Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
File: irYGzqebWr6BaDpjN5s5KJssq5M.mft (raw, json)
Hash identifier: wgDTm19GV1K4KkDvLsNaFNnOiyR3HGoBPTY9mLJtrUY=
Subject key identifier: C5:13:49:16:E7:F6:AA:4B:80:78:1F:02:55:8C:D9:79:82:78:22:C3
Authority key identifier: 8A:B6:06:CE:A7:9B:5A:BE:81:68:3A:63:37:9B:39:28:9B:2C:AB:93
Certificate issuer: /CN=8ab606cea79b5abe81683a63379b39289b2cab93
Certificate serial: 0197CB02EBF5F95C4403DFB9DF0DE3364FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
Manifest number: 0743
Signing time: Wed 02 Jul 2025 12:00:55 +0000
Manifest this update: Wed 02 Jul 2025 12:00:55 +0000
Manifest next update: Thu 03 Jul 2025 12:00:55 +0000
Files and hashes: 1: Ol66WOHM5O0qZSOG9y7yOIgJsCo.roa (hash: tBXkTjKhKw+qp8WtoR3ZkzeeWQpNfDqudYVdDHWc62c=)
2: irYGzqebWr6BaDpjN5s5KJssq5M.crl (hash: IQ30nDTA5/fWPZnTXrb+ltouV2lKuE0g0XibCVMhuAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:02:eb:f5:f9:5c:44:03:df:b9:df:0d:e3:36:4f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab606cea79b5abe81683a63379b39289b2cab93
Validity
Not Before: Jul 2 12:00:55 2025 GMT
Not After : Jul 3 12:00:55 2025 GMT
Subject: CN=c5134916e7f6aa4b80781f02558cd979827822c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:54:60:bc:4a:29:49:52:9a:b0:b6:4e:89:f2:
3e:36:78:28:88:de:6e:f4:e3:e6:6e:e0:dc:0e:76:
be:4c:24:d5:c3:50:72:61:f0:ba:c7:a8:1c:7e:28:
4d:da:1a:84:d5:ee:34:cd:7c:1d:44:bd:5e:64:b3:
11:9b:7c:b4:46:5d:b6:cf:9e:90:12:17:d2:53:66:
ad:6f:26:69:b3:b2:56:7d:df:7e:87:51:60:db:e3:
2b:45:a8:2f:f3:21:be:a2:7c:c7:d6:c5:32:8b:d4:
b7:57:b8:bd:96:bd:5c:5c:0e:cd:48:fe:29:78:bb:
e6:42:5d:b4:1f:58:49:0e:4d:da:73:b8:00:a6:40:
3d:d6:df:27:ce:15:32:f2:7d:07:62:93:fa:84:9e:
f7:b4:7c:72:29:d6:4e:1e:52:2f:d0:86:54:5b:89:
5d:21:d2:54:45:b9:6f:c9:ac:d7:d5:f4:6f:ce:92:
9c:a0:06:07:5e:e1:f8:17:52:30:33:08:14:7a:63:
b3:2b:a3:cf:d7:a1:9c:d8:b5:f3:a1:f8:cd:34:b6:
9f:35:aa:84:7c:ba:6e:fc:df:de:26:48:fd:7e:0c:
a3:56:a0:66:3b:05:9b:30:5a:ee:88:c8:6c:e0:7e:
b8:14:7b:b4:ad:16:55:ef:ec:ee:2b:a9:0a:d0:3a:
23:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:13:49:16:E7:F6:AA:4B:80:78:1F:02:55:8C:D9:79:82:78:22:C3
X509v3 Authority Key Identifier:
keyid:8A:B6:06:CE:A7:9B:5A:BE:81:68:3A:63:37:9B:39:28:9B:2C:AB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:6c:8f:00:76:c0:29:bc:e9:e2:26:9b:34:a5:5b:03:a4:36:
61:30:4f:ab:e7:43:50:09:6f:5e:07:25:ea:3b:c9:d0:5d:8a:
e8:7a:dc:31:1b:a8:6f:9f:47:9e:ef:1d:fa:6e:ac:81:09:f9:
6c:a6:ac:97:6d:5c:b0:49:a8:bd:c0:36:d5:c4:d4:6a:72:63:
5d:ef:fe:85:25:d0:8f:f2:fd:e0:b7:14:eb:73:31:41:26:98:
50:43:ca:2d:32:eb:01:1d:9c:9d:c2:07:cc:f8:36:8e:50:92:
43:68:2e:85:8d:a4:c4:44:4b:64:95:d8:23:3d:2b:25:89:c1:
bb:bd:5a:c4:64:9e:f9:61:bc:42:25:be:f3:00:0a:11:25:b4:
16:b3:6d:b2:af:3e:8c:80:69:57:bd:c6:82:de:ad:98:4d:c7:
f8:09:ad:16:a6:6e:82:12:e6:a4:a8:59:f9:83:11:ad:3f:16:
49:cb:ef:0a:81:22:c9:dc:1c:f0:99:6f:43:26:49:ce:2e:e1:
47:b1:37:f8:cc:da:d0:6b:e8:fb:79:bf:75:f6:2e:dc:2c:c7:
0a:63:4b:63:c5:16:3b:15:40:2a:7c:2f:c1:c7:cb:7e:19:dd:
c0:7b:58:c3:ea:c6:7f:ac:6f:72:c8:eb:72:1b:e8:1e:87:82:
ea:2a:26:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:44:34 2025 by rpki-client