Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
File: iVVHgNslskPAotNhl5sTCn8Txg0.mft (raw, json)
Hash identifier: DiEFW7rEOJBWkz9TQEIWxTzbK6q88liMwyKzOrfhuEE=
Subject key identifier: F7:0F:E9:20:1F:60:68:87:FC:35:55:52:A3:EC:BD:F0:84:A8:FA:B5
Authority key identifier: 89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
Certificate issuer: /CN=89554780db25b243c0a2d361979b130a7f13c60d
Certificate serial: 0198D7060ED424BA789A4E8944A34BA5AD90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
Manifest number: 0B73
Signing time: Sat 23 Aug 2025 13:02:34 +0000
Manifest this update: Sat 23 Aug 2025 13:02:34 +0000
Manifest next update: Sun 24 Aug 2025 13:02:34 +0000
Files and hashes: 1: Io8_rALEkRmJyvwQSYZoU_nTQg0.roa (hash: IdvBLL1znSmthNlumpub/fXZwL7C6UNAlVvYWPg9Tzc=)
2: fp-LIMQ80k5YBVtTaX91n-J89eo.roa (hash: ItqEQhJ82EwpqjGgmH+0CXCKGMVgFNbNle1pM5dmqlE=)
3: iVVHgNslskPAotNhl5sTCn8Txg0.crl (hash: yTGKpuVJpu5sWrm7DXQtuq0F9VlWepFw9YIt+9g47HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:0e:d4:24:ba:78:9a:4e:89:44:a3:4b:a5:ad:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89554780db25b243c0a2d361979b130a7f13c60d
Validity
Not Before: Aug 23 13:02:34 2025 GMT
Not After : Aug 24 13:02:34 2025 GMT
Subject: CN=f70fe9201f606887fc355552a3ecbdf084a8fab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3f:93:57:ba:21:6c:4b:6e:7e:b5:db:dc:da:
61:02:55:b2:39:91:3d:38:52:2f:bc:7b:db:3f:4d:
5f:33:e0:05:cb:b2:8c:0f:a6:98:8c:30:58:55:68:
9a:67:11:96:61:fb:91:1d:ec:83:67:9f:b5:f1:10:
9f:c9:b8:9b:0b:18:5f:6c:8e:cf:99:0c:fb:68:28:
e5:c7:bc:93:2d:4c:9d:a3:7b:09:74:58:3f:0a:c9:
36:65:9d:5d:a9:2c:e2:df:a8:b3:c5:76:ac:fc:3e:
c2:c3:45:ed:c7:8e:a7:75:d7:0d:75:93:e4:1f:93:
a7:03:16:73:94:d6:07:f9:d5:fd:ab:13:6c:3c:a2:
1a:81:c2:bf:93:19:0c:d0:4d:12:4d:5e:f8:b7:5d:
a7:d0:66:92:52:53:00:3c:41:a7:04:bb:4f:50:c8:
d0:83:dc:61:91:a2:e1:c3:5c:df:08:58:62:f3:21:
ad:c2:78:22:13:a8:f3:71:07:44:1b:33:3d:db:50:
b3:11:5f:12:3f:64:39:dc:19:74:10:f1:d6:4d:2d:
88:39:bf:1d:c2:97:3c:95:bc:7a:ea:ea:8e:c8:ec:
a4:43:99:46:49:2a:b1:51:4c:4e:87:54:ae:78:77:
00:cc:8e:f4:d4:59:f3:c3:ac:68:6a:b5:ec:78:ff:
bf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0F:E9:20:1F:60:68:87:FC:35:55:52:A3:EC:BD:F0:84:A8:FA:B5
X509v3 Authority Key Identifier:
keyid:89:55:47:80:DB:25:B2:43:C0:A2:D3:61:97:9B:13:0A:7F:13:C6:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVVHgNslskPAotNhl5sTCn8Txg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3e2077-bc10-4621-ab0b-dba4c9b8706b/1/iVVHgNslskPAotNhl5sTCn8Txg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:eb:92:c6:37:21:61:d2:d2:90:1b:85:57:96:b2:b9:f3:2a:
77:b7:ea:23:d6:64:13:7b:b1:c6:dd:32:cc:87:65:9f:e3:24:
75:51:cf:85:54:da:0a:98:b3:7d:de:59:61:49:fb:56:c8:38:
60:b4:c7:66:d7:26:a3:b2:9c:12:e4:35:a8:ce:db:8c:cb:e3:
e8:30:be:ae:6a:65:0a:28:30:cc:62:f7:64:e4:26:e6:fa:c1:
d4:ed:03:5d:a0:25:f1:f8:4b:e5:b6:3c:88:71:dd:43:57:10:
b4:83:2c:c8:96:53:55:7f:80:9d:2f:15:7f:6b:c8:c3:02:a3:
cd:a2:17:f0:ad:63:6a:1a:1d:86:53:68:ca:4e:75:6a:76:19:
9a:3d:4f:f5:64:dd:05:f6:55:ea:e1:cd:95:ae:a3:42:a4:28:
6e:05:49:2a:4e:4e:56:71:d0:9b:e0:81:03:1d:0a:e5:8b:93:
90:ec:37:99:25:ae:22:2c:1b:7a:4b:67:b7:00:f1:0e:02:4d:
85:25:65:d3:ec:52:f5:fb:1b:5a:d5:3a:b2:bc:bb:0c:8f:1c:
8d:c9:b3:44:0d:2f:49:10:05:e3:a1:bf:cc:3f:1a:df:d1:f3:
db:fa:28:50:95:81:1d:2f:b0:74:87:46:dc:98:7e:ea:a4:0f:
eb:cd:7e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:44:32 2025 by rpki-client