Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft
File: iB4xmT-oWHVos_zeW3_ulttDqbc.mft (raw, json)
Hash identifier: P1tMpHju1VhbTYJiEJLKHIhy0gtc/lMJ3NA87DY7gdo=
Subject key identifier: A9:B9:35:C2:7F:D1:78:F0:1C:60:99:F2:CC:9D:96:6A:6C:A8:04:BE
Authority key identifier: 88:1E:31:99:3F:A8:58:75:68:B3:FC:DE:5B:7F:EE:96:DB:43:A9:B7
Certificate issuer: /CN=881e31993fa8587568b3fcde5b7fee96db43a9b7
Certificate serial: 0198D69882D0777AC1B76A920843811F89C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft
Manifest number: 013A
Signing time: Sat 23 Aug 2025 11:02:55 +0000
Manifest this update: Sat 23 Aug 2025 11:02:55 +0000
Manifest next update: Sun 24 Aug 2025 11:02:55 +0000
Files and hashes: 1: 2CoStS1PhVOk0Xe0b76gr5yU3sM.roa (hash: kaUq6JiT8bLQt6omc8n9uCI1T0SxY0tZ3BmNCenDeRM=)
2: iB4xmT-oWHVos_zeW3_ulttDqbc.crl (hash: M4i07tdux8aDsoT8rHgcEGmg5NX0AMCFt6a1xk+kp2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:82:d0:77:7a:c1:b7:6a:92:08:43:81:1f:89:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881e31993fa8587568b3fcde5b7fee96db43a9b7
Validity
Not Before: Aug 23 11:02:55 2025 GMT
Not After : Aug 24 11:02:55 2025 GMT
Subject: CN=a9b935c27fd178f01c6099f2cc9d966a6ca804be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:94:c7:ec:4f:24:af:f4:71:e7:ab:a0:65:6e:
cf:49:ac:68:d5:92:4c:da:a2:8c:7a:7c:54:e4:f1:
e3:80:6a:c1:9a:ee:67:c7:d8:cc:29:59:20:20:4a:
97:e3:5c:4e:0e:00:72:1f:3e:f7:6f:83:48:6c:7e:
d0:4c:02:ff:40:66:f1:76:f3:46:37:78:27:7e:6d:
a3:6f:16:2d:04:c4:fb:c2:ba:2f:e8:ce:da:07:8c:
f1:65:14:64:6b:c7:dc:d9:c5:63:c7:e7:6e:8f:d4:
82:d5:9c:19:3e:43:5a:fe:d4:d5:b8:2d:52:a6:4a:
c3:6b:7c:50:68:f5:52:19:4e:6d:c8:f6:e1:cd:76:
52:84:c8:e5:ac:e3:7e:9e:e3:00:dc:10:e4:48:b5:
45:ec:ef:17:d5:79:f0:74:e9:07:4f:4d:c4:a5:72:
9a:42:0a:ba:2c:f5:6c:81:7e:07:80:80:cc:61:00:
4c:fe:82:13:0f:5c:03:81:9a:d7:67:84:ae:9e:28:
9d:96:29:83:9d:31:18:f1:c4:2e:df:89:79:20:d4:
83:65:53:8d:26:5d:10:bb:65:e3:75:b2:70:5d:54:
62:7b:8e:a5:82:5f:9b:98:66:18:e5:01:7f:71:74:
96:37:e7:61:13:4d:af:ef:44:fb:0a:af:ea:55:3c:
e2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B9:35:C2:7F:D1:78:F0:1C:60:99:F2:CC:9D:96:6A:6C:A8:04:BE
X509v3 Authority Key Identifier:
keyid:88:1E:31:99:3F:A8:58:75:68:B3:FC:DE:5B:7F:EE:96:DB:43:A9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:58:bc:c5:e8:a3:7c:08:78:47:44:53:5a:0c:44:0a:c4:d0:
85:66:f8:a1:01:7d:c4:7e:3f:3b:b2:bc:cd:ee:81:f9:5f:20:
f1:32:8c:0c:34:d2:be:46:c4:82:0b:1a:10:e7:6d:d9:c5:85:
d9:23:49:df:77:9d:68:70:1b:89:aa:b6:d7:1d:c0:14:da:95:
53:e9:67:46:60:b8:97:da:3c:f1:d8:65:f1:00:81:8b:b4:56:
38:05:68:cc:ba:b8:45:76:85:26:bb:9d:d5:fe:81:e8:5c:33:
38:7f:8e:66:b4:b9:81:42:91:ce:2f:75:20:af:a8:f7:2f:67:
8c:1a:16:dc:6a:01:35:d7:e4:ff:19:c2:c9:a5:67:67:f3:60:
e7:1a:73:1f:7f:d1:73:99:f6:d7:36:0c:9c:17:8f:f3:16:c8:
bb:c1:56:99:6a:d1:1a:25:67:06:95:1f:55:f1:94:c3:88:53:
36:5b:cb:48:63:41:a3:77:19:14:be:ca:a0:87:f6:11:bd:ee:
a4:43:e1:ac:17:ab:ab:b8:2f:97:63:19:af:af:4c:61:a1:fa:
d4:df:7c:32:0e:74:f6:e9:e2:4f:c7:e7:3f:41:dd:e4:43:26:
ea:90:12:27:b4:94:a6:a1:fc:47:6f:0c:d5:79:45:47:3c:f9:
0a:72:e9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:31 2025 by rpki-client