Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
File: iTr8bv5imQomky9A4VCyfu1TnEs.mft (raw, json)
Hash identifier: JU+pkseV3rbrbg0VduR9Hzx8tmpIeWLZK1riPBiY7ww=
Subject key identifier: 8B:89:ED:23:3D:A9:43:A5:96:C2:5F:7A:3A:80:69:F0:1B:8F:98:B1
Authority key identifier: 89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
Certificate issuer: /CN=893afc6efe62990a26932f40e150b27eed539c4b
Certificate serial: 0198D5BC186B49D807D2C85D43DA6EF3E9B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 07:02:10 +0000
Manifest this update: Sat 23 Aug 2025 07:02:10 +0000
Manifest next update: Sun 24 Aug 2025 07:02:10 +0000
Files and hashes: 1: UvkgBounMtuI2EY4VakFPmSVVf8.roa (hash: B8b+cAv47Fq4zMohD+Ikbfg+w/maMgI605v1qgGvxbU=)
2: aMP60-6kIcycfPRX1mrnGq3rKu4.roa (hash: 3JfLcJd1nqn3CbGO/VzxfaF4cayveMgFQoD5eZc253E=)
3: iTr8bv5imQomky9A4VCyfu1TnEs.crl (hash: ZI202Okd1Z1cYq/LJPs93WR9MDFwIfFK6xfBYaHpL94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:18:6b:49:d8:07:d2:c8:5d:43:da:6e:f3:e9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893afc6efe62990a26932f40e150b27eed539c4b
Validity
Not Before: Aug 23 07:02:10 2025 GMT
Not After : Aug 24 07:02:10 2025 GMT
Subject: CN=8b89ed233da943a596c25f7a3a8069f01b8f98b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7d:71:7e:c2:ca:60:2c:c0:49:a0:e9:07:49:
5b:df:b4:08:3e:ae:8b:93:91:6b:10:f7:c2:d8:92:
4c:14:a9:db:46:85:27:d6:27:f9:0c:4b:a6:34:e1:
71:32:be:d4:69:b6:f6:50:bc:8f:e6:6a:8f:21:71:
a0:cf:b9:83:e1:b8:d2:b6:23:77:dd:5c:7b:05:08:
f9:78:e0:ee:56:b9:76:35:e6:96:98:18:e1:15:86:
6c:d8:a2:37:48:40:f1:0d:6b:9d:d5:59:9e:b0:41:
48:c8:72:5a:86:32:cb:3b:73:59:12:0f:35:44:e9:
19:e0:33:7d:ce:e5:65:b8:d7:be:2d:92:c4:d6:0e:
45:90:b7:55:f0:96:26:6c:49:d8:69:4e:a2:a9:6e:
eb:2d:74:2a:86:00:62:0f:02:42:1b:a8:fa:b1:3b:
8b:82:d3:a2:6c:12:19:72:03:57:f9:2c:cf:50:4f:
df:c2:92:50:15:63:7c:45:51:b7:6d:26:79:05:a9:
8f:ef:4e:4c:eb:63:c2:48:ae:7a:b4:9a:c7:88:65:
0c:f6:75:88:c8:aa:2a:84:c2:eb:7c:40:8e:99:b8:
1b:fb:f5:67:46:bd:c8:c2:7a:fa:05:86:f1:3a:2b:
49:ee:b6:ba:bc:f1:0e:cb:7b:1f:8b:5f:04:75:6f:
6b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:89:ED:23:3D:A9:43:A5:96:C2:5F:7A:3A:80:69:F0:1B:8F:98:B1
X509v3 Authority Key Identifier:
keyid:89:3A:FC:6E:FE:62:99:0A:26:93:2F:40:E1:50:B2:7E:ED:53:9C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTr8bv5imQomky9A4VCyfu1TnEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7e18f0-af1d-47c1-8db5-5a5233dc0ce0/1/iTr8bv5imQomky9A4VCyfu1TnEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:19:8d:a3:52:61:61:92:9e:08:64:29:da:0f:e8:f7:33:58:
d2:4b:6e:58:04:a6:44:3a:ad:28:a9:8a:f8:c7:ba:55:f6:5d:
fd:42:ea:43:49:31:fd:1a:e7:98:bf:af:62:63:10:52:4a:59:
2b:54:c8:55:68:8a:19:fb:c2:45:8d:99:b1:13:60:f4:b0:d5:
a2:f6:c9:c9:34:a5:e4:d7:c5:98:31:5d:fb:75:12:3b:32:2c:
25:2c:b9:68:17:04:67:9e:30:8d:64:98:8e:a7:83:0e:01:96:
ad:b1:f0:9e:07:c1:6a:76:f7:8a:a7:8a:05:91:07:ce:3a:1d:
ec:8d:79:d7:bd:07:b8:fc:85:07:8a:a1:d1:9d:73:1c:c5:d8:
94:3e:fa:e7:2c:c2:97:9a:75:bb:de:1e:48:5f:9d:31:99:e1:
6f:2a:4d:d5:3f:42:23:6f:c3:08:74:b4:12:f2:83:58:e6:64:
47:6c:57:fd:b4:94:ec:32:22:fc:9c:74:8d:e9:b6:3a:b5:3c:
32:9c:5e:40:92:8e:29:a4:65:3b:cd:e1:8a:81:2e:be:8f:4d:
00:3e:4a:69:6d:76:c2:4c:53:02:2d:b3:e9:c6:fd:b9:d3:79:
6f:28:15:04:6c:26:6d:6d:7c:51:96:ee:0f:f9:fa:77:be:a6:
98:00:13:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:03 2025 by rpki-client