Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
File: iq94tpd0pVUH3qv4xMlpQunvDSA.mft (raw, json)
Hash identifier: aawuuCiiC3qlo1z5X9Ea4AEjtEvbcbmC5iixAoYKckU=
Subject key identifier: 3E:1C:D1:55:67:74:08:4C:C2:C4:15:09:09:75:C3:A8:B5:EE:7B:FE
Authority key identifier: 8A:AF:78:B6:97:74:A5:55:07:DE:AB:F8:C4:C9:69:42:E9:EF:0D:20
Certificate issuer: /CN=8aaf78b69774a55507deabf8c4c96942e9ef0d20
Certificate serial: 0197C56EFA23136219455D9DA3ADBADCC8D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
Manifest number: 0CB8
Signing time: Tue 01 Jul 2025 10:01:13 +0000
Manifest this update: Tue 01 Jul 2025 10:01:13 +0000
Manifest next update: Wed 02 Jul 2025 10:01:13 +0000
Files and hashes: 1: JQCJu_zj_dBb25hVe1CPLuILo-c.roa (hash: ppq/kkdZOhkWPFmrOFoKNIk30mkp2cJ+7oYbrYYHQUY=)
2: iq94tpd0pVUH3qv4xMlpQunvDSA.crl (hash: MjE0ssITO0NlYTuVg7Ocl87EHccdA7XuhhGuVRFlR8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6e:fa:23:13:62:19:45:5d:9d:a3:ad:ba:dc:c8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aaf78b69774a55507deabf8c4c96942e9ef0d20
Validity
Not Before: Jul 1 10:01:13 2025 GMT
Not After : Jul 2 10:01:13 2025 GMT
Subject: CN=3e1cd1556774084cc2c415090975c3a8b5ee7bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:7d:81:bc:76:ff:f5:f4:6b:d4:fa:0a:83:3e:
dd:b4:17:b3:d0:7f:65:1e:fd:05:21:3b:ab:58:51:
18:34:ce:76:00:19:9b:09:cc:9f:4c:b3:2c:01:79:
d8:4d:42:ea:ff:0a:3f:75:ce:90:50:8a:31:13:fd:
2b:dc:fc:79:d4:05:3c:26:98:9c:b2:18:72:f2:f2:
28:38:d5:72:6f:ec:31:ce:7e:c1:c6:03:5e:a8:a3:
9e:e8:d5:86:1f:20:af:0a:2e:b8:41:a6:1e:1c:37:
e9:7a:a9:27:63:85:cc:d1:94:5f:45:7f:80:9a:da:
0c:be:7c:29:a1:5b:c4:62:df:02:13:a7:51:06:67:
43:a5:ea:18:21:cf:2d:75:b5:2d:6c:ee:5a:0f:f8:
8c:8e:9b:4d:d1:96:e2:ef:65:ae:fd:00:bb:0a:90:
35:70:df:af:98:23:ef:b6:63:82:32:ca:26:41:86:
a7:19:7d:49:14:67:50:da:d0:6d:48:c3:97:65:e6:
d1:ff:89:ef:1d:76:3a:53:0f:40:f1:ac:6e:a5:af:
e1:da:40:34:c9:f5:71:98:34:5e:ae:5e:53:a8:d3:
ee:eb:d7:c5:e9:89:12:34:1b:d0:0f:c9:0a:8a:b8:
c8:6b:03:ce:be:17:4c:9f:9d:f9:cf:1c:c6:0f:fa:
c3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1C:D1:55:67:74:08:4C:C2:C4:15:09:09:75:C3:A8:B5:EE:7B:FE
X509v3 Authority Key Identifier:
keyid:8A:AF:78:B6:97:74:A5:55:07:DE:AB:F8:C4:C9:69:42:E9:EF:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a0:e9:78:50:06:ad:76:07:c0:e2:8f:9d:e5:a0:32:03:66:
8f:7e:4a:a6:2d:c4:db:84:ca:f0:c0:ae:fa:12:29:ce:be:5a:
65:71:d7:ee:c5:60:24:4e:d0:f2:7e:47:0b:28:ba:9e:75:35:
71:d4:34:68:b0:f4:20:a1:ef:4e:73:58:75:7c:19:d8:b4:7e:
bc:39:a5:e4:78:45:6d:4b:57:5d:10:3f:11:5f:2b:fc:da:6c:
1f:2d:29:51:62:76:53:21:3d:98:c6:a6:51:4b:54:f4:23:34:
8e:92:48:b7:42:7e:26:3a:db:90:66:59:0d:46:8b:ea:9e:7c:
bf:23:3e:99:de:1a:1b:e6:72:31:21:46:93:73:32:c5:21:b2:
6c:a1:e6:18:ca:1b:9b:a2:27:74:4d:29:25:7a:dd:74:65:58:
1b:f0:ed:c4:0e:16:00:4e:62:58:f6:37:ff:14:24:bd:58:5e:
24:f1:48:ef:28:26:7d:e4:9c:9d:ba:d5:53:08:b2:20:b4:0a:
35:49:62:21:64:a4:af:a7:1d:78:b2:c3:03:1b:ed:d5:d8:bc:
a8:3d:5b:2c:0e:11:5e:35:95:91:27:ec:90:0b:4d:ea:16:af:
fc:cd:3b:1d:7e:93:33:bc:7f:e8:19:39:10:cc:44:83:df:82:
e1:dc:0e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:10:20 2025 by rpki-client