Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
File: i1FfuzGzDKItL5R8UZrEcfArtgU.mft (raw, json)
Hash identifier: 3JsTVqylGb0Sc08ksr0lmWAL+mPkhRIGHfuaPpJlGEI=
Subject key identifier: 79:C0:F6:39:37:48:79:2F:5D:2E:03:00:46:38:42:00:34:84:B3:A6
Authority key identifier: 8B:51:5F:BB:31:B3:0C:A2:2D:2F:94:7C:51:9A:C4:71:F0:2B:B6:05
Certificate issuer: /CN=8b515fbb31b30ca22d2f947c519ac471f02bb605
Certificate serial: 0198D54E03C410DFEC769313AE3F8860726F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
Manifest number: 097C
Signing time: Sat 23 Aug 2025 05:01:56 +0000
Manifest this update: Sat 23 Aug 2025 05:01:56 +0000
Manifest next update: Sun 24 Aug 2025 05:01:56 +0000
Files and hashes: 1: LeW5uHFX08XYp2mSoayTb96W_kw.roa (hash: 5xyylml8MKoU2vq0LLHOuDrXUYO5MXsP8k0pX9CFEqk=)
2: i1FfuzGzDKItL5R8UZrEcfArtgU.crl (hash: eBOBDfNQfiixvBk3zocTKwNXrXnnFWl0zF7lVaVT5dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:03:c4:10:df:ec:76:93:13:ae:3f:88:60:72:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b515fbb31b30ca22d2f947c519ac471f02bb605
Validity
Not Before: Aug 23 05:01:56 2025 GMT
Not After : Aug 24 05:01:56 2025 GMT
Subject: CN=79c0f6393748792f5d2e0300463842003484b3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:21:b4:1a:d7:45:bd:39:dc:76:ba:05:91:
6f:14:08:f9:99:70:5c:09:2b:a1:66:39:92:66:5f:
c0:73:30:59:20:27:d4:90:03:c7:ec:9f:1c:7c:17:
eb:c0:cd:95:23:c4:8b:2c:4f:ae:1a:6f:74:52:39:
98:d3:10:e7:74:75:81:99:e0:8f:e5:77:48:0c:48:
19:94:40:f6:bf:5b:18:fd:98:60:f3:0d:6a:db:bb:
fe:1e:97:56:ba:74:6c:49:73:2f:89:e7:32:65:0d:
8b:ec:09:23:5a:a8:d1:90:c0:a6:26:5d:d2:3f:7f:
0e:6a:31:89:7c:fd:7c:ca:2a:86:74:98:48:8b:11:
ea:c0:c3:b6:01:e6:4f:4c:b2:83:e1:7f:08:36:99:
89:e9:cf:c7:7f:54:a0:7a:d5:8e:46:13:eb:60:38:
fa:8d:3f:76:bc:5d:a1:98:05:4f:06:69:88:a9:0a:
aa:87:c4:27:a3:78:8e:9d:63:d5:e0:66:a3:25:1e:
b3:81:24:39:e3:91:88:f0:52:27:18:f2:92:80:88:
a3:c3:63:d5:f1:bc:79:13:0b:1f:07:25:cc:48:0e:
13:8e:67:c9:32:cd:19:06:ee:d3:c3:64:8d:f3:3b:
ae:e8:67:9f:aa:b9:5c:ae:4d:ac:30:44:77:59:6a:
09:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C0:F6:39:37:48:79:2F:5D:2E:03:00:46:38:42:00:34:84:B3:A6
X509v3 Authority Key Identifier:
keyid:8B:51:5F:BB:31:B3:0C:A2:2D:2F:94:7C:51:9A:C4:71:F0:2B:B6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1FfuzGzDKItL5R8UZrEcfArtgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9dfa0f-18a4-42f6-b9d5-06a4655c6362/1/i1FfuzGzDKItL5R8UZrEcfArtgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:07:16:37:07:34:27:0e:67:7b:ee:26:10:48:a1:f1:6e:8b:
e5:d0:5e:d0:7a:77:7c:7c:02:09:f4:c0:5d:07:5e:70:15:1b:
1f:12:33:11:e5:2b:a2:ff:e2:63:7d:d3:b0:d0:47:3d:2f:9a:
91:9a:98:a3:e4:65:c7:32:4e:7f:e0:43:f9:4b:38:95:c0:1d:
42:cb:33:85:11:ba:7d:dd:6d:d3:52:9f:26:cb:91:b1:29:8b:
cd:c1:7a:87:97:72:ae:07:e0:6c:58:d8:ca:79:28:0a:60:e9:
81:b2:72:26:f7:39:1b:20:c3:91:90:6f:21:c3:c9:98:48:04:
9e:fd:86:0b:39:aa:7e:fb:6f:c2:f5:ef:32:86:3f:ce:72:2e:
9b:67:6f:3e:fe:2e:aa:c3:c0:d9:3f:c3:54:59:d0:3a:7f:80:
44:9f:b5:9b:7b:01:d0:cb:fc:03:5a:82:8d:b1:02:d2:4b:89:
c2:4f:1c:be:e1:30:1d:6d:fd:ba:6f:12:26:67:b9:8d:0f:39:
aa:18:66:ed:10:b4:26:6f:01:d3:4d:6b:bb:13:5d:42:58:9e:
f9:06:72:0e:13:86:2b:5c:00:3a:f8:b4:99:ca:c0:16:71:1d:
06:f2:05:93:9a:0f:d9:45:ac:5c:48:25:bd:00:80:59:91:3f:
13:31:24:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:25 2025 by rpki-client