Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
File: io-pkrwKYdssvnhuHFnTYMzlRIY.mft (raw, json)
Hash identifier: Nb0FXMhTXmkWlraNgeOowVzfr8HVpC1X6vwMXTVD6Oc=
Subject key identifier: CF:C6:3A:2A:80:CF:29:1A:2D:40:12:FE:2C:6E:45:01:93:64:FA:F2
Authority key identifier: 8A:8F:A9:92:BC:0A:61:DB:2C:BE:78:6E:1C:59:D3:60:CC:E5:44:86
Certificate issuer: /CN=8a8fa992bc0a61db2cbe786e1c59d360cce54486
Certificate serial: 0198D5BBDCD65838FC6B7E53AA84534284CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
Manifest number: 079F
Signing time: Sat 23 Aug 2025 07:01:55 +0000
Manifest this update: Sat 23 Aug 2025 07:01:55 +0000
Manifest next update: Sun 24 Aug 2025 07:01:55 +0000
Files and hashes: 1: UCOQjmQUUOgrTdTJgotuOqOo8tE.roa (hash: LKSVHd9tPQynvxDd2UN8Jk/eJK88GQBFqDbfRDHvZ3g=)
2: io-pkrwKYdssvnhuHFnTYMzlRIY.crl (hash: LewWzkgGNd3/0EYIYHCQOLfItRrTL6wZHukXpLs3zlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:dc:d6:58:38:fc:6b:7e:53:aa:84:53:42:84:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8fa992bc0a61db2cbe786e1c59d360cce54486
Validity
Not Before: Aug 23 07:01:55 2025 GMT
Not After : Aug 24 07:01:55 2025 GMT
Subject: CN=cfc63a2a80cf291a2d4012fe2c6e45019364faf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:29:48:f7:a5:ea:0f:b9:53:89:69:45:0c:a6:
fe:db:ed:b4:6f:47:1d:13:8e:6c:26:78:03:a9:61:
97:c9:87:5e:38:fa:f2:8d:13:20:a3:4e:e1:ee:b2:
24:10:b0:4c:57:9f:c9:4d:1d:14:64:84:50:68:b3:
be:42:b9:09:e8:f4:a3:76:9d:e6:7c:7d:4a:50:88:
23:83:98:6b:a2:20:9b:75:c6:36:77:92:6f:15:85:
51:68:42:59:5e:d6:0f:f5:67:98:60:cf:ba:7b:45:
34:9a:14:78:42:fe:6b:13:51:3a:71:38:4c:fa:ea:
fc:ff:76:44:9e:e5:0f:db:20:93:97:01:dc:29:28:
e0:3d:9d:c0:0a:f5:7e:68:d5:1f:8c:39:c3:f6:90:
13:6d:ee:28:70:f7:fc:4d:ac:a2:de:4d:63:16:c0:
1e:1e:f0:cd:ac:05:02:d8:21:f0:9e:27:c3:6c:c7:
0c:a9:00:dc:08:c7:40:8d:cf:1e:65:10:fa:d9:2b:
b1:f3:06:5b:7b:64:28:e4:04:6c:3b:97:2e:bb:f3:
7b:d7:73:89:3e:c9:67:df:34:62:2e:b6:0b:5e:bc:
b5:26:74:0c:cc:21:ba:24:b8:ea:b3:b7:39:c8:d6:
3e:a9:f9:71:c8:c7:35:84:c1:29:9a:e5:c6:ea:22:
74:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C6:3A:2A:80:CF:29:1A:2D:40:12:FE:2C:6E:45:01:93:64:FA:F2
X509v3 Authority Key Identifier:
keyid:8A:8F:A9:92:BC:0A:61:DB:2C:BE:78:6E:1C:59:D3:60:CC:E5:44:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io-pkrwKYdssvnhuHFnTYMzlRIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/18022c-2d9d-4380-a15b-96a601bb6ba8/1/io-pkrwKYdssvnhuHFnTYMzlRIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:11:11:1c:ed:1e:87:37:4a:31:f1:b3:cd:08:ed:bf:5d:dd:
b0:fc:9f:96:17:f3:06:75:74:f4:d2:12:ed:63:8e:5c:bd:28:
8a:14:2c:ec:e9:ac:e7:0c:f3:00:fd:28:b8:43:77:26:5e:a9:
a5:7a:b4:ba:ad:ed:66:0a:6f:2a:3b:ad:5c:25:71:96:6e:3f:
7c:f0:8a:ee:ba:d3:1b:e7:d0:8f:6c:69:f8:f3:37:a5:29:34:
fc:eb:0f:45:03:43:d7:8f:14:6e:f7:2c:a8:05:a6:f9:fe:49:
6c:68:5f:c7:d4:99:cc:c9:e4:0d:bb:b5:fa:1c:bd:f7:43:4b:
04:ae:37:e4:78:43:60:88:ef:74:c6:2f:10:da:2c:ca:2b:23:
25:63:1b:8f:ce:9a:42:81:2a:96:5c:7a:e4:f8:ff:bf:23:0a:
26:af:07:d7:31:e5:3c:da:aa:e3:ab:3e:e8:e8:3b:16:56:ff:
bd:f6:26:ad:5d:ac:50:71:ff:99:46:f1:37:e3:63:25:c4:32:
e0:62:77:5a:0c:79:0c:18:df:eb:ff:c0:f3:52:48:01:02:a7:
5a:67:89:bd:db:c7:68:28:89:2a:6d:b4:cf:85:fd:0f:19:cd:
74:cb:e7:d3:f5:f6:80:fd:e7:3e:6e:5e:63:90:c1:02:51:e3:
c6:5b:b8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:59 2025 by rpki-client