Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
File: iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft (raw, json)
Hash identifier: ah5YujXzY9aAmomD31sLVpqOLAhVWIwILDTgwCjWW4s=
Subject key identifier: CE:E2:86:C9:18:53:AD:1B:29:6A:FB:58:3C:7C:E5:BC:F7:7B:A4:BB
Authority key identifier: 88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
Certificate issuer: /CN=88a780738b853acffbabdb23914c50e36421f773
Certificate serial: 0198485316407FEB0FC5EBC5E439C3DD73E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 20:01:01 +0000
Manifest this update: Sat 26 Jul 2025 20:01:01 +0000
Manifest next update: Sun 27 Jul 2025 20:01:01 +0000
Files and hashes: 1: 0JBSKBByojNYZjOoZlphUB11hQs.roa (hash: 9bDpXvSUlNPWWMoYaJSQ0SO0EuZKnPkwfl5l8GKFytk=)
2: aKf7cpyzNQSyfw8b7-Pr38WCYnc.roa (hash: oRGD5ClevpyjAOYjV/aBq4YhQP42jPwVRjMhzooXQlg=)
3: iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl (hash: U31+y8iHmquHur0oter97eHRXcyQRv9NvYTuAMme5Uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:16:40:7f:eb:0f:c5:eb:c5:e4:39:c3:dd:73:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a780738b853acffbabdb23914c50e36421f773
Validity
Not Before: Jul 26 20:01:01 2025 GMT
Not After : Jul 27 20:01:01 2025 GMT
Subject: CN=cee286c91853ad1b296afb583c7ce5bcf77ba4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:45:93:5a:fb:81:f4:3e:ef:11:28:8f:f7:7b:
a9:64:49:28:fb:6a:0a:6f:fe:c5:bd:61:91:1a:0d:
7c:64:65:d6:88:54:2e:c3:86:34:f1:f9:a9:d1:85:
b5:a5:46:94:25:b2:79:7a:4e:99:1d:3c:0d:bb:8e:
9d:a2:88:94:6e:33:ba:68:3e:13:81:1d:18:f0:58:
49:a3:ee:a3:da:67:a6:57:9d:e0:de:99:81:0f:5d:
a1:56:a9:87:c2:84:11:5d:5d:fe:2d:d0:9a:aa:40:
e7:50:14:24:53:d6:d5:ea:b4:3c:82:f7:78:4a:98:
4a:c6:d5:25:32:3f:35:1e:55:ab:ae:3b:a3:d3:fa:
c3:8b:7b:60:7e:b9:74:e8:a3:be:b7:d3:51:8b:39:
79:d2:f1:b0:35:bf:0c:49:ac:49:44:69:88:97:f0:
7c:6f:47:ac:b6:13:a6:e2:59:ae:ac:0b:bd:82:6a:
d7:74:9b:04:42:a7:a5:0f:00:33:da:6f:bb:db:69:
a1:81:8f:a5:83:2c:09:50:a2:83:97:b7:45:e7:a2:
a5:3c:e8:e6:e3:d0:1f:8a:f8:21:80:0c:c8:c9:a6:
33:1f:01:e0:6b:55:5a:5f:59:e2:9a:90:31:18:0e:
fe:08:71:a7:58:48:24:fd:bb:da:d6:17:12:3e:a6:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E2:86:C9:18:53:AD:1B:29:6A:FB:58:3C:7C:E5:BC:F7:7B:A4:BB
X509v3 Authority Key Identifier:
keyid:88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:42:fc:06:f2:89:a4:7c:7c:3a:af:43:36:74:04:d2:d3:c0:
39:c9:b3:81:d9:ae:f3:8b:93:87:f6:ba:35:99:74:70:2d:7f:
8f:f8:4d:cd:f3:1a:6b:69:3a:d9:33:05:f3:01:5a:83:2e:be:
e0:ad:c3:b6:bb:df:65:3b:63:08:f9:a2:39:9e:dd:72:1e:77:
a8:9e:b6:6c:a9:12:06:72:fb:75:5e:09:67:b1:cc:fd:11:f8:
d0:e9:bc:aa:cc:74:e0:3c:53:b1:60:f9:3a:39:9a:4e:4a:d9:
db:57:70:d1:a6:5f:7a:cc:ed:f5:2c:d7:b2:0f:0b:e7:70:6a:
ee:cf:67:62:f1:30:fa:b2:87:48:f1:64:4e:a0:6e:22:05:28:
33:25:ee:76:aa:8a:f0:03:6d:79:e6:c9:ac:1f:33:7c:95:2d:
0d:26:67:89:1e:c3:11:72:ed:aa:94:d3:8e:39:06:f1:2f:39:
3d:ef:d8:75:56:90:33:60:a2:bb:1b:18:d6:dd:52:42:31:d1:
5a:fc:19:cc:b1:01:bf:04:d4:7e:47:a0:81:e8:1f:42:87:b7:
64:aa:ed:b6:0c:3f:23:d8:cd:5d:5e:94:6d:68:b3:59:40:63:
83:cb:80:89:18:12:6f:b4:51:dc:c1:68:a8:0f:a1:30:1f:7f:
f5:30:ba:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:29:38 2025 by rpki-client