Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
File: iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft (raw, json)
Hash identifier: dx6/22NzSH2XbbzFEPIyE5Fpj+F/C/afCNuy5QQvt4w=
Subject key identifier: 54:7E:05:B7:98:B7:35:8E:37:32:B2:27:70:80:47:23:B7:01:9A:04
Authority key identifier: 88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24
Certificate issuer: /CN=8898db8cb861bbbdd1fb7562def4d77d8642c324
Certificate serial: 0198D73BC96499B933C25188B393AA565DEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
Manifest number: 136C
Signing time: Sat 23 Aug 2025 14:01:16 +0000
Manifest this update: Sat 23 Aug 2025 14:01:16 +0000
Manifest next update: Sun 24 Aug 2025 14:01:16 +0000
Files and hashes: 1: hIJG4JYkLEhwraYEYvL-fraByuk.roa (hash: 5YFKdkA5FRK1IPjfHxOUcAbA5SZ2reBZq68WODkSIGA=)
2: iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl (hash: NlSQ+V/f2rpnoyvlPV8aQKjkFFUFNN16uucs4u/kj6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:c9:64:99:b9:33:c2:51:88:b3:93:aa:56:5d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8898db8cb861bbbdd1fb7562def4d77d8642c324
Validity
Not Before: Aug 23 14:01:16 2025 GMT
Not After : Aug 24 14:01:16 2025 GMT
Subject: CN=547e05b798b7358e3732b22770804723b7019a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:cd:75:6a:77:64:b6:2c:e2:a6:c4:7e:03:e0:
57:91:25:6c:6b:8a:a9:61:bc:01:ec:26:41:ad:b8:
2b:58:7c:c7:bf:59:48:0e:8a:24:22:35:dd:7a:5e:
18:24:aa:58:aa:cc:9b:b3:67:2e:6c:f8:bc:39:41:
ce:9d:ca:d2:eb:3a:d4:a6:8d:86:7c:38:ee:6a:b0:
e2:5e:f7:9c:fb:c9:24:d7:0b:a0:cf:d5:e6:eb:be:
89:69:54:7e:f5:fb:b7:1e:7c:0b:d0:ae:f7:74:4c:
30:75:ea:ff:b5:01:83:30:e3:88:7c:e3:78:ab:e2:
a3:bd:a7:88:7e:44:b8:00:ee:04:25:d3:f2:00:cc:
f6:ee:c8:22:ff:0b:ed:88:fb:41:b4:ae:26:d9:79:
38:30:a2:ca:de:5b:a3:43:cb:26:be:2e:59:2a:00:
68:18:cb:88:3e:b0:12:67:3e:5c:62:01:86:11:d7:
9d:02:44:f5:fa:11:37:dc:d6:56:34:6f:b9:93:84:
00:d0:18:eb:d8:79:95:02:85:48:ad:73:63:40:02:
36:45:9c:2c:79:5b:61:a4:b3:3c:24:2a:97:67:e0:
9a:a1:7a:1f:cc:16:af:f4:8e:18:ee:e4:22:46:f8:
ee:11:c6:71:3c:3b:b7:e7:45:b4:5e:ac:e0:c2:ca:
17:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7E:05:B7:98:B7:35:8E:37:32:B2:27:70:80:47:23:B7:01:9A:04
X509v3 Authority Key Identifier:
keyid:88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4b:56:f8:a6:a4:15:64:e2:f2:16:89:4e:4e:08:19:58:fb:
4d:af:87:18:9e:d8:b3:67:6b:0e:54:24:68:04:a2:43:64:97:
46:8f:c9:63:f5:5b:3a:3b:fa:cb:29:a5:7e:6f:ca:ea:eb:aa:
8d:d6:b6:fb:68:cb:7f:97:51:7b:53:15:80:20:9f:66:f9:b6:
0b:2b:ad:1a:58:a1:7e:22:73:4b:7b:b4:3e:95:a1:a1:ea:02:
85:99:65:6a:70:99:b7:af:50:0a:65:66:ef:32:b3:12:df:ec:
66:f8:c5:32:b5:3d:26:fa:b1:ce:f8:10:8f:a6:34:52:99:14:
cc:94:69:3e:74:39:3d:c5:0e:71:61:c2:a4:44:41:ab:8a:8a:
3f:45:36:0d:11:fd:af:f6:c7:a8:62:75:33:3d:0d:2f:8b:85:
b5:d5:9a:92:3d:a0:c9:77:a4:1c:44:b4:e7:a3:e3:81:02:a2:
8b:4a:d2:94:b0:71:1d:6e:40:19:2e:61:99:10:ea:53:5f:7f:
bc:28:5a:4e:d8:05:fd:eb:4b:78:3d:5e:fc:a0:d6:5b:6e:85:
f3:58:d1:a8:c5:32:bc:1c:78:d2:1e:fa:61:a7:14:5b:d9:8b:
59:dd:4f:00:4d:13:78:6a:79:64:4b:ff:b6:79:94:4b:e6:d4:
3e:0b:39:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:53:03 2025 by rpki-client