Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
File: iIFmRjoaMByltuuYvd0H45cJGYY.mft (raw, json)
Hash identifier: RdqvEzIYnchf3YikyuJzO3RROaUiowGoDrZrRO3FNdQ=
Subject key identifier: 4E:F6:44:49:B7:A5:F7:07:3E:A6:30:7E:AA:D8:1A:7F:F7:74:67:6A
Authority key identifier: 88:81:66:46:3A:1A:30:1C:A5:B6:EB:98:BD:DD:07:E3:97:09:19:86
Certificate issuer: /CN=888166463a1a301ca5b6eb98bddd07e397091986
Certificate serial: 0198D5F1D113EB7FDE0AD72AEF77E2243B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
Manifest number: 1123
Signing time: Sat 23 Aug 2025 08:00:51 +0000
Manifest this update: Sat 23 Aug 2025 08:00:51 +0000
Manifest next update: Sun 24 Aug 2025 08:00:51 +0000
Files and hashes: 1: iIFmRjoaMByltuuYvd0H45cJGYY.crl (hash: /mMvcNw4ouejuASco5Ao/OM/VDfJFdHEQuK8ca3Dy5w=)
2: rw7mvGsBN1ywLg0aU0WOnuWPa30.roa (hash: Kkop8VBeWFXHnSavZNOMJQZHo1FfDtxgbSsG84Nc5jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:d1:13:eb:7f:de:0a:d7:2a:ef:77:e2:24:3b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=888166463a1a301ca5b6eb98bddd07e397091986
Validity
Not Before: Aug 23 08:00:51 2025 GMT
Not After : Aug 24 08:00:51 2025 GMT
Subject: CN=4ef64449b7a5f7073ea6307eaad81a7ff774676a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a1:3d:f3:9a:37:04:e2:d5:8c:a5:d6:14:01:
34:7b:9e:24:82:71:c4:d4:1b:4d:06:3a:58:2d:95:
6e:f8:b7:6a:c0:10:09:5e:48:39:20:27:c2:4f:92:
86:28:d0:aa:8b:87:40:0b:e7:d2:a6:6e:74:f5:78:
15:c7:dc:b2:24:6d:b5:43:0e:de:c5:0a:06:82:37:
99:c9:48:0b:da:29:89:c6:52:a9:08:7a:01:90:3b:
64:96:b4:95:8b:d2:58:ad:0a:ac:65:59:d5:21:3b:
88:96:63:1f:bd:fa:92:fe:3d:fd:9e:cc:50:ea:e0:
44:7d:42:ef:a5:8a:b4:c9:3e:82:47:3b:30:97:61:
6d:e2:cd:75:b1:79:8a:da:4d:ae:76:97:2a:41:96:
f9:24:14:6a:f5:36:3a:20:78:ce:d5:a7:42:e9:26:
51:20:70:a6:32:b0:d0:78:19:c8:28:ea:66:df:45:
25:f8:00:1c:f9:cd:03:90:4b:03:b4:7a:4f:39:fa:
bb:b4:6b:b3:02:85:ce:da:14:38:fc:46:e9:f3:31:
5d:0a:e3:cf:ed:87:ec:53:4c:b3:8e:35:88:fc:fa:
7f:2c:6d:e0:40:5c:06:74:4a:7b:7f:a2:e0:bd:dc:
b5:d2:86:0d:61:56:50:67:ea:81:4d:53:1b:13:90:
fa:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F6:44:49:B7:A5:F7:07:3E:A6:30:7E:AA:D8:1A:7F:F7:74:67:6A
X509v3 Authority Key Identifier:
keyid:88:81:66:46:3A:1A:30:1C:A5:B6:EB:98:BD:DD:07:E3:97:09:19:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIFmRjoaMByltuuYvd0H45cJGYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/476fd0-b8a6-461f-b4c5-38c2c2a79c35/1/iIFmRjoaMByltuuYvd0H45cJGYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:13:cf:3b:36:b2:b2:17:60:62:1a:a4:44:77:1b:96:04:31:
3c:0e:b1:ef:c9:a8:29:5c:b9:dd:55:c5:ec:6d:a6:d2:52:7c:
5c:96:70:e1:14:0c:cd:5b:99:dc:81:14:8a:32:52:04:70:dc:
94:4d:1b:7b:f9:72:40:c6:a5:6e:7a:96:d4:8a:ce:2c:fa:0a:
8a:1d:19:7d:0e:05:96:ac:43:24:68:eb:e4:1e:04:a6:40:48:
aa:b3:98:c4:f5:48:7a:46:f9:57:48:ba:30:23:89:b8:c9:9a:
bc:a0:c0:01:7e:4a:34:38:58:61:bc:63:d5:15:46:31:b7:6b:
a3:a7:c9:8c:68:11:ea:f9:d8:e6:cd:be:32:53:66:af:a8:66:
e3:12:db:44:8f:c6:ae:6e:79:68:81:bd:68:d9:50:7f:2f:bd:
83:81:80:62:b8:b1:e3:53:aa:07:76:83:5f:eb:be:01:a0:89:
0a:c7:d1:46:20:71:a2:03:30:c3:3c:11:45:d3:6e:f1:54:5a:
8a:48:35:8c:d7:f1:dd:45:d5:71:40:ec:d2:6a:80:df:c3:34:
c8:d0:43:53:e5:cb:ab:ae:8c:6c:26:fc:7e:f3:95:d6:f3:39:
43:a4:99:8d:34:08:7d:3d:c3:26:0f:9d:c4:ba:49:88:0c:ae:
65:53:24:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:44:25 2025 by rpki-client