Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft
File: iEZAW_zHgGbFGSyz6-csRDxVcog.mft (raw, json)
Hash identifier: 9TpDGUkfycb4SdigXxK+YOAtXH9i2SKhISvmjT4eYbo=
Subject key identifier: 5F:6F:5F:EC:51:97:BD:43:24:9F:0D:88:E7:4E:31:20:EC:9E:C4:9F
Authority key identifier: 88:46:40:5B:FC:C7:80:66:C5:19:2C:B3:EB:E7:2C:44:3C:55:72:88
Certificate issuer: /CN=8846405bfcc78066c5192cb3ebe72c443c557288
Certificate serial: 0198D5834CCC31A5696ACC0721F4FE74B020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:08 +0000
Manifest this update: Sat 23 Aug 2025 06:00:08 +0000
Manifest next update: Sun 24 Aug 2025 06:00:08 +0000
Files and hashes: 1: 1wukbEM_Z2cOLmS317mkgQWPtlY.roa (hash: mynvXYceF8nnYoZdEmhOk8iYDpjkXUz62HUCHGcK8Wc=)
2: iEZAW_zHgGbFGSyz6-csRDxVcog.crl (hash: mrvLTuc1g+/x3KMUK4sLTZbepsaksDFgEgkLeC6Jqtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft
rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:4c:cc:31:a5:69:6a:cc:07:21:f4:fe:74:b0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8846405bfcc78066c5192cb3ebe72c443c557288
Validity
Not Before: Aug 23 06:00:08 2025 GMT
Not After : Aug 24 06:00:08 2025 GMT
Subject: CN=5f6f5fec5197bd43249f0d88e74e3120ec9ec49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:4c:91:f4:89:5f:5e:5c:9f:0d:2b:51:dc:
94:6f:49:a1:7b:c8:af:4b:1d:6a:1c:79:62:4c:51:
f0:6e:5c:e0:7b:af:e0:1f:4a:f5:76:86:b2:09:ef:
d8:c6:c9:06:3e:c9:df:9c:60:ac:30:71:b9:9d:7c:
18:d7:71:ef:34:c6:ff:22:f4:4a:25:cf:7d:0d:eb:
7c:5d:bb:09:e4:d9:a5:34:91:7b:35:d5:12:8a:92:
25:d2:b7:e9:af:1b:b5:51:62:d3:a8:17:c3:4c:eb:
0b:0f:d8:d7:e8:ee:8c:c7:c0:19:8b:7e:10:6e:c8:
db:95:3a:36:ca:ab:6e:28:7b:66:a5:6b:6c:3a:fe:
d8:f5:cd:17:3c:cd:10:55:01:6f:4a:bb:7b:94:3c:
58:ce:84:96:eb:7d:c2:ec:88:9a:73:95:05:59:67:
9c:58:03:76:43:75:2f:e9:7c:ef:13:75:8b:1d:4d:
91:1a:85:6b:d0:b0:ef:07:33:e7:f8:73:9f:11:cc:
a2:15:5a:b8:09:97:b1:fd:22:ab:0c:f4:fa:15:7f:
14:09:bb:d6:1d:48:38:cb:ef:2c:4e:85:ae:dc:12:
58:8e:3f:ca:27:af:e5:ee:f5:c3:b8:53:54:78:2a:
69:7f:51:be:6a:e2:4c:4a:1a:45:fc:04:86:56:1c:
e7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6F:5F:EC:51:97:BD:43:24:9F:0D:88:E7:4E:31:20:EC:9E:C4:9F
X509v3 Authority Key Identifier:
keyid:88:46:40:5B:FC:C7:80:66:C5:19:2C:B3:EB:E7:2C:44:3C:55:72:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEZAW_zHgGbFGSyz6-csRDxVcog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9073ba-88e2-4a45-9daf-5a0a1d0ac58c/1/iEZAW_zHgGbFGSyz6-csRDxVcog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:94:aa:fe:28:9d:57:74:20:e2:f2:9f:8b:3c:9f:6e:22:1d:
aa:d4:98:41:fc:eb:41:4f:3a:81:be:74:17:2b:ed:3c:18:14:
f9:c2:af:ad:18:0e:55:52:fd:86:6f:6c:9a:6c:e3:b1:8c:d6:
ce:d0:f1:a9:5d:69:27:09:14:3d:fc:59:d4:91:f1:2a:64:09:
be:ba:54:64:fd:69:8c:bd:0e:d9:59:2f:0a:2d:26:2d:ce:5c:
99:3f:7c:d3:2e:ed:93:83:89:66:9b:69:71:cb:88:b3:66:fe:
0b:61:41:d5:25:69:6e:39:55:1a:a7:6a:69:07:77:e8:33:ea:
9a:89:6b:10:36:b0:bc:a0:d7:ea:f8:f5:c5:c5:ef:06:6d:5e:
b9:24:9f:a4:50:c7:f4:72:95:03:fd:3c:cf:49:bb:8c:78:4c:
c8:cd:ba:8a:c4:3b:2f:21:d0:7d:ff:e9:a2:f4:b9:42:19:7b:
72:ed:e1:c3:b1:a6:88:ad:1b:31:96:db:d0:9c:54:71:3e:e2:
75:bf:3b:e7:d9:3e:66:a3:60:35:78:7c:12:d5:f9:cc:59:48:
1f:c6:5d:8d:6f:84:71:b6:6e:7c:7f:ca:6d:66:8e:d0:22:8b:
dd:75:0c:17:2e:21:ef:7c:f3:cb:69:04:26:80:51:36:40:32:
a6:2c:d4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:30:15 2025 by rpki-client