Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
File: mIoB4lJuOVBBksMCcvOAs5rj8qY.mft (raw, json)
Hash identifier: 0mKIbDpmAPnOr0pOieYHio6+HC8mib3ureY8qXWGmFQ=
Subject key identifier: EA:3B:9A:BB:E1:FB:28:87:DF:23:F4:14:3E:0E:36:8A:E9:7C:3E:37
Authority key identifier: 98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6
Certificate issuer: /CN=988a01e2526e39504192c30272f380b39ae3f2a6
Certificate serial: 0198D4E0EA6C32529F3A5170B8DE8F8891FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
Manifest number: 0624
Signing time: Sat 23 Aug 2025 03:02:46 +0000
Manifest this update: Sat 23 Aug 2025 03:02:46 +0000
Manifest next update: Sun 24 Aug 2025 03:02:46 +0000
Files and hashes: 1: 6XCTUSOWxa7WsKwz6cNlndXeK8c.roa (hash: xRjajkiMCGOYK8K3wQjBK4JDfm1qhykgYmXpSadPeMg=)
2: mIoB4lJuOVBBksMCcvOAs5rj8qY.crl (hash: YC8DyKgbeoSCuUxkrt3jopQl9Waad6UWEq9Ew55NcDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:ea:6c:32:52:9f:3a:51:70:b8:de:8f:88:91:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988a01e2526e39504192c30272f380b39ae3f2a6
Validity
Not Before: Aug 23 03:02:46 2025 GMT
Not After : Aug 24 03:02:46 2025 GMT
Subject: CN=ea3b9abbe1fb2887df23f4143e0e368ae97c3e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:86:a2:b9:91:97:02:70:b5:aa:b5:c2:1d:fb:
b4:e6:4f:16:70:d4:42:97:88:96:41:4b:4e:d1:c1:
2c:6e:a7:b0:b3:f4:fc:84:87:16:f9:36:a9:f7:b0:
a4:c5:6f:6b:31:4e:ce:6d:0e:17:32:01:4b:12:5c:
e6:c7:24:d4:93:a9:98:5f:fd:4f:8d:f8:bc:8f:de:
ba:1c:39:f4:61:bc:6c:10:b5:f0:05:2a:7e:50:94:
cf:02:e4:ec:24:43:1e:33:b1:28:91:e4:87:50:3f:
2f:a7:a5:ec:91:11:17:5d:7e:f7:fc:23:62:35:c6:
c3:c5:58:0b:bb:c4:0c:3d:cd:9f:cb:76:f5:a5:17:
4d:63:b8:53:3b:e7:d7:fb:bf:44:96:ed:e2:db:14:
a8:74:3c:94:b7:67:f2:16:27:b3:f8:60:19:9d:d4:
9b:14:a4:f2:a9:0d:94:c8:e1:1f:c4:da:d8:ab:b4:
80:2a:34:45:d2:5b:b7:20:10:60:0a:4c:e0:58:a8:
2d:58:a7:a5:50:00:a8:11:2f:e5:06:eb:0b:aa:dc:
15:06:52:03:70:94:63:48:66:fc:6e:e0:40:6f:3b:
56:9f:1f:10:1b:8e:cc:0d:0a:9f:be:77:2d:4c:89:
f0:4d:c3:4f:51:06:3c:13:99:42:c7:2b:b7:06:7c:
fe:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3B:9A:BB:E1:FB:28:87:DF:23:F4:14:3E:0E:36:8A:E9:7C:3E:37
X509v3 Authority Key Identifier:
keyid:98:8A:01:E2:52:6E:39:50:41:92:C3:02:72:F3:80:B3:9A:E3:F2:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIoB4lJuOVBBksMCcvOAs5rj8qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa3603-c2ca-4577-b7eb-772f841c4393/1/mIoB4lJuOVBBksMCcvOAs5rj8qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:47:b4:e1:0e:de:d2:44:a9:dd:75:1f:55:fc:c6:bc:79:9d:
21:81:70:4a:70:85:6e:44:2f:25:6c:1e:74:90:eb:25:e3:9d:
5e:69:d8:1b:00:e0:c2:2d:ba:f8:70:ef:e3:e7:90:45:26:15:
2a:c2:45:9c:10:cc:c2:e9:b8:bc:14:88:9a:41:19:5d:10:09:
06:29:ae:57:48:6e:92:81:e5:2f:89:08:14:a4:e6:c6:75:b5:
30:19:b0:8c:17:5f:72:73:f2:0c:a9:82:e2:ea:fa:d7:ed:e9:
3c:b4:1d:06:2d:3e:dd:51:ec:93:75:7f:68:0f:0a:b6:59:51:
bd:84:99:27:4f:4b:12:ba:8d:0a:8e:06:50:bb:53:58:b0:ac:
9c:fd:22:b1:55:a1:23:7b:5b:0c:99:4a:c7:0b:5c:f0:77:85:
d3:b3:38:00:a3:60:57:f2:1e:c0:c5:64:c9:dc:7b:7a:41:cd:
1f:e5:aa:0e:a1:0a:9f:4b:84:03:94:2e:72:af:f5:b8:f6:34:
26:3e:4d:76:3e:a5:86:ee:7e:f0:e1:9a:fd:7a:27:71:0a:10:
69:ed:ef:4e:c2:58:c2:89:c6:98:77:c0:05:af:f1:5b:75:00:
08:f1:a3:18:25:85:50:7f:92:ba:27:2e:90:0a:a2:92:92:78:
1f:f3:6f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:32 2025 by rpki-client