Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
File: iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft (raw, json)
Hash identifier: AYiYN53rCfSqUlRKso/8EkuXI+G3Lm4jmY39rQ6JeSY=
Subject key identifier: 76:4C:9D:BF:B6:21:B9:28:9D:85:1B:FF:EA:00:A1:2A:39:5A:0A:2F
Authority key identifier: 89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44
Certificate issuer: /CN=897378126f55d96519553daa48e02e3282121644
Certificate serial: 0198D65F063B0A71BDE8497EB334BEFF87BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
Manifest number: 0EA5
Signing time: Sat 23 Aug 2025 10:00:08 +0000
Manifest this update: Sat 23 Aug 2025 10:00:08 +0000
Manifest next update: Sun 24 Aug 2025 10:00:08 +0000
Files and hashes: 1: gGw6ft1sLBQmsJ-vRfx6KJXkhbk.roa (hash: S1p9cVSO3FaBQReociITznoI/L2Cqm4kk12uycY2TsA=)
2: iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl (hash: S/u6JVwboW1kry9oIGtEi3hGd9hOmslKhTJSEHn5EqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:06:3b:0a:71:bd:e8:49:7e:b3:34:be:ff:87:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897378126f55d96519553daa48e02e3282121644
Validity
Not Before: Aug 23 10:00:08 2025 GMT
Not After : Aug 24 10:00:08 2025 GMT
Subject: CN=764c9dbfb621b9289d851bffea00a12a395a0a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:74:14:44:8c:52:d8:21:26:36:21:35:6b:91:
e5:93:7e:70:ae:23:48:dc:8b:7a:8c:1a:d9:60:88:
08:35:a5:a8:18:58:60:78:9b:fd:41:b2:4b:ad:39:
d8:76:5c:62:54:c1:8d:62:81:e3:06:5b:88:29:58:
b4:a9:01:13:3c:96:b1:89:67:4c:ac:5d:3c:1c:0f:
45:6f:bd:d3:3e:4d:b5:7c:69:89:18:e1:ed:be:69:
17:7a:43:61:1d:b6:90:96:81:f4:f8:cc:74:cc:42:
94:eb:ef:20:28:17:9e:4d:d5:43:43:b9:83:b7:da:
34:78:08:7c:39:f7:2a:94:37:9a:30:c5:47:1f:bd:
58:eb:23:ff:a2:5f:43:2d:73:4d:8e:81:44:55:f7:
8c:e3:f2:6e:63:68:2a:d2:ba:1a:02:09:ca:a4:a7:
b3:d3:a3:ce:df:8e:1f:6d:b2:13:51:74:ee:7e:f8:
0f:f1:1d:ae:4a:d0:bb:0b:0e:6b:7a:ee:bc:b4:64:
f7:b1:c7:cf:e0:52:c3:ae:16:cd:26:1a:9a:35:0b:
8a:d5:14:e2:c7:82:38:21:55:14:8d:95:f9:8a:be:
2a:cd:7a:d6:05:eb:aa:78:b6:a5:fc:31:27:06:d3:
1b:98:ac:d2:a6:bc:3b:cd:8b:a6:a9:8a:0e:eb:95:
83:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4C:9D:BF:B6:21:B9:28:9D:85:1B:FF:EA:00:A1:2A:39:5A:0A:2F
X509v3 Authority Key Identifier:
keyid:89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:2f:81:0f:5b:11:df:f2:a7:1b:9f:b1:8b:57:5d:9f:3a:6d:
55:6b:dc:c2:3c:f6:fe:43:23:29:67:00:43:03:d7:99:6a:b1:
7c:b2:6d:bb:e0:d1:10:93:eb:70:a8:1b:a5:fd:38:47:8d:fb:
c0:4e:62:92:eb:29:5c:1b:9c:c1:ca:3d:99:77:2a:54:c5:ba:
84:de:f6:99:56:ca:3d:ff:bd:9f:73:fe:b1:9f:85:71:d5:a8:
b6:d0:81:f5:bf:f5:80:c7:cc:0a:31:cf:d6:a0:93:1c:e2:82:
39:2f:84:17:b0:15:fd:ab:e9:72:d1:69:c8:e8:c8:bb:f4:b8:
d1:e5:4a:21:cf:b1:43:37:c0:59:e5:5d:71:9d:c2:e0:7a:13:
23:f8:6d:df:46:16:30:16:af:86:a6:e6:a5:d2:1d:28:9d:79:
9b:74:19:46:62:f0:0c:be:e5:54:41:1d:70:07:c0:91:b9:53:
1a:07:f2:b1:de:dc:16:8d:79:bc:9d:e6:06:d8:fd:12:ad:bd:
89:a6:20:13:50:0c:76:6b:5d:ed:2d:b8:b3:b1:21:27:34:e8:
7e:d5:1f:04:f7:ff:03:f8:ae:6f:cf:b7:93:c9:07:c4:a6:56:
d6:40:9a:47:cb:94:78:93:52:30:85:23:23:83:f6:a2:94:ed:
b8:64:ff:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:29:05 2025 by rpki-client