Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
File: _i4izBWFntSgeEv9CFhLPI-yn5o.mft (raw, json)
Hash identifier: VfvyZRv/ZmFRpOKfJkOyH9mPoEXA/VuvYz0N67Rx+hA=
Subject key identifier: 85:17:22:8A:B8:F2:8B:BB:F3:D0:4F:5E:A2:68:20:AE:2A:D0:E7:E1
Authority key identifier: FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
Certificate issuer: /CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Certificate serial: 0198D54DC17A62F7898F97CD39E3F377138D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
Manifest number: 0C7D
Signing time: Sat 23 Aug 2025 05:01:39 +0000
Manifest this update: Sat 23 Aug 2025 05:01:39 +0000
Manifest next update: Sun 24 Aug 2025 05:01:39 +0000
Files and hashes: 1: 3GJal5BlkwMpqI0aUPXNpdisEd0.roa (hash: N1IIZPB15h65xX22ALfpxQG++svVYLQW4hUhjHJNwow=)
2: _i4izBWFntSgeEv9CFhLPI-yn5o.crl (hash: WCa6uQ23VmrV/sgZ68ftSUAqFqryCCcWDKnRoZ46MMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:c1:7a:62:f7:89:8f:97:cd:39:e3:f3:77:13:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Validity
Not Before: Aug 23 05:01:39 2025 GMT
Not After : Aug 24 05:01:39 2025 GMT
Subject: CN=8517228ab8f28bbbf3d04f5ea26820ae2ad0e7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e5:bc:fb:8d:ee:8a:5b:e4:c5:67:1e:1e:4a:
eb:67:55:d3:18:22:c5:67:9f:8e:00:c1:7c:97:81:
79:eb:12:ff:1f:25:f3:b9:55:d0:60:c6:be:98:39:
7f:b0:03:b8:39:76:b0:06:57:56:08:f1:fa:0a:34:
63:dc:47:5b:f5:ab:87:14:c4:d6:e5:c1:bd:c0:8d:
f1:88:1d:99:15:de:4a:03:eb:21:d8:32:1d:1f:59:
8e:bd:85:a7:5c:73:6d:48:95:33:35:ec:d9:4c:06:
ea:25:82:14:a1:07:f9:6e:ee:f3:5a:17:f6:63:60:
20:1c:0c:78:74:9a:75:1c:81:1b:5b:27:77:e3:72:
c4:70:84:8b:3c:af:5e:d6:c1:ba:b1:18:fc:2f:99:
a9:9c:65:d7:dd:87:ac:0d:46:94:53:49:2a:e4:2d:
e7:11:e9:f9:0b:96:ea:e1:54:cd:7b:1d:dc:19:fc:
2b:e0:4d:eb:32:91:ff:fc:22:fb:53:bc:6c:06:88:
c2:f7:a3:7b:23:66:2d:41:57:ca:f1:3f:f5:4b:21:
71:bd:d9:2a:48:12:79:34:ad:c0:f3:3a:0a:4c:15:
0a:df:c8:23:a1:dc:ee:74:ac:45:00:88:73:48:14:
e3:6a:99:7e:66:45:83:79:4d:60:be:bd:b8:60:c5:
63:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:17:22:8A:B8:F2:8B:BB:F3:D0:4F:5E:A2:68:20:AE:2A:D0:E7:E1
X509v3 Authority Key Identifier:
keyid:FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:16:81:83:ad:fd:00:7f:96:f0:c6:61:0c:5e:19:c8:f0:b9:
36:91:ca:ed:65:da:09:9b:56:12:8b:06:51:92:f7:be:ad:43:
10:b1:3f:c0:3c:58:c0:94:58:fb:bb:64:59:4a:60:a3:ea:bb:
b4:82:0b:07:dd:1d:ea:ed:58:89:94:cf:ca:0b:98:f9:97:2f:
e9:e3:9b:5f:f7:45:b2:d9:46:f5:1c:a3:d1:b0:17:d4:65:a7:
87:68:e8:bf:68:5e:aa:67:e9:2d:3e:62:36:6a:bb:87:5d:71:
6c:f7:5f:af:40:d2:11:70:ab:a3:33:f6:bd:4c:90:ca:26:dd:
43:4e:6b:44:dd:96:22:a1:4d:44:7a:64:56:c4:41:8e:6b:c8:
4d:f9:ac:8e:51:97:d6:74:23:27:5b:c7:de:85:21:2e:bd:00:
f6:5d:57:8e:7f:34:3d:7e:21:a7:0a:e0:f2:2b:9b:af:e3:0b:
e5:6d:18:1b:c4:93:07:24:f1:c8:6b:17:64:2d:32:ff:49:ad:
dd:e8:a7:ef:ea:f2:4a:60:90:fe:01:e0:e6:a7:62:8c:b0:b8:
83:e2:dd:d2:61:9d:2d:75:c7:65:72:d7:e2:cb:3c:19:86:12:
e7:f5:2a:c6:56:21:cc:41:d8:62:f6:c8:d2:13:d3:af:81:66:
c0:f9:eb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:29:39 2025 by rpki-client