Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
File: iGUv5lKWbXKKUnrubkPEhcaTn0U.mft (raw, json)
Hash identifier: 3wuyMfSpjFmOXkHZrZiMlSpPJt9rZgXDUYiHEVTGSig=
Subject key identifier: DF:36:DC:5B:89:02:88:38:33:C2:A2:D8:E6:A4:25:08:8F:9F:D5:E4
Authority key identifier: 88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
Certificate issuer: /CN=88652fe652966d728a527aee6e43c485c6939f45
Certificate serial: 0198D5BBFE7D3A878240A4DF4D191C531876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
Manifest number: 136E
Signing time: Sat 23 Aug 2025 07:02:04 +0000
Manifest this update: Sat 23 Aug 2025 07:02:04 +0000
Manifest next update: Sun 24 Aug 2025 07:02:04 +0000
Files and hashes: 1: 1b_wV0k49kuwRrhHplXiK2XiroA.roa (hash: RH2MIMTVkHxoiPuLQAUrE2Rqg6UxaLBroHReV0YDdhs=)
2: iGUv5lKWbXKKUnrubkPEhcaTn0U.crl (hash: jHfWlv/wzECwEGQryE4RW02khZm2xePvIDyffSXzpAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:fe:7d:3a:87:82:40:a4:df:4d:19:1c:53:18:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88652fe652966d728a527aee6e43c485c6939f45
Validity
Not Before: Aug 23 07:02:04 2025 GMT
Not After : Aug 24 07:02:04 2025 GMT
Subject: CN=df36dc5b8902883833c2a2d8e6a425088f9fd5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:40:0c:76:d6:cb:6d:bc:4d:60:31:3d:46:
e7:36:28:de:47:28:70:4c:29:12:b7:c2:c9:53:85:
63:51:51:78:ab:2c:86:5a:ed:eb:a9:67:70:80:84:
bc:c1:ac:69:bd:20:9d:bf:28:c2:12:82:fb:1a:09:
91:18:a4:c5:5e:7c:3b:1e:e4:81:b2:9a:1c:d9:c5:
36:6d:6d:c3:fc:44:9c:b4:aa:49:62:37:1a:fb:45:
6c:75:49:97:b6:e4:f0:1d:41:70:53:e1:98:de:7e:
19:75:3a:16:ed:d4:dc:8e:ab:eb:36:2f:72:e4:47:
c2:f7:2e:20:af:b9:3b:29:e0:6c:fe:09:db:db:af:
e9:1a:36:96:15:ba:7b:cd:75:c2:1d:db:cb:2d:ba:
71:f3:b9:36:2c:15:d9:73:17:4c:fd:f3:34:f1:18:
c1:d9:77:ea:38:ad:ef:33:9f:24:97:24:a2:ea:ee:
08:fa:e5:4b:5c:63:95:02:3a:68:46:0f:55:83:d8:
38:80:75:66:1f:3a:f0:5f:a9:0d:38:33:ca:b1:1f:
f3:37:fa:70:f2:4d:c6:c7:19:8e:cf:aa:b4:cd:83:
05:0d:6f:76:80:75:2b:52:75:3c:45:73:0d:95:f4:
c8:13:e4:f2:50:26:57:3e:5b:fe:86:8d:c9:22:3f:
cc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:36:DC:5B:89:02:88:38:33:C2:A2:D8:E6:A4:25:08:8F:9F:D5:E4
X509v3 Authority Key Identifier:
keyid:88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a1:58:55:13:06:73:8e:b0:00:ea:1e:9b:6b:2a:c1:e1:f9:
54:26:61:45:a3:a6:5c:e6:10:7f:78:be:5f:de:32:b1:a4:04:
e3:38:82:08:d4:c4:d1:4a:58:c5:c9:84:3e:bd:52:c4:0b:d7:
5b:84:3b:86:6f:4b:46:98:cf:1b:1f:84:52:32:ed:4e:51:5e:
be:62:b0:0c:64:30:ea:9c:10:0d:e0:26:4e:f4:6a:c8:c5:fc:
de:2a:30:33:f1:b8:a4:c3:6d:ca:ff:e2:a8:be:95:5c:4a:e1:
5c:fd:6c:01:cc:ed:ce:1d:cb:40:5c:d0:6d:d3:b2:de:fd:8b:
90:ce:e1:a1:59:2a:ac:fd:b9:d9:09:12:5e:79:1d:9d:47:ef:
26:1f:aa:08:db:01:39:cd:cb:e0:4f:f9:ac:09:fb:9c:6c:9a:
af:09:5e:b8:4a:bd:a4:af:4b:45:b6:c5:f9:68:03:1e:57:5e:
83:cb:d9:ae:36:97:76:d1:88:c6:ae:75:a8:ea:a0:09:99:78:
a8:9b:f7:37:7f:c8:03:3a:ff:24:70:b9:ab:9d:7b:2d:10:22:
f1:1f:ab:6a:d3:3e:59:ad:a9:92:0c:eb:e4:96:59:4a:95:c2:
5d:5d:e6:57:b3:ec:9c:a1:6f:20:f5:0d:78:33:2e:6a:4a:4c:
de:22:ac:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:22:56 2025 by rpki-client