Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
File: iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft (raw, json)
Hash identifier: s8GZm6m3QjgLmZ+LUPcNG+Qkjh28WIjUv/cwmRIId6M=
Subject key identifier: D9:76:F2:DB:69:6B:99:01:BE:20:1D:7F:58:76:6E:73:B8:31:6F:D6
Authority key identifier: 89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39
Certificate issuer: /CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39
Certificate serial: 01982823516C0DD46E4272C61641EC9C78F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
Manifest number: 5A
Signing time: Sun 20 Jul 2025 14:00:59 +0000
Manifest this update: Sun 20 Jul 2025 14:00:59 +0000
Manifest next update: Mon 21 Jul 2025 14:00:59 +0000
Files and hashes: 1: FN5Ke6qZ9WFTebO_qSnsGPrtdwA.roa (hash: znT88sYfk6NGdvoBku5OfzDNqhRT8YmCdSbEF1DvoG4=)
2: iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl (hash: dfveIdbOFRRtqEoXuJq1zGxenflzUjuvvScDEeFAy7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:28:23:51:6c:0d:d4:6e:42:72:c6:16:41:ec:9c:78:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892f3ff3c0a1ffb3af20f5b95e8cb64c88043f39
Validity
Not Before: Jul 20 14:00:59 2025 GMT
Not After : Jul 21 14:00:59 2025 GMT
Subject: CN=d976f2db696b9901be201d7f58766e73b8316fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:04:aa:ed:6c:32:01:02:06:13:5c:73:be:
05:28:d9:29:a5:5c:c9:fd:d0:0e:05:3b:cb:34:80:
0c:35:29:25:94:d1:7a:7c:d7:73:79:6a:50:5f:2a:
fa:3a:1d:99:6c:ba:4f:de:c0:89:5d:91:16:b5:65:
ca:84:a5:72:2a:8c:af:06:d2:f2:b9:35:1d:0c:1c:
45:e1:52:e3:96:10:0b:8f:07:43:87:8a:62:97:57:
6c:43:a6:85:a7:2b:17:35:b0:1d:85:48:1c:c4:89:
bc:b0:94:f7:df:97:4a:d4:68:73:ed:b4:e6:17:79:
f0:9a:18:ab:bb:06:b0:5f:d5:59:ce:de:81:4d:33:
c6:fb:6b:cc:66:6e:fd:e7:66:5c:e6:a5:74:82:d9:
89:b9:76:b3:85:ba:27:d0:2f:3d:9d:c9:a2:79:02:
01:5c:b4:d5:6f:cc:41:e5:30:e6:bf:9f:c5:48:6e:
fd:f4:a8:f7:de:35:62:4c:77:d7:c7:96:d1:2f:83:
b9:9e:ec:d5:43:a8:04:04:08:36:55:1a:58:ac:21:
e4:28:b3:f6:a7:49:eb:96:17:15:3d:01:64:c4:4d:
ef:dc:01:89:c4:4a:15:d4:50:d0:25:ab:1a:89:15:
c8:65:b1:da:68:87:c7:74:22:96:2b:6d:fd:02:b5:
27:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:76:F2:DB:69:6B:99:01:BE:20:1D:7F:58:76:6E:73:B8:31:6F:D6
X509v3 Authority Key Identifier:
keyid:89:2F:3F:F3:C0:A1:FF:B3:AF:20:F5:B9:5E:8C:B6:4C:88:04:3F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5d2af7-382b-4dd6-a8b4-f921db75bdf9/1/iS8_88Ch_7OvIPW5Xoy2TIgEPzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9f:b7:91:a6:79:5d:02:75:47:04:6b:2b:74:d7:39:80:41:
b1:35:38:c7:d1:93:68:cb:87:fe:b7:a6:34:cc:b4:a8:9a:b4:
5a:08:97:05:97:28:08:18:eb:01:8b:71:c0:43:51:bb:cd:d6:
2e:a3:09:da:87:30:16:4e:06:e3:40:af:bd:75:ed:33:f6:3e:
b6:c5:00:06:00:0f:08:be:29:ae:9a:6b:0f:78:fc:82:a9:87:
ce:ee:5d:4f:38:13:aa:99:42:d7:22:c5:78:95:94:4e:75:6d:
95:0d:d6:2c:26:6d:e6:f6:3d:ab:3f:c5:08:ec:74:9d:ac:69:
15:54:88:6e:87:80:11:be:ac:8b:74:6a:08:97:f4:dc:d8:a6:
9a:f4:10:d7:fc:1e:f4:05:fd:b4:9f:63:83:97:19:ba:e5:7f:
35:60:7d:b0:75:8e:2a:b1:70:e4:93:eb:97:f1:62:eb:0c:b3:
e7:c5:18:88:a5:ec:18:9c:bf:01:52:0c:37:21:0c:c4:82:03:
a2:a2:c4:6b:7d:73:8d:20:d1:1e:f6:53:44:3d:56:d2:8d:0e:
76:29:01:f3:96:b2:22:03:f7:41:75:df:ff:9c:c7:38:d0:10:
83:d7:24:94:f9:14:6c:e3:5e:73:18:70:28:e4:af:41:13:35:
5f:4b:54:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:20:29 2025 by rpki-client