Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
File: k--iv5CiNyiFJyfxJu3mUobDymc.mft (raw, json)
Hash identifier: gJdRWgMX470lOBetZaYw1urONJBBvNjHDojw0qd8TA0=
Subject key identifier: 99:87:16:4F:AA:7B:7D:9E:FF:89:6C:5B:D8:8E:A5:59:4E:85:2D:2A
Authority key identifier: 93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
Certificate issuer: /CN=93efa2bf90a23728852727f126ede65286c3ca67
Certificate serial: 0198D54EBABB550A90FD3C575CEE200B181C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
Manifest number: 03FF
Signing time: Sat 23 Aug 2025 05:02:43 +0000
Manifest this update: Sat 23 Aug 2025 05:02:43 +0000
Manifest next update: Sun 24 Aug 2025 05:02:43 +0000
Files and hashes: 1: 7t7MlmcK5nHqyL8qD10NpjUf4kU.roa (hash: 9aqRdXb5dOWxjBFXvCoD8FGSfMTH7XxxsevlkYrw8og=)
2: HkQZM8FdHxdjQWq3MpT1qAJTVR0.roa (hash: 1AP80IB9GzhySikeQcQhqXMVjN57jPrQ6Y1h/VjynjQ=)
3: k--iv5CiNyiFJyfxJu3mUobDymc.crl (hash: Mff1D/lGw+MccJAq7pOl8/n0tnjLOcjgurP7NLKIns0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:ba:bb:55:0a:90:fd:3c:57:5c:ee:20:0b:18:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93efa2bf90a23728852727f126ede65286c3ca67
Validity
Not Before: Aug 23 05:02:43 2025 GMT
Not After : Aug 24 05:02:43 2025 GMT
Subject: CN=9987164faa7b7d9eff896c5bd88ea5594e852d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1b:fd:7e:13:83:43:1e:40:45:cc:3c:b9:33:
07:c8:e6:e6:5d:a4:a8:2d:0a:0e:1f:f1:b1:25:6a:
ab:0f:71:e7:d9:2b:ee:f3:af:39:e9:8c:fc:12:1c:
dc:6a:da:3c:dd:a9:1f:c9:6f:f5:39:84:7d:60:22:
b6:70:2c:ee:88:c1:49:93:9a:6b:a2:14:1e:cf:18:
13:d5:bc:ae:5a:11:53:d9:71:40:7c:af:09:9e:cd:
e2:26:1a:59:6c:95:dd:3e:05:8f:b8:b0:42:0a:28:
1b:83:7b:93:d7:17:a7:45:79:46:04:3b:c6:e2:e7:
2d:af:04:3c:c9:94:c8:8e:f1:b9:ae:51:27:bf:51:
ae:8b:a2:ae:8a:d5:6e:09:ef:14:c4:45:3e:d4:87:
2f:11:f8:0a:34:ed:eb:b8:b7:ee:bc:46:12:c9:3d:
26:34:93:9f:bd:c2:aa:d7:f4:45:00:73:b4:0a:04:
7d:af:3b:0d:41:00:66:89:35:f0:5e:f8:c7:e1:f5:
20:49:4d:c8:49:8b:21:30:00:4b:59:9c:23:2c:b1:
60:7e:77:12:be:f9:3e:10:69:03:27:fa:09:c1:73:
9c:a2:11:85:ee:7c:6e:3e:ae:2e:7c:7c:ce:43:48:
3f:2c:99:b1:8c:c9:ef:8d:e1:e4:e1:03:9b:ff:3a:
1d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:87:16:4F:AA:7B:7D:9E:FF:89:6C:5B:D8:8E:A5:59:4E:85:2D:2A
X509v3 Authority Key Identifier:
keyid:93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d8:20:31:4d:9a:bb:8e:ca:aa:89:d3:62:67:19:ac:27:86:
4f:06:e8:17:9c:69:88:32:fd:fa:33:02:0a:65:fe:89:29:31:
4f:8c:ae:fb:8b:cc:29:85:ed:05:5e:9f:c9:bc:04:6c:a0:6c:
31:6a:87:55:76:8b:51:bd:6b:d2:78:fe:91:73:88:a4:71:25:
9c:dd:cf:04:8b:78:b7:e1:95:57:74:77:45:a8:b5:bb:18:e2:
e6:b9:8a:9b:74:f2:a6:f1:26:76:4f:52:1e:8d:a4:4e:2e:b1:
5e:8b:f6:23:33:49:66:2f:67:58:b6:41:51:c6:2a:c9:ae:66:
b7:3d:51:9d:c9:13:6e:90:e1:58:43:bf:70:8f:ca:1d:61:16:
3e:a3:ed:94:4f:bc:c4:fd:68:4d:5f:0f:67:78:d8:71:00:13:
7e:0a:42:cc:32:ec:07:ea:1b:5c:80:69:94:fd:aa:71:93:88:
38:5a:0f:fd:97:9e:95:31:a5:75:24:de:3e:9a:6a:fb:a9:fb:
08:1c:27:2f:1d:3d:b5:64:a5:17:41:13:87:c5:91:44:f2:59:
67:cf:23:fb:0f:7b:a1:a2:08:b7:11:3b:3d:e2:53:aa:1f:06:
4b:6f:f1:04:c3:e3:50:26:69:cb:bc:72:e7:d4:40:9e:b3:fd:
03:2c:95:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:46 2025 by rpki-client