Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
File: i5PlZ68ZipTh_PBf4P58khCVqEo.mft (raw, json)
Hash identifier: 5QBBPU90VO2Fm3X2ZwT9/LxoZezxkOp8bEoLBITKK84=
Subject key identifier: C7:B8:4A:F9:FF:10:11:AB:1F:B5:5A:D1:0F:1B:77:AB:1B:3F:B8:34
Authority key identifier: 8B:93:E5:67:AF:19:8A:94:E1:FC:F0:5F:E0:FE:7C:92:10:95:A8:4A
Certificate issuer: /CN=8b93e567af198a94e1fcf05fe0fe7c921095a84a
Certificate serial: 0198D5BBC931E37C68DEA2022C782BF4D942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
Manifest number: 0AF3
Signing time: Sat 23 Aug 2025 07:01:50 +0000
Manifest this update: Sat 23 Aug 2025 07:01:50 +0000
Manifest next update: Sun 24 Aug 2025 07:01:50 +0000
Files and hashes: 1: 6DAE46YGraEJYVV3HiGtZg9tT3U.roa (hash: 9Q8yRtyc9v/k/ONyDJo3tJ6f8FW5cGNXex+XpsJxg2Q=)
2: i5PlZ68ZipTh_PBf4P58khCVqEo.crl (hash: Oi/HDBqLMQP0GEI03f5qU1plnu+9IA13zx2kjWg7ONU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c9:31:e3:7c:68:de:a2:02:2c:78:2b:f4:d9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b93e567af198a94e1fcf05fe0fe7c921095a84a
Validity
Not Before: Aug 23 07:01:50 2025 GMT
Not After : Aug 24 07:01:50 2025 GMT
Subject: CN=c7b84af9ff1011ab1fb55ad10f1b77ab1b3fb834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:22:d5:10:9f:49:fc:ca:85:c0:20:0b:6c:77:
c6:02:05:2a:72:22:0e:74:32:63:34:08:5e:da:a2:
5c:10:ce:2d:c9:98:12:14:7e:83:cd:34:00:63:9f:
98:b9:c4:6a:46:1c:f7:c2:90:78:6f:1b:ed:a3:f5:
5e:88:6d:cb:7a:97:a5:10:4d:19:89:cf:e0:d7:f7:
a0:67:ba:c6:08:5f:67:6e:58:3a:81:eb:db:8b:5d:
75:c9:16:7f:8d:15:8c:9c:61:a7:4a:0c:c8:7d:28:
4c:9c:31:6a:af:fe:d5:4c:cf:c3:fc:d4:b9:a8:65:
72:12:e9:54:f7:0f:0c:13:a7:3c:71:aa:89:eb:a8:
26:78:c9:d1:c5:d8:be:8f:15:fe:4a:75:2e:bb:53:
08:61:fc:13:78:62:ab:a0:76:42:71:ad:9b:87:5a:
bc:60:3e:53:9a:2a:87:1a:f4:ea:bb:fe:1a:ae:3b:
68:f8:79:21:9e:83:b8:4e:77:b7:dd:60:2b:03:da:
ef:4f:a7:d1:89:4b:f4:48:16:25:5c:26:78:70:7b:
86:25:2d:89:42:1e:41:4a:6e:65:bb:55:e2:f5:79:
05:3b:7a:88:ce:fe:c5:5d:77:4f:13:5c:0c:9b:3d:
21:cb:98:58:2e:38:ca:f8:93:6f:12:bb:84:cc:3f:
00:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B8:4A:F9:FF:10:11:AB:1F:B5:5A:D1:0F:1B:77:AB:1B:3F:B8:34
X509v3 Authority Key Identifier:
keyid:8B:93:E5:67:AF:19:8A:94:E1:FC:F0:5F:E0:FE:7C:92:10:95:A8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f0:65:9a:20:04:59:73:3f:fd:1e:96:26:87:bf:5e:de:f5:
05:97:5a:08:52:05:c3:bf:db:bd:ad:c1:72:24:0c:ff:58:c2:
aa:04:f0:43:db:12:b6:d1:60:98:64:aa:f5:61:81:55:ee:37:
ce:94:0d:03:29:7d:90:c7:18:f3:d3:3d:84:d0:bb:ea:e6:9e:
eb:b6:e1:37:50:5b:0b:3b:e3:5d:4f:7e:23:68:bf:41:40:e9:
d7:16:9e:d2:72:aa:7c:3b:bf:13:8b:81:45:77:bf:e1:47:f8:
a4:a9:2e:cd:21:36:36:9d:bd:d1:19:24:22:11:01:9d:df:fb:
a2:6b:ef:47:45:bd:d4:01:23:d4:f9:73:b0:f8:34:8f:b7:18:
6e:23:7d:09:6e:34:fe:b9:bd:fc:8b:06:4e:3c:5b:c9:6c:34:
ca:77:c2:a9:ee:c5:d3:0f:e0:9f:7d:29:a1:43:0c:c5:db:e9:
ca:9a:6a:e1:9f:a1:c9:7e:51:93:a7:0e:6f:c7:75:cb:c0:07:
1e:4b:4e:7e:7e:54:c0:8a:ca:49:40:c4:eb:b1:ca:29:18:e3:
d5:f0:06:fe:3a:eb:f1:ab:2e:06:4d:28:0b:64:f6:a2:37:37:
47:db:27:41:90:c8:44:6e:4d:6d:d5:2f:3d:46:11:2e:32:05:
7b:e5:9a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:51:52 2025 by rpki-client