Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
File: iXj_XaszxC2mX-Thq_vKTq-90qo.mft (raw, json)
Hash identifier: sFZFIeSV4+K2o5CyBpOMjORiXbFtrQp1kP7DDqE7XyA=
Subject key identifier: 6E:99:B8:0F:88:48:A1:81:65:6D:35:F2:D2:39:7E:D1:CE:8C:9E:B2
Authority key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
Certificate issuer: /CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Certificate serial: 0198D5BC5612A0CDE2A174226C44305EFF27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
Manifest number: 11F2
Signing time: Sat 23 Aug 2025 07:02:26 +0000
Manifest this update: Sat 23 Aug 2025 07:02:26 +0000
Manifest next update: Sun 24 Aug 2025 07:02:26 +0000
Files and hashes: 1: 5-1oK7ZffFqStfo7QWXqKcGuZfk.roa (hash: ae86GvhPxW1Ea0shedYB3VtmcIvsIfxJLLLA1E/5h/A=)
2: e4U8yl2fAVY2sT3p5fbr_erY7oA.roa (hash: 2KHYehyUkqT72mAQaz7HDc/red7uQn+krX6/aXcIZtE=)
3: iXj_XaszxC2mX-Thq_vKTq-90qo.crl (hash: CQonbIfUoIfKd1qsJFaOVdo1MfxJsqIpXv2j85W+0Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:56:12:a0:cd:e2:a1:74:22:6c:44:30:5e:ff:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Validity
Not Before: Aug 23 07:02:26 2025 GMT
Not After : Aug 24 07:02:26 2025 GMT
Subject: CN=6e99b80f8848a181656d35f2d2397ed1ce8c9eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:49:75:07:61:ce:de:d0:c3:03:03:1e:01:e0:
ab:65:c9:55:3e:62:a9:51:32:64:4a:db:ad:e1:e9:
c6:26:e8:99:80:3a:2a:a2:c1:b9:cf:49:0c:1e:95:
af:f5:63:a2:ad:0d:5e:37:7a:7f:bd:23:eb:46:58:
e5:e5:e3:2d:64:16:d8:a5:c6:da:5e:52:00:6b:07:
42:1a:5e:21:85:82:cb:fd:05:c2:48:2e:3c:3b:30:
ae:1b:2e:8f:35:e7:a6:8c:d4:b5:90:fc:97:30:a6:
95:c7:0d:93:f2:0a:a0:80:7f:9a:59:f8:e8:b6:07:
e3:89:38:eb:ca:c3:56:25:aa:35:6c:a8:02:3e:a0:
a6:e3:79:d2:4d:05:ad:da:3b:0d:fc:50:0e:83:eb:
02:f4:c4:19:ae:bf:11:18:62:4e:63:fe:3b:4c:e6:
69:cb:93:eb:23:f8:6d:5e:d5:61:2c:4c:8f:53:89:
64:a7:a9:f0:49:d1:6d:36:85:ee:14:dd:21:2e:b2:
fd:ad:70:4b:6d:9e:7f:e6:c9:88:86:49:3d:7b:f7:
2d:53:73:c8:be:e7:4d:32:23:8e:99:e3:ac:fa:30:
43:30:f0:74:8a:0c:3c:c9:dd:b8:47:c1:07:b3:21:
53:45:e1:0d:f0:62:73:95:d0:64:0b:f0:18:62:0b:
6b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:99:B8:0F:88:48:A1:81:65:6D:35:F2:D2:39:7E:D1:CE:8C:9E:B2
X509v3 Authority Key Identifier:
keyid:89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d6:01:44:46:eb:33:d7:bf:f9:48:41:45:a4:4d:97:f3:af:
b4:78:ef:dc:f0:1d:09:74:35:41:36:9b:7e:82:24:dc:f4:f5:
0b:ec:4f:1a:ee:6d:25:ba:d1:d9:46:44:c9:06:de:8c:30:db:
82:ab:d5:07:bd:41:32:5f:b6:ca:0e:4a:c6:3d:2a:ba:17:c2:
eb:2b:92:5f:a5:42:7e:0a:b3:9b:51:39:d9:4c:c1:78:40:d5:
66:70:6f:dd:5f:d6:25:38:ce:98:1d:d1:7c:5d:07:54:c8:35:
95:70:63:5e:7d:78:8c:0f:f8:f6:d3:55:d7:e0:e2:be:09:2d:
9b:9e:2f:09:1e:67:0b:74:65:62:5f:84:dc:51:4b:54:b7:95:
ec:ba:9f:4b:7f:f1:c2:5d:a7:23:73:9b:97:67:0c:4a:d4:a5:
80:cd:05:a8:68:ff:c0:41:8f:36:27:e8:c8:92:e4:55:d1:66:
1a:0d:99:12:e2:1e:1f:b4:ab:76:6e:86:33:ab:3a:0a:82:76:
94:dd:45:f7:00:fb:5d:30:e4:de:e5:f3:35:1b:6f:50:52:3c:
e6:3b:a1:31:51:12:af:82:0d:6f:6b:b9:6a:60:02:fc:e3:c1:
b2:7e:c0:b0:64:fc:1c:65:f9:27:48:c3:8a:94:43:7a:3f:18:
13:f6:38:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:20 2025 by rpki-client