Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
File: iQH2c8aw_4g16gL67bpbSc8UIk4.mft (raw, json)
Hash identifier: 0+iB21CghbNLpFpgq0BCOruTYsVTLcMI45TJmRChq2k=
Subject key identifier: 3D:DD:F9:4E:54:0D:17:63:54:C2:5C:E0:7D:DE:46:87:ED:8C:F8:B4
Authority key identifier: 89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E
Certificate issuer: /CN=8901f673c6b0ff8835ea02faedba5b49cf14224e
Certificate serial: 0198D58357999759EE245EF0E9DD1B757DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
Manifest number: 0CE8
Signing time: Sat 23 Aug 2025 06:00:11 +0000
Manifest this update: Sat 23 Aug 2025 06:00:11 +0000
Manifest next update: Sun 24 Aug 2025 06:00:11 +0000
Files and hashes: 1: LwODeFlTbNm331VlQw3cZjyD1Sg.roa (hash: 6xKklCkI+s1DbuNSCG9T6RXJeAeTq1fLNQfBDhNCOAU=)
2: iQH2c8aw_4g16gL67bpbSc8UIk4.crl (hash: v65NCaA4oBLQTedrKMdACgRmltyDR5uzz3efYJ75gWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:57:99:97:59:ee:24:5e:f0:e9:dd:1b:75:7d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8901f673c6b0ff8835ea02faedba5b49cf14224e
Validity
Not Before: Aug 23 06:00:11 2025 GMT
Not After : Aug 24 06:00:11 2025 GMT
Subject: CN=3dddf94e540d176354c25ce07dde4687ed8cf8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:00:e1:ad:7b:27:f5:43:1a:8a:31:bd:49:d7:
00:05:be:2e:ce:1c:14:1d:42:5a:74:1e:4f:3f:5f:
a3:a5:27:35:ff:6f:ba:7f:5e:64:7d:1b:c5:67:44:
70:69:53:e2:f6:f5:8b:51:d6:0a:44:b4:32:52:fa:
5b:96:9b:8a:f2:cf:4b:6a:d9:f8:78:4f:37:90:34:
15:4e:9d:3d:43:95:b9:5b:c9:81:28:cb:59:79:e4:
90:1c:07:2b:91:13:64:f1:92:00:c6:19:b5:91:da:
06:12:e1:da:f4:ee:4b:30:32:3f:5c:ea:90:6c:1d:
5d:8e:c2:c6:05:d0:a6:32:ba:6c:98:48:6e:e9:7c:
e0:20:43:90:f6:fa:62:9c:1f:f6:ae:42:bb:70:d1:
8b:0c:60:5b:22:32:aa:b4:64:d2:2d:a8:f3:f5:22:
d7:4d:76:89:32:fd:12:ad:89:f0:c0:de:c1:76:f2:
d9:14:42:a1:aa:16:03:ad:15:66:f2:3b:0c:41:18:
90:c1:57:13:b1:51:58:39:6d:b7:17:00:57:ad:a8:
43:d8:7e:b9:13:16:54:d5:45:d1:9d:b4:97:fe:e5:
6a:97:8c:1e:d3:4b:e2:fe:9b:e0:bd:f4:98:8c:d0:
07:4f:39:5e:a2:05:9e:9e:57:57:6e:9f:89:13:27:
3a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DD:F9:4E:54:0D:17:63:54:C2:5C:E0:7D:DE:46:87:ED:8C:F8:B4
X509v3 Authority Key Identifier:
keyid:89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b2:a9:d4:d5:c8:b6:ad:d3:9d:a1:89:15:32:75:01:6e:6c:
da:77:37:00:31:5d:25:cd:1e:77:a6:24:75:36:9b:13:2d:88:
73:15:3c:a6:e3:a9:3e:81:ca:a1:99:58:1c:78:55:fd:61:c0:
c5:72:66:8b:30:0d:b0:cc:78:54:86:c3:ef:4e:59:42:53:ab:
df:ba:4a:ae:7b:31:f6:6d:2f:d7:cf:40:bc:7f:12:6b:94:1d:
c9:69:92:4c:95:f6:0f:f7:2d:8e:b4:d2:e2:c1:6f:70:71:dd:
2d:10:0f:71:c2:cf:b5:92:70:a6:d4:91:31:f7:f2:d3:ad:e8:
86:3b:7d:78:ed:54:9a:f7:92:f8:b2:c3:c8:1d:1e:36:e9:df:
b0:33:09:94:e1:87:61:15:d5:8a:42:11:95:89:15:37:ac:68:
c2:9d:f3:3b:15:11:2d:60:9d:5f:4c:4d:9d:16:06:65:12:19:
5f:a1:ae:79:74:21:14:25:a4:37:22:01:52:3d:7e:31:2f:ea:
4c:e4:5f:a2:67:b8:a9:bc:73:cc:95:fa:4f:77:6b:53:79:2d:
23:ab:2e:e5:db:9e:49:99:d9:8e:a8:dd:c9:ea:92:3d:37:d6:
d0:af:43:98:6d:90:be:d4:de:00:7d:2a:7c:df:9f:2d:77:b8:
f5:e3:27:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:26:47 2025 by rpki-client