Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
File: iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft (raw, json)
Hash identifier: 0+clDRYcpYv5JRgYPECsh6YrH0OCbqXNSqt3yHT9ptk=
Subject key identifier: 94:0A:1D:70:50:97:A7:1E:97:1A:DB:EC:90:AD:F7:C1:45:9B:25:02
Authority key identifier: 88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07
Certificate issuer: /CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07
Certificate serial: 0198D47416A779691C71D5F49C5E914AFF1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 01:03:54 +0000
Manifest this update: Sat 23 Aug 2025 01:03:54 +0000
Manifest next update: Sun 24 Aug 2025 01:03:54 +0000
Files and hashes: 1: KYtWtlgqE5B9oPVpa5XtMWrTy2s.roa (hash: S7OWPBmD/em3aOMLq183MKVqtbhQIKvOUTkiCEiDOio=)
2: iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl (hash: i7oZOAC/P0jBp606WtDUEYLu+z9VQza/GO+lv5SilPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:16:a7:79:69:1c:71:d5:f4:9c:5e:91:4a:ff:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07
Validity
Not Before: Aug 23 01:03:54 2025 GMT
Not After : Aug 24 01:03:54 2025 GMT
Subject: CN=940a1d705097a71e971adbec90adf7c1459b2502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3b:f2:fb:14:ea:d4:3c:1d:43:da:b5:36:09:
bf:5f:dd:a3:c8:e7:62:04:1f:91:d5:4f:fb:af:81:
41:03:ea:3b:57:8b:be:1d:97:4c:0d:8a:57:d6:76:
6a:db:0c:6c:5e:fd:48:1e:12:cc:8b:03:a3:cd:c6:
85:f1:ed:b6:b9:a2:de:f1:d9:ee:7d:27:ba:34:a1:
76:2e:50:08:1c:c0:db:6d:9e:ca:e7:ed:0e:2e:c8:
b7:5f:3a:7d:5f:91:dd:a7:c6:8d:4c:e3:31:69:90:
0a:59:2b:fa:f8:a4:a3:a7:8b:ff:84:5f:21:21:3a:
48:90:8c:97:e6:a5:8d:df:ed:3e:b2:fa:dc:2f:c5:
9f:a5:2e:bc:04:f0:a8:33:0d:b8:c0:3c:ab:76:55:
9d:1a:b2:f2:64:05:da:72:b9:0f:84:5e:b3:72:dc:
58:c0:8f:9c:30:6b:2b:cf:cc:36:2a:d1:a1:7d:19:
94:d7:53:68:b7:8d:a0:a0:03:ca:86:d8:69:25:38:
d3:2e:67:65:7a:92:a8:ef:32:96:f8:57:d1:f8:88:
a7:08:98:46:2b:2f:3e:8c:39:a5:57:49:ab:06:b4:
01:23:75:4e:61:b3:dd:64:01:80:97:4d:c5:5b:b0:
e7:06:94:99:0f:ac:2e:d6:4a:82:1b:83:bb:ce:4b:
73:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0A:1D:70:50:97:A7:1E:97:1A:DB:EC:90:AD:F7:C1:45:9B:25:02
X509v3 Authority Key Identifier:
keyid:88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:7e:c3:79:fd:6e:8a:56:44:0e:87:fe:e6:ce:1d:e8:ea:44:
2e:df:61:a3:8d:88:a3:f2:ec:cb:62:1f:ee:27:97:4a:74:5a:
c0:29:57:1b:dc:57:4a:14:1c:e6:cc:82:25:ff:f7:c6:bb:2e:
58:4b:6d:bf:d1:82:67:ba:15:f3:da:0e:98:98:77:54:fb:be:
5b:d8:30:78:07:eb:62:cb:59:61:2e:16:8e:50:dd:ae:c3:d7:
c6:d4:bf:98:16:87:2c:9b:c8:b4:c9:b0:ec:24:e7:8d:7b:62:
a0:68:e7:eb:66:4b:af:71:a0:7a:6d:e7:bc:38:8b:76:66:d3:
d1:92:17:3e:73:c2:8b:ac:85:bc:11:dc:2b:61:fd:c0:68:9d:
45:20:65:f6:e7:ea:78:cf:7a:e3:b4:ad:09:c5:4f:b0:e8:19:
1c:63:65:f9:02:e7:18:b1:62:1f:c5:46:8a:45:70:64:a2:73:
01:fd:46:6c:e0:4b:7a:64:42:29:e7:eb:e5:28:2d:16:48:83:
9c:79:35:4c:06:82:38:79:91:84:54:4a:79:f0:87:a4:36:d4:
0f:1a:2c:d3:9f:b7:67:c0:60:79:be:b8:b6:fe:8e:a4:ec:05:
74:10:5b:eb:8b:6c:d2:cd:23:9a:9c:ba:e3:d6:60:2a:66:57:
53:39:d2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:11 2025 by rpki-client