Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
File: ioNVXKoizpubFoNQOhTjzdg24Bs.mft (raw, json)
Hash identifier: 5xDBAk9A/slbZnlpBQym4+V6Xciva39Uf0s4zyyCBxM=
Subject key identifier: 21:AF:D9:F3:3C:B0:BD:94:29:B9:41:C8:2B:DD:B4:F4:C2:BA:49:B8
Authority key identifier: 8A:83:55:5C:AA:22:CE:9B:9B:16:83:50:3A:14:E3:CD:D8:36:E0:1B
Certificate issuer: /CN=8a83555caa22ce9b9b1683503a14e3cdd836e01b
Certificate serial: 0198D4E0034D99CC0F85A3DAD0600A4AA858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
Manifest number: 0EB7
Signing time: Sat 23 Aug 2025 03:01:47 +0000
Manifest this update: Sat 23 Aug 2025 03:01:47 +0000
Manifest next update: Sun 24 Aug 2025 03:01:47 +0000
Files and hashes: 1: 8ltVewMht9tkkoh6ikhHpmbvP28.roa (hash: qZH42qz06gavyuSaiRbHo+yLoZK1W5iI0G1jpEdB8DA=)
2: ioNVXKoizpubFoNQOhTjzdg24Bs.crl (hash: lpvUuzKRS4ZKXChwoe6NaBmavwASYzzD4sboGxAYvVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:03:4d:99:cc:0f:85:a3:da:d0:60:0a:4a:a8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a83555caa22ce9b9b1683503a14e3cdd836e01b
Validity
Not Before: Aug 23 03:01:47 2025 GMT
Not After : Aug 24 03:01:47 2025 GMT
Subject: CN=21afd9f33cb0bd9429b941c82bddb4f4c2ba49b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:09:85:d8:50:6a:56:18:58:0f:ea:3c:82:4e:
fb:87:b6:44:6d:aa:fd:16:a6:40:24:4c:3c:43:ca:
4c:fb:ba:d8:f8:a6:14:e4:51:d1:39:56:31:0a:e6:
63:71:61:0e:ab:52:a8:17:66:76:0b:27:da:2d:a3:
26:31:b2:99:4c:f4:d2:e0:81:cb:3c:20:fc:82:ad:
ed:d5:43:d5:17:88:b4:b2:7a:18:b6:e9:e3:e1:67:
00:f0:a6:b3:3d:1c:c5:4a:ee:4f:a6:7f:1b:8a:13:
5e:fd:e7:fd:63:03:9b:fe:91:ad:71:cc:16:49:36:
57:b2:00:ca:71:1c:77:96:b6:43:e0:9a:79:3d:c2:
eb:1f:74:31:e7:ca:54:c3:02:57:53:cc:7f:8c:49:
24:32:c8:52:4f:74:93:8a:3d:9c:35:9f:cd:e4:1c:
d8:e3:bd:6f:92:84:d2:67:8e:dc:58:0c:97:05:7e:
e9:fd:c3:b5:4e:ab:5d:00:87:86:0d:66:e1:f3:ec:
d0:a7:b3:53:4f:dc:c5:91:81:8a:73:8c:52:66:89:
47:7a:a3:35:40:1a:ec:1f:6c:66:09:8b:dc:74:53:
ee:d7:eb:64:29:99:ae:fd:ef:69:99:37:71:34:73:
e7:6b:3a:a5:a0:10:f8:58:41:18:0a:53:b2:2a:de:
0b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AF:D9:F3:3C:B0:BD:94:29:B9:41:C8:2B:DD:B4:F4:C2:BA:49:B8
X509v3 Authority Key Identifier:
keyid:8A:83:55:5C:AA:22:CE:9B:9B:16:83:50:3A:14:E3:CD:D8:36:E0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f5:d2:7b:9c:21:3b:ff:bb:67:7f:ed:b8:bd:d5:48:4b:e8:
32:19:fb:f8:c2:9e:7c:87:1c:0a:01:d8:40:4f:38:eb:30:b8:
10:c4:65:a2:16:d8:91:30:23:0f:87:e9:e7:57:78:65:e6:f3:
36:3e:0d:24:dc:78:c2:9a:4b:31:97:2c:60:bf:98:9c:37:95:
b5:1b:7b:c9:a8:5c:64:d9:e0:1d:5a:13:d4:ec:91:ec:ca:06:
db:95:54:36:f7:47:c0:4e:27:9c:d6:c0:2b:d9:2d:35:06:a2:
1a:f4:c4:6d:d9:90:95:4b:58:56:cf:70:97:9a:17:e3:5e:55:
09:93:9d:ac:62:93:2a:70:de:a3:e2:7c:fc:8c:b6:1f:d8:f3:
80:6e:6e:e8:43:e9:38:ac:80:7a:20:bc:fd:8a:3e:a2:ee:da:
2d:05:f5:0b:e0:a1:39:fb:3c:04:ec:49:d6:a2:b8:c1:ad:7b:
8c:bb:74:6c:c8:d8:b3:90:26:b2:58:27:a1:1b:4a:cd:ad:66:
0e:55:43:0f:a5:0b:65:b0:f6:48:63:68:3f:a8:46:d0:60:c5:
38:1b:03:99:24:dd:82:88:2b:80:c8:dc:25:b4:b1:ed:9b:ca:
f9:1b:2c:42:ae:b3:40:ce:12:c0:e6:fe:53:79:70:dd:a8:29:
28:15:12:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:53 2025 by rpki-client