Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
File: iNEpp8ePtm0Hc7yZAINX5QfB574.mft (raw, json)
Hash identifier: jzvgcsYyV9qxOqWQKJhj6MuCvs0JheF4ZGcI4KCbftw=
Subject key identifier: 38:32:9C:97:95:49:46:4E:BC:F6:1B:AA:82:BD:47:67:ED:3F:E1:6A
Authority key identifier: 88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
Certificate issuer: /CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Certificate serial: 0198D47439B7EBB58E3B493D6BC5F0070180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
Manifest number: 077A
Signing time: Sat 23 Aug 2025 01:04:03 +0000
Manifest this update: Sat 23 Aug 2025 01:04:03 +0000
Manifest next update: Sun 24 Aug 2025 01:04:03 +0000
Files and hashes: 1: 76xLkfM6kYxOK1NXh9OOS2MHsHA.roa (hash: 6Sbux0XZ8H/iAJjFbORSyS+kiaCneStSNPq6dnkA+DU=)
2: iNEpp8ePtm0Hc7yZAINX5QfB574.crl (hash: szj9Jq3FxWka6ocCXgNNmr73q39KAkrhWstNezyY+uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:39:b7:eb:b5:8e:3b:49:3d:6b:c5:f0:07:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Validity
Not Before: Aug 23 01:04:03 2025 GMT
Not After : Aug 24 01:04:03 2025 GMT
Subject: CN=38329c979549464ebcf61baa82bd4767ed3fe16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b1:f9:74:01:80:b8:68:e6:26:c6:68:6b:04:
7f:d8:e5:cd:d4:43:29:e9:64:44:1e:41:71:f7:b4:
53:fa:f7:e8:3d:74:79:20:de:3e:4f:b7:2c:8e:92:
81:19:20:be:7d:22:a4:8a:ef:4c:12:7c:65:42:7b:
58:02:72:14:f6:cd:26:d0:15:b1:38:82:e1:be:6e:
4d:9f:bb:5d:46:e1:72:8e:43:1d:60:a8:8a:d4:a3:
12:9e:12:b3:b2:1c:6c:e2:8f:e9:c1:a0:a4:2b:8b:
8e:b9:d1:70:61:f5:79:44:22:a0:01:21:45:47:71:
e4:56:2b:41:e4:1b:97:4d:4a:e7:48:e7:e8:9e:71:
26:28:53:71:17:76:06:c4:a5:ec:bd:c6:e7:3e:7f:
93:d3:9f:3c:ff:20:49:6b:28:34:09:7b:ee:95:2e:
b5:2f:a1:dc:83:4b:69:ac:15:90:a1:14:56:d9:50:
8d:70:bb:be:90:7e:9d:b2:e7:ae:d3:a5:9e:c6:d4:
47:2f:c6:86:32:fd:cc:b5:c8:fe:22:95:a3:93:05:
84:8a:88:e8:48:e9:a0:c6:b2:b0:a4:4f:e8:9d:44:
ec:94:dc:26:79:b4:8f:ce:3b:c5:58:ea:a7:11:80:
0d:11:95:fa:88:e4:62:b3:0a:f3:16:6b:93:98:55:
28:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:32:9C:97:95:49:46:4E:BC:F6:1B:AA:82:BD:47:67:ED:3F:E1:6A
X509v3 Authority Key Identifier:
keyid:88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b7:60:a5:06:ac:1b:f5:d8:d9:4d:62:93:4b:fd:66:05:f1:
ba:46:be:5f:d4:13:e9:1f:87:21:5e:72:81:48:40:88:4c:97:
3e:8c:b0:bc:41:23:21:35:e2:b1:b4:04:75:ae:c0:3d:56:6b:
c2:b9:74:1b:67:5a:ef:94:64:1c:78:07:fd:06:34:ba:30:70:
6e:bc:f5:a4:d1:a8:9b:f6:3c:cf:a0:22:95:b5:00:98:fd:a7:
a7:d2:ac:0a:4a:82:e5:75:e0:f3:8b:10:3d:98:a7:9d:66:88:
e2:51:dd:69:91:73:3f:6d:01:e7:cc:f1:43:0c:94:6e:37:80:
72:a2:fb:3a:bb:59:6e:f5:06:4d:a9:f2:a6:f0:6f:52:b5:d3:
c0:53:fb:08:c8:43:c8:5c:ef:f4:bd:8e:91:14:69:74:65:58:
c7:5b:1b:fd:28:a4:2b:74:4f:6a:bf:95:3a:88:dd:6a:94:a6:
57:e4:31:7c:bf:d6:7a:91:02:cc:87:b4:f6:c3:84:aa:74:38:
d5:48:ac:52:e7:6c:b7:7f:46:b6:59:a0:99:c7:7c:f1:de:c3:
86:3d:00:89:49:a3:cd:7c:5d:4b:be:7c:a1:da:be:1d:56:a6:
8f:b5:64:de:f3:df:b7:5d:59:6e:c9:89:bc:34:6d:ad:97:da:
4c:23:3c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:32 2025 by rpki-client