Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
File: iiJ8Nfko2ci4_3wlch79R6kNy2c.mft (raw, json)
Hash identifier: zyE5t3WlHjt6fTiuWoGFa/HKqUuki/cew6888Gp5S68=
Subject key identifier: F8:75:06:AD:FA:EE:A0:62:64:F9:38:90:EF:E0:01:89:16:45:CC:2C
Authority key identifier: 8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67
Certificate issuer: /CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67
Certificate serial: 01985456BEC9A9B65C016E0F9737107CDF7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
Manifest number: 130E
Signing time: Tue 29 Jul 2025 04:00:27 +0000
Manifest this update: Tue 29 Jul 2025 04:00:27 +0000
Manifest next update: Wed 30 Jul 2025 04:00:27 +0000
Files and hashes: 1: K7N-hRXidANMpYlZJ_rYSwLoLCk.roa (hash: tqDwe1a97FYihn4sdeIxy/I7wKkMHB8gK4badlQZXTs=)
2: iiJ8Nfko2ci4_3wlch79R6kNy2c.crl (hash: bZ8IweHBPSDMWTouvD1KttoCh2TDfHgBbPyRwjT3qoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:56:be:c9:a9:b6:5c:01:6e:0f:97:37:10:7c:df:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a227c35f928d9c8b8ff7c25721efd47a90dcb67
Validity
Not Before: Jul 29 04:00:27 2025 GMT
Not After : Jul 30 04:00:27 2025 GMT
Subject: CN=f87506adfaeea06264f93890efe001891645cc2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:59:32:c2:ba:a5:d1:6f:a6:79:63:c5:b9:7f:
aa:5b:ab:6d:7e:bc:01:c1:5c:31:ac:a5:df:5f:b5:
e6:78:72:2f:11:92:f9:73:d6:8a:53:d5:a6:33:c1:
03:43:18:f7:70:44:63:a1:53:ef:ab:29:14:c1:e8:
f0:d0:20:49:1c:01:e5:ff:c1:23:9b:c8:35:79:10:
81:ad:d2:7e:b1:c6:0f:9d:fe:cb:e5:9a:00:be:91:
d7:46:89:40:db:fd:be:b4:0f:ce:fb:3b:ea:63:99:
2c:66:30:1f:d5:02:1f:0f:dd:4c:6f:42:37:2d:a4:
5c:35:8f:c5:1c:18:66:d9:d6:18:7f:34:a9:e6:13:
2d:90:2e:3d:0a:fb:84:c4:19:03:a2:2c:12:75:8d:
0b:46:0d:19:56:de:e6:d0:6d:56:88:a4:63:87:d2:
00:54:36:22:fe:7e:ea:36:da:bc:8c:77:13:98:f0:
a8:b4:11:68:45:59:73:94:00:cc:2f:3c:34:46:be:
dd:16:9e:64:9f:86:df:3d:76:e0:38:33:eb:f8:c7:
67:fe:e6:5b:f5:b8:a2:6f:c1:c4:89:0b:ba:e8:f6:
f9:35:69:7a:6f:64:cf:c5:d7:6a:14:68:78:2c:ce:
4f:3a:40:88:11:5f:a3:88:73:b8:db:c5:5f:17:18:
7c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:75:06:AD:FA:EE:A0:62:64:F9:38:90:EF:E0:01:89:16:45:CC:2C
X509v3 Authority Key Identifier:
keyid:8A:22:7C:35:F9:28:D9:C8:B8:FF:7C:25:72:1E:FD:47:A9:0D:CB:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iiJ8Nfko2ci4_3wlch79R6kNy2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9af78b-41c4-47b7-af95-37b0a2ab3cd6/1/iiJ8Nfko2ci4_3wlch79R6kNy2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d4:6c:c3:73:5e:a4:9b:89:7a:c6:95:44:ef:a1:86:59:d9:
6e:a9:0a:4b:11:9c:d9:6e:a9:33:92:ac:ff:73:de:97:b0:82:
83:f1:45:c2:5f:f5:1c:50:4a:e3:c7:e7:53:37:d8:bb:fd:2a:
b9:a6:cd:46:64:42:b9:bc:4e:0e:c0:21:43:4e:35:20:75:d6:
ca:96:d6:71:eb:f2:dc:68:6d:e1:3a:b6:80:f3:5c:2b:29:65:
fb:6c:a5:59:00:45:3f:00:74:5a:e6:ee:2d:43:e8:70:aa:52:
e7:5f:c7:2b:14:b8:7b:c3:ed:39:af:9e:af:62:6b:16:30:bd:
5d:df:c0:3c:52:32:fd:a9:9b:7c:eb:22:07:bd:a3:95:98:c9:
4c:57:42:fc:44:94:22:9f:86:f7:62:10:e4:3c:bb:cf:3e:85:
b4:3d:66:c2:2d:8f:c7:53:c6:66:7e:09:a1:55:e6:24:6b:60:
66:f4:9a:fc:67:8e:d6:a8:3c:c7:bf:7f:b3:3d:d7:88:04:72:
cd:dc:27:44:8f:77:40:15:82:d4:d5:9c:d2:0f:57:1c:60:76:
50:f6:39:2b:da:07:5e:08:83:96:61:01:fc:a1:47:88:a6:e4:
3d:4d:fa:a1:1b:df:4f:5d:5b:c5:88:af:2d:75:10:f9:b4:f7:
bc:b0:12:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:08:23 2025 by rpki-client