Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft
File: iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft (raw, json)
Hash identifier: H183Im3gNPgbzGU2mHceuYSyZBL6R3QV3sxUYFGdhgc=
Subject key identifier: D5:A7:22:46:A9:69:4F:AF:30:22:00:28:CF:0F:45:42:F1:B8:F3:C5
Authority key identifier: 88:E8:82:BF:96:4F:70:92:C4:3C:DC:F7:55:0D:E9:56:2C:26:A0:28
Certificate issuer: /CN=88e882bf964f7092c43cdcf7550de9562c26a028
Certificate serial: 0198D697F25A8C2C0ACA235168BEB0B5C434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft
Manifest number: 029A
Signing time: Sat 23 Aug 2025 11:02:18 +0000
Manifest this update: Sat 23 Aug 2025 11:02:18 +0000
Manifest next update: Sun 24 Aug 2025 11:02:18 +0000
Files and hashes: 1: UZVUY94sqKLEh0icWoOQh0bntwI.roa (hash: vpvG9SY3H1VjvlXeI35sSNyZFm3fdFFooAVPM0TU2c0=)
2: iOiCv5ZPcJLEPNz3VQ3pViwmoCg.crl (hash: 2Aliut3sTl/3fM76GRMWVrskYLx/KRLQYVp27261AdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:f2:5a:8c:2c:0a:ca:23:51:68:be:b0:b5:c4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e882bf964f7092c43cdcf7550de9562c26a028
Validity
Not Before: Aug 23 11:02:18 2025 GMT
Not After : Aug 24 11:02:18 2025 GMT
Subject: CN=d5a72246a9694faf30220028cf0f4542f1b8f3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ca:80:ca:04:7c:39:2f:3d:11:22:47:60:75:
0c:82:ef:76:75:e5:9e:59:ab:93:0e:1b:e0:4d:85:
a4:92:38:6d:73:eb:d3:f3:8e:3e:17:0d:5c:77:2c:
7c:8a:6a:69:00:71:cd:a2:d3:38:7d:a7:98:79:eb:
f2:0b:76:58:49:f2:1f:a2:16:c0:d0:82:bc:bb:b0:
ba:55:3f:b0:14:9d:14:85:04:7a:08:09:28:6f:39:
8b:a0:03:bd:72:6c:cf:46:49:95:02:16:af:ec:11:
d3:c0:17:ef:ad:8f:99:7e:31:d7:2f:c8:26:b2:29:
0d:79:63:a7:7b:37:99:e3:6f:d4:69:1c:6e:ed:79:
23:e9:01:ad:ac:dc:53:1f:62:cb:5d:a3:9f:57:d0:
0f:33:73:7b:b1:24:66:b1:3d:9f:61:2d:19:f6:35:
84:c3:90:bf:36:0a:7b:d0:09:95:a0:e9:5c:65:e5:
94:e1:48:63:0d:8e:83:68:fa:d5:89:b1:91:ba:51:
d4:f9:a4:1a:c9:fc:5a:4b:3c:06:17:e3:a6:4e:8c:
53:8a:9d:af:cc:71:0c:0a:49:79:cf:df:7d:b5:4d:
da:f3:7c:8b:a6:4e:bd:c2:cf:ad:4c:59:d6:bf:1c:
5a:9b:e4:19:ee:ec:49:65:cc:d8:b5:92:1a:4f:91:
a0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A7:22:46:A9:69:4F:AF:30:22:00:28:CF:0F:45:42:F1:B8:F3:C5
X509v3 Authority Key Identifier:
keyid:88:E8:82:BF:96:4F:70:92:C4:3C:DC:F7:55:0D:E9:56:2C:26:A0:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fe:0c:7c:32:cf:60:bb:02:c3:1b:62:83:11:76:36:0d:8b:
a5:c9:3f:c4:4a:34:6b:a7:16:93:27:e9:63:5c:05:65:75:0f:
3e:2d:a6:47:8e:1e:90:5f:90:d2:ac:47:d3:bd:8f:aa:62:19:
cb:17:0b:c0:a9:25:51:d1:cb:85:4e:3c:75:c7:54:87:52:f6:
9f:a4:d2:97:b7:50:41:56:d4:22:49:67:b4:e2:dc:5a:ec:c9:
d7:08:54:fc:c1:9f:06:af:c5:9b:75:e7:49:5a:cb:79:e8:52:
0d:c3:2e:66:f1:86:94:de:ab:c9:de:85:e3:30:75:0c:cb:2f:
cb:c6:b3:02:73:5f:dd:c0:68:fd:da:97:9e:5e:48:1a:ea:db:
54:bf:01:36:32:e4:68:7c:bc:7a:bd:05:ae:cc:10:e0:49:43:
31:b1:3e:4d:74:3f:7c:3c:99:41:72:32:29:11:b4:74:93:7f:
56:51:31:39:90:d8:ba:63:71:5c:9e:ff:7d:e7:3f:34:75:2c:
29:f7:1c:1f:dd:a4:ea:20:59:84:a3:3d:ae:01:72:7f:59:89:
0d:c5:3e:70:72:5c:6d:b1:12:ca:30:c9:2c:6f:51:67:66:1a:
c8:fb:32:38:6c:b8:54:b6:c1:7a:74:1b:f3:fa:bc:52:5d:9a:
ca:9e:ff:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:57:42 2025 by rpki-client