Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft
File: iOuqLxdpo932X4c9wx81HvB4rSU.mft (raw, json)
Hash identifier: kdRo1SZkAX7eKCC9H1md6szeJmXaccTR04nb+cz3I8M=
Subject key identifier: DC:70:B3:F0:D0:CD:A7:F1:24:96:95:50:59:D9:84:6D:21:0A:C6:A4
Authority key identifier: 88:EB:AA:2F:17:69:A3:DD:F6:5F:87:3D:C3:1F:35:1E:F0:78:AD:25
Certificate issuer: /CN=88ebaa2f1769a3ddf65f873dc31f351ef078ad25
Certificate serial: 0197CA95503F8E0521DB8BA9369D55FD0293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOuqLxdpo932X4c9wx81HvB4rSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft
Manifest number: 0D5D
Signing time: Wed 02 Jul 2025 10:01:12 +0000
Manifest this update: Wed 02 Jul 2025 10:01:12 +0000
Manifest next update: Thu 03 Jul 2025 10:01:12 +0000
Files and hashes: 1: P5TwA4gqR6DNAZ9Tx38K6wVBeSw.roa (hash: JFHWlXs6ts8+WEohOsphMs0bmJPDZeURLkqEXMqad1U=)
2: iOuqLxdpo932X4c9wx81HvB4rSU.crl (hash: vqSJzr79IS0nu1UP4wDT79Te2N5X9YXK+iK1mnr0iYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOuqLxdpo932X4c9wx81HvB4rSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:95:50:3f:8e:05:21:db:8b:a9:36:9d:55:fd:02:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ebaa2f1769a3ddf65f873dc31f351ef078ad25
Validity
Not Before: Jul 2 10:01:12 2025 GMT
Not After : Jul 3 10:01:12 2025 GMT
Subject: CN=dc70b3f0d0cda7f12496955059d9846d210ac6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8b:d4:8c:be:2e:7f:ef:b3:a5:5a:9e:bf:8b:
2f:60:41:2b:4c:af:a9:b9:22:27:c9:f0:e3:72:0f:
39:47:d3:69:0b:e3:26:07:59:b4:1e:88:6b:60:5a:
82:17:4b:21:36:a4:ca:fe:4c:a5:6a:94:73:03:b2:
06:40:68:56:c4:cd:0f:ba:47:15:65:40:20:8a:53:
b6:8f:70:be:8f:1c:ae:a6:ad:11:1d:67:45:29:ef:
70:a9:da:f3:be:63:4a:f9:fb:62:3a:53:8e:b8:85:
bd:96:bf:93:7a:02:b4:9b:3e:22:b1:9c:70:eb:35:
14:58:79:5e:a0:e7:c7:6f:da:16:e7:83:b6:37:c4:
12:2d:a5:b5:39:bb:1f:6e:f9:eb:3c:e4:86:1a:07:
aa:c2:77:5b:43:a0:b8:85:f7:9d:f1:14:63:d0:60:
99:6f:7c:84:ac:0c:ef:39:ff:eb:33:a9:10:e0:0f:
e1:aa:6e:b9:01:76:14:64:37:29:09:30:e9:c6:3a:
3f:57:45:22:24:28:b0:2f:ea:3d:85:15:bf:61:40:
7a:15:c1:6f:30:0b:b9:da:5a:8f:69:b9:18:d5:6f:
3d:68:49:60:3f:2a:da:61:47:77:c8:70:85:33:b5:
25:f0:21:b8:19:2e:c1:02:c8:42:5a:7b:16:b3:31:
37:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:70:B3:F0:D0:CD:A7:F1:24:96:95:50:59:D9:84:6D:21:0A:C6:A4
X509v3 Authority Key Identifier:
keyid:88:EB:AA:2F:17:69:A3:DD:F6:5F:87:3D:C3:1F:35:1E:F0:78:AD:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOuqLxdpo932X4c9wx81HvB4rSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a7:2b:13:5d:85:75:6d:be:bd:09:0b:a1:1f:94:bc:b5:0d:
05:4f:0f:96:2d:35:3b:c1:fe:da:ae:1d:b7:1b:53:3b:0c:e5:
21:75:c1:07:27:92:ed:b0:ec:44:ff:53:b2:0c:06:45:d5:a8:
2f:d7:55:17:4c:c2:d0:0a:e0:39:41:a7:23:e7:23:6c:e7:d2:
f1:57:34:b3:55:82:4b:ca:2e:7e:e4:19:c5:98:df:6c:07:38:
f3:50:4c:4a:41:79:5c:32:04:fd:d4:30:43:42:7f:26:57:c4:
ef:8b:a6:1b:66:eb:21:78:c0:f3:a9:da:fd:04:7e:35:a4:ce:
06:35:5f:ed:29:09:24:9b:d3:6c:59:d9:89:a3:e3:b3:cc:94:
14:af:fa:4b:c6:5e:25:2f:5a:c2:94:7e:81:8e:6a:5d:65:b3:
3a:fb:12:e7:c2:0c:63:76:63:84:9f:aa:c5:51:6e:5b:20:50:
04:b5:ce:0b:25:9e:fe:1f:aa:5a:23:c6:8e:06:9d:b5:c4:60:
e3:8b:7c:96:54:8e:60:0f:6b:0b:88:d1:b1:57:75:f5:07:77:
55:b7:d8:65:9b:2a:b4:df:d3:cd:93:44:90:15:c6:a3:06:59:
31:5c:1c:ae:6d:e5:e9:d4:98:8c:70:e1:76:69:7f:62:df:2b:
6e:39:1b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:35:44 2025 by rpki-client