Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
File: Ip-w-z0njhsoCnd94gDvvQi6rDA.mft (raw, json)
Hash identifier: enZkddmob+r0rl2yx3x+nje0CbxxKYlYU7PlUXq0quI=
Subject key identifier: FE:A9:C0:AB:3E:89:E2:D9:E3:1D:68:7D:C3:30:9A:47:A7:B7:E8:D3
Authority key identifier: 22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
Certificate issuer: /CN=229fb0fb3d278e1b280a777de200efbd08baac30
Certificate serial: 0198D583D8028B82A25716155A793605B2A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
Manifest number: 08C0
Signing time: Sat 23 Aug 2025 06:00:44 +0000
Manifest this update: Sat 23 Aug 2025 06:00:44 +0000
Manifest next update: Sun 24 Aug 2025 06:00:44 +0000
Files and hashes: 1: EdKpa32IZ9Dnd3k-vmeHaMU23Tw.roa (hash: WGOFdfPIgmzQx9aGUgM6u6XYxnkTJOLa0M2Z4HLrsFA=)
2: Ip-w-z0njhsoCnd94gDvvQi6rDA.crl (hash: uXt8RLg9tmCSuPolEYQmGwcSDgvfHk+SUO5Od/MIqVM=)
3: TaMd7DA-6NrsYwAIJaSvClB4fpo.roa (hash: dkRPf4s5CoCdHNuMtPMADul0c0mdFRvVK8/5OUkpYlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:d8:02:8b:82:a2:57:16:15:5a:79:36:05:b2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229fb0fb3d278e1b280a777de200efbd08baac30
Validity
Not Before: Aug 23 06:00:44 2025 GMT
Not After : Aug 24 06:00:44 2025 GMT
Subject: CN=fea9c0ab3e89e2d9e31d687dc3309a47a7b7e8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5f:07:e1:68:88:0a:81:3c:48:da:9f:70:da:
b4:bf:ee:d8:b8:56:e5:80:fb:23:fc:cc:3e:9b:36:
41:cd:e3:00:64:e4:4e:83:8e:8e:cb:de:9a:b5:df:
2f:70:bb:3e:e4:8e:bd:01:aa:67:42:81:a2:32:d6:
05:68:32:31:a3:da:20:30:fc:3c:5f:63:60:ce:ac:
c0:45:e0:65:57:7c:1c:a5:29:9d:93:26:ae:ac:54:
53:3b:d1:f5:c9:bc:70:54:5d:53:89:b4:47:b7:70:
bc:d8:7c:ad:b2:a7:06:32:7f:df:d8:40:1e:bf:ee:
0f:0a:97:d4:4e:cc:dc:ec:79:5f:1d:c1:30:20:ed:
d5:a3:bb:82:6f:19:c3:d1:ac:fc:73:f4:c6:c2:b2:
59:45:6f:97:05:97:d5:a7:db:34:cb:23:90:f0:9b:
32:19:aa:5b:6a:fb:b7:22:59:52:5b:90:c9:2f:da:
50:d1:5a:79:23:f9:13:e2:39:39:d5:71:e4:5d:38:
61:5b:03:3b:b3:1d:33:58:03:a1:5a:39:03:72:56:
5f:52:83:7b:26:a8:af:66:ca:8d:75:61:2a:b1:5b:
b8:52:92:ca:ce:71:2d:98:85:2f:51:cb:11:ba:49:
86:27:dc:e9:48:59:45:e6:e8:ef:75:6d:78:2f:07:
f4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A9:C0:AB:3E:89:E2:D9:E3:1D:68:7D:C3:30:9A:47:A7:B7:E8:D3
X509v3 Authority Key Identifier:
keyid:22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:11:d5:99:ba:9b:78:92:7e:c3:bc:46:b1:cc:10:4b:42:f1:
56:de:7d:d1:72:62:40:43:7a:c3:6e:35:43:46:85:da:7f:9e:
67:6e:b5:7e:17:2d:74:c7:a1:e3:9b:3b:c6:30:6b:bf:a1:2d:
e5:5d:3c:42:06:f4:ec:24:10:11:2c:8b:89:40:46:f0:81:c4:
32:27:96:7c:e2:70:f1:da:c6:a8:4c:70:36:4c:09:92:f9:00:
da:54:8a:1e:c3:f9:4b:1c:ec:c8:39:2b:74:d2:c8:f1:bc:77:
1a:48:c9:97:80:45:b7:7c:9d:68:c6:73:0d:9f:12:17:d7:33:
95:0d:76:27:14:fe:94:41:de:2e:77:3c:7c:89:fc:bc:68:6d:
ae:50:53:34:82:fa:4b:b3:3a:15:f5:2d:d3:ad:96:9e:e2:6f:
0a:19:6c:c3:a7:bd:4e:40:c1:60:a5:c2:99:a6:93:55:75:82:
85:50:b8:cf:c3:56:3d:17:e0:0b:70:37:18:72:37:93:98:78:
ee:3b:3f:b2:eb:2d:81:7c:c4:7e:16:43:ac:95:a4:f8:b7:ad:
18:27:ca:80:38:73:8c:67:dd:48:1b:33:7b:22:5d:cf:87:7d:
3c:46:b8:06:e1:01:95:bc:76:c1:82:83:15:9f:e3:bf:7d:e4:
02:dc:5d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:43 2025 by rpki-client