Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
File: iuS5P-tx3eKCO3DH27eeD5m1bBs.mft (raw, json)
Hash identifier: xamjTtLqhQ288jDipNtbTn4tjbxoyzHY08mQ5d4oSBY=
Subject key identifier: 51:64:23:F9:04:85:A5:70:7A:9B:C0:A0:A6:5F:60:90:2D:C5:95:67
Authority key identifier: 8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
Certificate issuer: /CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
Certificate serial: 0198D54E44A0365BC8CFC5B75DA61EDD04B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
Manifest number: 0961
Signing time: Sat 23 Aug 2025 05:02:12 +0000
Manifest this update: Sat 23 Aug 2025 05:02:12 +0000
Manifest next update: Sun 24 Aug 2025 05:02:12 +0000
Files and hashes: 1: J2gFJxTXec_tCl5fYmT5ueu90dA.roa (hash: eqh0jr48WZnOgc9VcsakSv2fxPv1f923UQBSwi0u554=)
2: iuS5P-tx3eKCO3DH27eeD5m1bBs.crl (hash: D75fMN+YKVuYoN0QCOuj5l8s7u16kFUf5gPbvz9cVZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:44:a0:36:5b:c8:cf:c5:b7:5d:a6:1e:dd:04:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae4b93feb71dde2823b70c7dbb79e0f99b56c1b
Validity
Not Before: Aug 23 05:02:12 2025 GMT
Not After : Aug 24 05:02:12 2025 GMT
Subject: CN=516423f90485a5707a9bc0a0a65f60902dc59567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6c:c5:81:27:3f:7d:09:1b:8c:d4:e1:64:2a:
36:66:46:29:5a:3b:68:f8:96:d9:62:a3:30:3e:70:
4d:5c:6c:e9:6f:c1:99:c5:b3:6c:d8:f2:d4:d7:96:
0b:dc:fb:f7:d5:1d:b8:a8:ee:65:2e:f9:ed:49:e4:
fb:43:35:9e:af:77:ca:05:b3:f9:47:79:2e:e1:59:
58:89:ab:2d:ce:67:dd:53:02:52:97:17:e2:e0:cd:
42:56:ef:4a:6f:a7:b9:32:25:57:5d:95:a9:ae:9a:
49:3c:c2:cc:6f:15:c4:e5:2c:ff:1f:e3:38:cc:d0:
57:31:a9:7d:08:11:05:2b:66:18:29:32:fe:a9:fe:
ec:35:2f:f5:ce:42:b3:0d:1e:03:cc:d9:1a:e8:f9:
a0:45:40:64:68:31:e5:52:9f:23:6f:ca:1d:d4:8e:
eb:b9:aa:4b:10:fc:de:38:d7:fc:72:04:ce:4a:fd:
e1:b1:f4:9b:01:f3:fe:25:50:31:6a:bc:e9:e1:c0:
6a:72:ed:e0:a4:cd:66:0c:d9:ea:ec:89:3d:bd:c3:
f1:63:c5:42:0b:f6:92:88:76:01:ef:3e:42:eb:66:
51:bb:25:63:df:93:84:36:94:93:21:3c:7a:22:01:
64:08:54:70:76:80:ba:22:7a:89:5f:38:13:da:89:
24:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:64:23:F9:04:85:A5:70:7A:9B:C0:A0:A6:5F:60:90:2D:C5:95:67
X509v3 Authority Key Identifier:
keyid:8A:E4:B9:3F:EB:71:DD:E2:82:3B:70:C7:DB:B7:9E:0F:99:B5:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuS5P-tx3eKCO3DH27eeD5m1bBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/70e678-8495-46ae-96d7-29c5176902c6/1/iuS5P-tx3eKCO3DH27eeD5m1bBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:78:0e:0f:a3:b9:e8:cc:3a:5b:0e:13:4e:f8:6a:31:85:a8:
ea:4e:72:18:1a:d1:99:3c:02:1d:2f:e4:fe:ba:9e:0f:9e:58:
f7:73:f2:64:e1:f8:9c:0c:30:8e:72:2d:ae:e8:0d:5e:d0:27:
fd:94:e6:33:60:82:48:12:3b:13:95:7d:c9:89:6d:a9:ea:ea:
49:45:0a:58:c5:2e:84:bc:5e:c7:37:40:53:a4:24:49:c1:a6:
ff:60:60:f5:1f:de:f4:c7:25:3b:1f:d8:c0:ef:76:5e:cd:23:
c6:cd:a2:e0:60:76:78:75:1b:ab:ee:a5:b6:b1:cc:78:c6:b0:
d3:0f:f2:8f:62:60:a6:a9:25:2c:a5:32:d6:70:7e:19:50:e3:
c8:98:b5:31:bf:3a:26:7a:8c:b1:74:e3:b9:f3:3e:dc:da:4c:
cf:3b:90:f4:fc:73:17:d8:a3:16:31:6f:32:73:96:69:10:0b:
a1:ee:10:d2:12:bd:07:b7:f3:76:2b:56:0c:b4:49:9a:d4:77:
4b:49:96:0f:1f:1a:c3:f9:0a:51:29:99:f8:0e:62:81:b7:4f:
7d:f2:4b:b0:3c:81:bc:a3:5d:66:d6:88:8c:9b:18:db:47:4c:
6a:c8:cb:a9:0d:be:ef:79:1c:a5:a7:87:21:81:a6:ab:4c:7c:
d9:32:e8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:35 2025 by rpki-client