Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
File: iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft (raw, json)
Hash identifier: UXVAlZrhYy6D6ZRCrWOmTaBZ+OspuVpuEI6Yz6HPEhA=
Subject key identifier: F4:22:75:CA:CA:4B:E0:90:F4:B9:1B:70:55:32:8A:9A:5B:B8:50:A0
Authority key identifier: 88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
Certificate issuer: /CN=88fc58875608970d9a728347d05ef00d0f1d5611
Certificate serial: 0198D7A981455214172606BC691F2BD7C767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
Manifest number: 0FB6
Signing time: Sat 23 Aug 2025 16:01:06 +0000
Manifest this update: Sat 23 Aug 2025 16:01:06 +0000
Manifest next update: Sun 24 Aug 2025 16:01:06 +0000
Files and hashes: 1: glHtLecTNUxeR4oxupaJRTlQLos.roa (hash: tjH899kftJHgu4JmkbHHTA84WKPpmWW00cLzLNo7wBg=)
2: iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl (hash: krWDrynnhLushIdryIZF6GmB5xzfZwYSEQMaqlbqOz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:81:45:52:14:17:26:06:bc:69:1f:2b:d7:c7:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fc58875608970d9a728347d05ef00d0f1d5611
Validity
Not Before: Aug 23 16:01:06 2025 GMT
Not After : Aug 24 16:01:06 2025 GMT
Subject: CN=f42275caca4be090f4b91b7055328a9a5bb850a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:82:9e:09:3c:a6:f3:9c:11:57:ef:80:d0:ce:
ab:4c:db:5d:e6:48:d3:a0:f4:61:6e:40:ef:ac:6e:
ac:fb:d5:d6:21:03:bc:8c:2f:67:bc:86:cd:47:b9:
e8:3b:94:3f:5a:cf:22:ec:f9:18:cf:69:34:3b:53:
6a:cd:93:dd:f4:d0:e0:45:8d:3f:c4:69:38:cc:d5:
66:55:54:2f:e0:12:98:74:19:df:8e:9c:d9:6e:2d:
35:9b:cb:24:43:da:cd:e6:b1:3b:e1:60:76:5e:62:
cc:ed:0c:2a:69:c7:32:99:ca:2e:8f:4f:69:70:ad:
b5:aa:7a:82:2f:b4:37:be:f0:f9:8a:4b:7c:00:a1:
53:bb:48:e0:29:5b:6e:02:a3:7c:d5:db:4a:37:e2:
f0:e2:5f:6f:ab:78:06:35:91:9d:86:4b:03:48:67:
01:01:54:40:3f:6d:c6:58:0b:f7:1e:38:40:d7:5f:
b0:2e:f7:f4:65:fd:90:90:25:5a:1a:3d:17:c2:cd:
96:9e:fe:64:3b:9d:b1:de:90:70:3b:2a:9b:c9:ee:
f7:19:5e:97:b6:0c:7a:43:fd:1c:6c:de:4d:51:87:
b4:e6:69:83:30:17:b0:33:2a:c1:96:69:06:31:d0:
2e:93:f9:d3:09:fc:a9:a2:42:22:55:e8:55:b4:ce:
12:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:22:75:CA:CA:4B:E0:90:F4:B9:1B:70:55:32:8A:9A:5B:B8:50:A0
X509v3 Authority Key Identifier:
keyid:88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e4:a7:23:e9:41:6c:76:c1:5a:3c:c5:1f:5e:ca:77:2b:8d:
d5:09:26:6c:f2:d1:ed:0e:b3:de:69:38:30:8b:be:b4:69:20:
f6:31:6c:93:70:23:5d:ba:f6:af:49:a1:92:77:cd:ed:64:3f:
5c:80:e8:f4:0e:bb:f7:db:e5:e5:80:b1:ab:95:5f:fd:57:85:
12:64:06:33:f6:67:9d:c7:75:65:ff:f4:05:9c:e5:a8:b9:3b:
17:e0:74:dc:3c:2f:0d:bb:ed:5c:b2:f9:76:cf:78:e2:12:24:
1a:ac:43:e1:0a:c6:27:35:4f:94:2d:4d:48:b8:08:6d:cc:80:
d7:35:56:b2:31:d4:c1:84:1c:fa:ac:c1:93:75:41:b6:be:ac:
1b:0e:b8:11:b6:c5:22:0d:3f:44:81:7d:ba:60:15:96:63:b7:
9c:fb:b5:06:08:22:f6:03:08:b9:9e:79:3d:6a:be:6e:9e:da:
a7:5a:86:5c:ea:67:df:d5:15:55:4f:71:1a:37:be:64:ca:83:
74:93:e1:bf:f5:d6:8e:55:cd:0c:aa:9c:f0:bb:09:3d:17:2f:
e9:53:66:f6:b0:14:5a:81:5e:b0:f3:34:3c:24:ab:24:5b:d0:
be:7f:21:37:67:59:f6:34:89:4a:e4:48:f3:a6:03:22:46:f8:
c7:98:23:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:04:16 2025 by rpki-client