Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
File: iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft (raw, json)
Hash identifier: blXisGd6R63tSSW5C6SYKa8lGJZEJmc7DGApAEOLtZw=
Subject key identifier: 4A:BC:C9:A1:6F:C2:EE:94:B6:D3:63:A8:48:94:2B:E4:8D:2F:56:69
Authority key identifier: 89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
Certificate issuer: /CN=893a58124ce9cc43783955255e7f583905cdb14e
Certificate serial: 0198D4E0A0DA34B45484804A493C31994158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
Manifest number: 0EB2
Signing time: Sat 23 Aug 2025 03:02:27 +0000
Manifest this update: Sat 23 Aug 2025 03:02:27 +0000
Manifest next update: Sun 24 Aug 2025 03:02:27 +0000
Files and hashes: 1: iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl (hash: GeYiOJeftSih0WTxh1s9CdWZfZikJ1eTR48zZJRqhfs=)
2: t9nkji_Xq4DRGMttbRDw-jVfqPI.roa (hash: MJaMfbYXB+V545skyyIWbRiW1FYp9UFjL+ooREdIKpc=)
3: x3UpgxINfYGtKCtOQQ8nTKqnfYQ.roa (hash: bx0oE168u4Tmbz20f8oi8B9aCfZBYtjemV0iReEb4PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:a0:da:34:b4:54:84:80:4a:49:3c:31:99:41:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893a58124ce9cc43783955255e7f583905cdb14e
Validity
Not Before: Aug 23 03:02:27 2025 GMT
Not After : Aug 24 03:02:27 2025 GMT
Subject: CN=4abcc9a16fc2ee94b6d363a848942be48d2f5669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:39:b0:43:46:45:9f:65:6c:fa:1d:cf:7b:c9:
c5:65:04:c5:00:4f:ba:0f:8d:02:2b:35:91:3f:63:
e5:80:69:a3:9d:c7:94:ec:e8:df:4e:67:ab:48:3e:
f4:33:d4:1d:66:27:ad:94:dd:81:ff:d9:56:37:e4:
d6:0b:1b:39:26:6c:79:67:be:67:d3:75:90:a7:a0:
01:00:84:58:ef:08:b4:c8:72:3e:dc:68:31:33:51:
50:93:cc:62:e3:3b:7e:8f:78:3e:f6:a3:53:0c:2d:
b0:c0:19:5e:8a:1c:f3:8d:8e:97:97:4f:eb:ea:6f:
cd:cc:7c:c0:8e:85:95:6d:2e:16:41:43:7b:9b:c4:
89:45:83:ff:71:19:50:9b:ce:98:c6:7b:f6:d0:22:
3a:c9:a1:b4:3e:04:15:24:5a:74:4f:7f:5b:2b:79:
9c:0a:6b:ad:07:10:9a:36:6f:0b:2e:66:2c:e5:21:
cd:9b:14:7b:c4:e4:50:41:fb:bd:7e:b4:83:91:70:
ec:fa:b8:3c:41:cc:86:87:e2:39:cf:c0:21:41:a7:
dc:bf:96:22:52:0f:0f:ef:d5:95:72:24:35:65:64:
30:f0:0a:98:f8:f3:23:df:55:77:5f:0b:5b:27:a2:
36:c6:ac:8e:a3:ba:64:17:c8:7c:a4:5d:94:12:19:
bd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BC:C9:A1:6F:C2:EE:94:B6:D3:63:A8:48:94:2B:E4:8D:2F:56:69
X509v3 Authority Key Identifier:
keyid:89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c7:a8:1e:90:d3:b0:5c:79:53:57:95:33:d9:af:b1:03:7e:
3d:4e:a8:3b:3e:88:10:fb:fd:c0:66:e8:91:36:02:7a:98:fc:
c6:ac:cd:88:fc:97:52:e9:20:9c:7f:25:47:f1:2f:99:e1:76:
96:7f:18:0d:3c:70:ed:ec:b3:63:27:7e:02:5d:3e:ee:87:65:
ad:e6:2a:c0:58:2b:c5:5e:f7:25:bd:7c:ac:df:71:03:5d:73:
74:69:1c:b6:4d:20:59:d2:ff:72:f7:20:63:63:8b:15:12:68:
61:f7:77:7f:e6:04:4e:3b:e6:f5:69:c1:88:38:ff:86:6a:89:
29:2b:d4:5d:5f:02:9e:fc:29:79:ea:f4:4f:78:1e:32:de:47:
5a:95:3b:eb:4d:89:48:b2:ed:7d:07:d1:74:37:26:b4:72:bc:
e8:e4:c3:f8:5d:07:50:4b:c2:12:fd:3f:6c:d9:6c:34:3a:57:
15:3e:93:2d:4b:73:ba:42:e4:48:96:5c:25:f5:3f:40:b7:ef:
86:99:af:6c:d7:f7:40:73:f8:1b:d8:6e:f3:cd:ca:ee:bc:3d:
04:0f:b0:37:59:13:01:10:07:da:00:62:55:93:bb:4a:31:c8:
96:dc:04:46:2a:d6:30:7e:35:63:2c:7a:2e:39:8f:a3:86:44:
ab:5b:de:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:44:42 2025 by rpki-client