Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
File: iiJ8Nfko2ci4_3wlch79R6kNy2c.mft (raw, json)
Hash identifier: vfv5XRion9ZCU6K3iW+Fxs6eJmnLT3y2DxTcnFBNTxM=
Subject key identifier: 8F:2F:91:6F:4C:9B:5F:8D:6B:97:03:A1:F6:2E:F8:DF:16:4E:CF:41
Authority key identifier: 8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67
Certificate issuer: /CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67
Certificate serial: 0198D5BBD5B1C1B461DEBC5C61966380C8C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
Manifest number: 1351
Signing time: Sat 23 Aug 2025 07:01:53 +0000
Manifest this update: Sat 23 Aug 2025 07:01:53 +0000
Manifest next update: Sun 24 Aug 2025 07:01:53 +0000
Files and hashes: 1: K7N-hRXidANMpYlZJ_rYSwLoLCk.roa (hash: tqDwe1a97FYihn4sdeIxy/I7wKkMHB8gK4badlQZXTs=)
2: iiJ8Nfko2ci4_3wlch79R6kNy2c.crl (hash: mVopmMl8LCxGO4ziTcqWzdDGEqRRaWg148PGBjQ/8HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d5:b1:c1:b4:61:de:bc:5c:61:96:63:80:c8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67
Validity
Not Before: Aug 23 07:01:53 2025 GMT
Not After : Aug 24 07:01:53 2025 GMT
Subject: CN=8f2f916f4c9b5f8d6b9703a1f62ef8df164ecf41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d0:6f:a3:27:f4:44:a9:f1:e5:cd:3e:4b:5e:
25:9a:bf:ac:31:8b:ae:4d:ac:32:da:43:69:6c:ec:
b5:47:1b:ad:dd:df:84:c2:cc:78:aa:74:e1:4a:e6:
b6:c6:cd:99:3f:6b:ed:c1:a3:08:c3:3b:b3:22:2b:
5c:e6:b5:9a:64:9a:55:60:9d:cb:3b:46:d7:65:1b:
63:28:49:cf:e9:e2:b7:a0:99:8d:ff:b5:a6:16:02:
83:6d:08:3d:a0:cb:10:2e:00:e1:b9:03:62:c9:d1:
5f:c4:ba:6c:29:51:00:f9:98:b2:50:91:69:3d:b7:
01:e5:c0:87:e2:46:dc:91:46:58:48:0f:84:0c:7b:
5f:c4:99:23:ec:25:f2:c3:96:51:99:4c:7d:95:e2:
c7:d4:e9:dd:d7:45:28:7d:bd:23:78:8b:b7:9a:2a:
9e:6c:ff:5b:2d:70:f7:d7:d5:7b:5e:2f:0a:86:a0:
09:1b:20:9e:a2:72:b4:36:ae:ab:9f:d9:84:16:a2:
96:28:3b:cf:cf:38:c6:44:5f:fd:0f:90:e0:67:25:
e1:6a:98:e0:9e:58:21:a3:db:4f:5d:f8:78:8b:08:
63:06:6d:e9:fe:5d:9c:4f:b2:dc:2e:eb:c3:90:d3:
2a:4e:3d:1e:f8:86:97:6d:1c:fc:c3:7e:97:c2:de:
0d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2F:91:6F:4C:9B:5F:8D:6B:97:03:A1:F6:2E:F8:DF:16:4E:CF:41
X509v3 Authority Key Identifier:
keyid:8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:46:93:54:2a:f1:28:1d:b0:6f:52:1f:60:26:d3:de:fd:6e:
1e:68:d4:74:cc:af:50:48:a5:39:72:d9:02:cb:09:12:ef:59:
1e:de:50:94:4e:c0:71:a4:92:09:cf:51:b6:77:2b:af:2b:29:
fb:fe:e6:29:20:03:6c:58:48:d9:9a:95:a0:49:9a:75:18:d8:
e6:f3:43:3b:6a:0b:83:3d:a1:63:30:14:10:1a:7f:48:23:36:
b3:cc:77:92:ad:9f:66:4e:31:14:5b:c1:25:15:ab:26:18:d7:
6d:72:d3:88:4e:2a:26:24:3d:86:61:cb:da:f3:3f:04:a6:8e:
11:a0:14:fc:1a:93:75:00:23:58:dc:fd:30:bc:7f:d7:26:eb:
94:b2:fc:97:5e:af:a0:89:f7:af:aa:a2:c2:e1:a9:61:34:d9:
21:ed:aa:fa:a4:79:a4:9d:a5:49:d7:a4:4f:fa:10:9e:7b:32:
38:de:9e:1a:1b:d9:5d:8c:e7:4c:b4:b5:81:f7:41:53:fd:38:
6d:61:14:31:e9:08:7c:a5:f3:fc:29:9f:6a:78:e5:ed:2f:a2:
29:31:8b:70:25:23:fb:d1:9a:f3:35:71:34:bd:2b:7f:f1:c1:
53:10:6a:17:03:b5:7a:6e:92:b2:de:a1:7e:88:d5:f1:0e:f4:
5b:31:ef:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:10:19 2025 by rpki-client