Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
File: iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft (raw, json)
Hash identifier: jBKOBCkWNvQppREzCCAG8PgIuhTwd2CnfLuRSbI1/LQ=
Subject key identifier: C5:2F:CC:0B:3D:80:BF:22:B0:F7:5F:CA:1F:13:06:62:D2:14:84:A6
Authority key identifier: 89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
Certificate issuer: /CN=8916aaa5d252fd90145fedac683762d6e2074155
Certificate serial: 019848F7A0EFEB6E0AEE4014EED52229B65A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 23:00:44 +0000
Manifest this update: Sat 26 Jul 2025 23:00:44 +0000
Manifest next update: Sun 27 Jul 2025 23:00:44 +0000
Files and hashes: 1: EJO9ljE1s0Q84FuNpxDY98O5gUs.roa (hash: MidhZCUKLP8FjCtsor/fdefcfGoS6d1va0RAyvBU+x4=)
2: iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl (hash: FDozg1aTiYa4vCXI5/pt/HAFWwXqTHOe/DE8h/H50YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:a0:ef:eb:6e:0a:ee:40:14:ee:d5:22:29:b6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8916aaa5d252fd90145fedac683762d6e2074155
Validity
Not Before: Jul 26 23:00:44 2025 GMT
Not After : Jul 27 23:00:44 2025 GMT
Subject: CN=c52fcc0b3d80bf22b0f75fca1f130662d21484a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:7a:44:72:73:72:82:8e:65:3f:6e:2e:79:97:
9a:12:ff:b4:5f:2c:e0:9e:36:9c:fe:b0:93:a1:b5:
1d:7c:56:98:46:f7:20:d6:4d:85:6f:53:f2:81:21:
a3:f0:2e:72:ae:2e:72:e8:4e:3f:66:12:2a:48:00:
a5:50:5f:03:75:ee:df:ae:27:ce:bc:0b:87:7c:28:
74:98:f6:7b:61:df:a9:60:0d:4f:a9:33:cd:20:55:
41:84:58:7a:d2:4c:6c:19:3e:ce:e8:90:ac:4d:0f:
aa:e2:08:a3:44:9b:de:e3:b0:1c:03:1e:0f:0e:db:
06:7c:a3:89:33:52:e4:fc:13:de:20:0c:ce:ce:1a:
74:4c:0f:c6:5f:87:81:22:71:99:71:d5:e3:23:83:
d3:3f:f3:1a:58:14:5e:61:31:69:07:a9:a7:86:a8:
14:b8:fc:c5:4c:17:31:4a:31:9c:2d:96:40:5b:ed:
e2:12:86:e4:0e:b5:0c:20:76:3b:4a:81:4c:30:01:
cd:1c:38:62:51:bd:52:a1:97:52:07:be:28:27:5f:
69:e5:f9:27:f1:e3:7e:af:60:50:3a:79:be:9e:40:
0f:25:ab:86:c1:a0:bc:a3:e3:c8:40:91:67:63:4e:
e5:7c:5d:78:a5:6d:2c:d5:74:21:a1:cd:68:a3:f2:
6a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2F:CC:0B:3D:80:BF:22:B0:F7:5F:CA:1F:13:06:62:D2:14:84:A6
X509v3 Authority Key Identifier:
keyid:89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:29:20:03:b0:40:3e:da:17:d2:19:97:e3:be:c9:1e:f5:09:
bd:40:f2:d1:16:47:36:49:ba:31:2e:dc:2d:b8:28:99:7e:b1:
9e:23:62:b4:47:3d:50:75:a6:49:da:16:4e:53:fe:51:15:a1:
41:42:e7:d8:a6:5a:01:8e:50:82:59:d9:ce:c8:17:3e:46:7e:
c6:c5:6b:e2:13:87:c0:17:e0:0c:b4:59:d7:3e:86:01:2b:72:
94:ee:ce:e1:b7:a9:dd:1c:53:26:a9:83:b8:28:d4:fa:3a:5e:
54:64:e9:88:1f:29:6b:cc:d3:e0:4b:d8:ca:b3:0c:d8:2e:b0:
0f:7a:3c:16:7f:a0:9b:d4:aa:25:14:a0:da:4a:92:3c:42:96:
02:1b:ab:02:d3:fa:22:10:5c:bd:66:3b:01:82:77:2e:fa:0c:
eb:b2:a5:fe:1b:3b:86:cc:54:de:af:eb:11:95:f1:42:1f:e5:
9d:04:f9:6f:81:af:a7:ec:3b:8a:4c:24:3b:5c:df:fe:14:a0:
c7:c7:9c:2d:dd:a0:84:99:98:8a:c1:b5:c8:9f:f2:0d:83:38:
40:48:42:19:0c:61:5c:ca:fc:16:8f:9d:e5:72:b5:61:5c:6d:
fd:e1:23:3c:52:23:a9:ee:d3:39:b2:c4:64:28:ce:27:46:c6:
0c:34:84:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:17:57 2025 by rpki-client