:04:43:09:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Validity
Not Before: Aug 6 05:00:49 2025 GMT
Not After : Aug 7 05:00:49 2025 GMT
Subject: CN=885994e7b6095ec3e706b7ab5048306aa08f5322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c0:09:f3:e6:3c:ee:fd:d0:f1:00:40:57:95:
86:a2:4c:f1:56:55:67:1e:32:53:e8:f9:87:19:f3:
9a:21:00:bf:91:9f:da:19:b3:13:0c:7e:1d:2e:1a:
cf:5b:90:ba:33:6b:78:f8:e9:c0:0b:e6:2e:88:52:
cc:d8:6d:d8:4a:c8:a6:43:aa:34:c2:0e:77:38:65:
aa:18:70:28:aa:01:60:64:2f:2f:f7:0b:ac:b4:78:
45:5e:94:02:e9:8c:01:b7:bc:99:65:75:1a:f7:74:
4f:a4:a1:1d:76:92:37:2e:e1:87:a5:c6:cb:8d:91:
06:30:04:bf:29:2a:61:d6:ca:d1:d6:a6:f4:21:f7:
b2:be:84:29:22:ac:c6:c1:c2:0c:b5:f5:83:70:98:
89:ba:95:39:e2:96:4e:0e:64:ee:7f:2b:53:cd:8c:
a6:7a:c9:6a:60:96:94:11:9a:7e:99:0f:c9:5e:3a:
e2:1d:7d:7c:f5:7c:32:f8:70:00:98:be:a3:1c:a5:
56:29:5d:d8:64:3e:67:62:45:b4:bf:4d:2e:e8:f7:
6d:b6:7e:1a:3c:45:34:3a:1f:b5:d1:07:d2:b3:eb:
d4:2f:01:f3:43:a9:89:5d:68:e7:36:97:89:02:5b:
90:84:86:bb:c6:88:94:95:cb:f7:83:e3:b7:aa:25:
bb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:59:94:E7:B6:09:5E:C3:E7:06:B7:AB:50:48:30:6A:A0:8F:53:22
X509v3 Authority Key Identifier:
keyid:88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ea:08:3d:f5:67:06:f1:4a:de:f2:73:d2:dc:80:b5:fe:a7:
27:bc:31:e9:5d:15:92:be:a0:ba:3e:6d:6b:c7:79:06:df:b1:
ce:57:42:5a:22:02:9c:e5:7b:c8:fa:7e:cd:91:7e:ac:c3:b7:
36:8a:4f:8b:a2:81:9f:c6:46:28:31:a2:e3:17:74:85:4b:ae:
af:84:cf:13:5f:dc:f5:d5:72:78:97:b0:c3:8c:82:64:31:ea:
5d:3f:b4:b5:87:f4:bd:8d:88:c1:50:1c:40:27:20:2d:c8:9a:
79:13:ec:60:61:98:78:4f:2f:09:c0:4d:88:ab:b6:77:58:84:
c5:09:40:9f:f9:95:72:48:b7:6a:64:95:7d:e6:23:15:45:c0:
15:fe:88:81:01:f6:5d:f5:7f:e9:71:a3:47:1e:49:6e:25:72:
ab:70:d2:e4:ff:fd:06:32:92:01:90:51:4a:d0:aa:80:09:b9:
d7:e2:73:d6:c5:4e:7d:41:1d:cb:7a:25:49:7f:8a:76:f7:f3:
85:f0:ab:97:5f:4f:8b:51:b9:bc:e9:19:32:4c:8f:cc:6a:f0:
e5:88:41:c2:18:c7:63:21:d9:25:24:c1:c4:30:0c:5a:e1:64:
46:68:ca:78:c4:84:d1:9b:c2:ca:be:6b:76:8b:68:b8:d1:ee:
b2:39:f0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:57:21 2025 by rpki-client