Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
File: iOpSVfiNS5VxicFC-KxWgcUMaKY.mft (raw, json)
Hash identifier: uEnZ/UUkRkLRO8LZbQcbYwQtw6Pr86z7y0gUPmt1XQE=
Subject key identifier: 98:B2:44:7B:AE:B3:CD:1B:42:87:BE:5D:78:A3:2E:06:B5:57:10:EB
Authority key identifier: 88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
Certificate issuer: /CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Certificate serial: 0198D698139922F0147587D127A865F99C0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
Manifest number: 08CF
Signing time: Sat 23 Aug 2025 11:02:27 +0000
Manifest this update: Sat 23 Aug 2025 11:02:27 +0000
Manifest next update: Sun 24 Aug 2025 11:02:27 +0000
Files and hashes: 1: AhbInrBuBxUhLDDb6t4H_dnP0SQ.roa (hash: LnUMs+GFvbcxwBQi1CgG4kL2ZNmGdakKt42fC58+8no=)
2: iOpSVfiNS5VxicFC-KxWgcUMaKY.crl (hash: I/YL//zuXtwMakNoQcmtWtwxYXRf9VuoZFtZLzliz3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:13:99:22:f0:14:75:87:d1:27:a8:65:f9:9c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Validity
Not Before: Aug 23 11:02:27 2025 GMT
Not After : Aug 24 11:02:27 2025 GMT
Subject: CN=98b2447baeb3cd1b4287be5d78a32e06b55710eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:63:16:98:6e:e8:c7:21:e2:0c:4f:1f:e4:
8b:0e:23:d5:d1:20:c8:da:b0:df:cf:a3:79:8f:0c:
20:a0:71:14:9d:0c:2a:4b:94:4c:63:fe:37:2d:e5:
2c:c8:32:d3:5c:2d:e9:fc:b2:07:42:72:ae:fb:a3:
51:bf:e9:9c:65:c0:6b:f8:04:10:6e:cc:96:23:a8:
3f:95:2b:77:1e:7b:7e:20:da:56:2d:22:ee:20:22:
6e:dc:8e:a9:ee:59:5f:f7:a1:be:2f:02:0b:3b:b7:
a0:81:b3:a7:75:c1:28:0f:b7:04:6f:c6:38:4b:da:
cd:41:ee:ac:95:bc:b9:e0:1a:b4:0b:d6:7b:8d:90:
1e:c8:45:ab:a8:a2:12:73:64:d8:ee:38:a9:18:7b:
e8:1d:0a:2e:c7:23:25:40:0f:4f:bf:70:84:36:18:
2d:d4:3c:0f:de:35:5d:e1:44:4a:33:df:82:e9:11:
89:72:3d:15:64:59:b8:ab:2d:dc:fa:46:88:35:e6:
7e:f2:73:12:f0:f2:14:eb:ee:96:c4:95:4d:6d:82:
5e:96:07:b3:01:40:6e:6d:13:b3:ea:d2:71:95:3d:
bb:51:65:07:c5:e9:6a:34:c2:35:15:93:20:b8:2c:
9c:a8:ea:5a:b8:4b:88:48:ee:8a:46:75:02:79:f2:
ea:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B2:44:7B:AE:B3:CD:1B:42:87:BE:5D:78:A3:2E:06:B5:57:10:EB
X509v3 Authority Key Identifier:
keyid:88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:18:60:3a:73:bf:ac:4f:06:ae:26:e0:80:f7:c5:19:91:18:
d1:2e:09:cc:40:dc:b2:a3:e7:25:cd:8a:7a:8d:5e:98:d3:f0:
66:b8:31:51:52:53:18:dd:ca:8e:73:a4:43:53:13:56:7f:e2:
06:4a:03:ea:a3:40:0a:79:a9:6c:fa:33:e6:ef:26:60:8b:a2:
70:9a:3f:3f:b6:45:47:3f:d6:70:af:de:04:2b:d8:9f:18:17:
a6:4f:26:38:2b:6c:a5:42:4a:b4:24:35:7f:be:25:35:3c:e1:
3d:4c:9a:23:2a:5b:bc:9a:53:dc:a5:65:9d:35:f9:28:00:5c:
7a:f6:3f:cc:69:16:ae:6b:ef:c7:7f:8e:68:58:ba:f2:ea:96:
5c:2f:c7:ea:f0:87:8c:6c:63:72:ed:c4:85:b2:93:11:83:88:
c8:ad:80:16:2c:0c:29:9f:15:31:1a:65:15:46:79:04:d4:e7:
7b:ef:4a:18:a3:84:ec:42:56:e1:74:04:c1:86:6a:36:9e:5d:
e4:56:ca:5c:10:21:21:ce:19:e6:2c:76:82:e7:a3:93:da:f8:
5e:98:ce:0b:e7:f0:77:2a:8e:a9:8e:f8:7c:73:a4:e5:c4:b0:
ca:73:6b:f6:e7:da:86:2f:32:37:c5:ea:37:14:b7:1c:1e:63:
34:8e:2c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:07:32 2025 by rpki-client