Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
File: iO0MCQHGnlxdj1GmddBVmC-R0qc.mft (raw, json)
Hash identifier: 2b5I+VfmEXUWeOUpWmg/Z5mJmTEFz9SuMq7zRlsp+hU=
Subject key identifier: 4B:8E:CC:0F:09:A4:B4:93:25:FF:B5:85:C9:E2:6A:B9:50:4F:88:E0
Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
Certificate issuer: /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Certificate serial: 019827111CF2BCFADB949AD6532CFF99BA7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
Manifest number: 0F1D
Signing time: Sun 20 Jul 2025 09:01:29 +0000
Manifest this update: Sun 20 Jul 2025 09:01:29 +0000
Manifest next update: Mon 21 Jul 2025 09:01:29 +0000
Files and hashes: 1: 5bB3yoqJtJ8O9S62QfWorgiioFY.roa (hash: 8Ndb6O5ZdaPJ5izfIbfWtZrPZCIF+KxMhtKJ5R+rDRA=)
2: F2pyX4AW0yNP_DxkJy2c7z3MxKg.roa (hash: YtC8cOEf9B52eoNJhdsOBs1/lz34UsGpGhA4ymHbCSI=)
3: iO0MCQHGnlxdj1GmddBVmC-R0qc.crl (hash: 3y027CY8d7uUZQ6uo+5Kse8j786EYRFjnBLDWQK7OfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 09:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:11:1c:f2:bc:fa:db:94:9a:d6:53:2c:ff:99:ba:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Validity
Not Before: Jul 20 09:01:29 2025 GMT
Not After : Jul 21 09:01:29 2025 GMT
Subject: CN=4b8ecc0f09a4b49325ffb585c9e26ab9504f88e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d7:c4:65:d1:69:fd:34:38:b0:3a:75:a3:b2:
44:8c:9a:b8:e4:97:91:1a:0b:45:81:c7:87:72:95:
94:72:52:a2:d8:07:01:9e:a9:f5:91:c6:64:3d:47:
7c:13:c3:0d:ea:52:d7:0c:0a:91:f5:66:9e:14:75:
86:ba:97:a8:b7:38:85:2b:6b:54:b4:81:f0:50:74:
1b:7f:af:e5:73:17:cc:f1:f1:c8:41:0f:67:43:46:
71:5a:69:a9:a2:56:47:e6:6e:1e:fb:39:66:ed:7f:
5a:43:6b:1f:46:8c:8e:48:f9:39:79:ec:00:a7:12:
18:28:20:cd:f0:d6:9a:9c:cd:93:ec:70:38:93:e2:
ad:2c:84:b9:4c:9e:b3:bb:b6:a5:44:14:3b:cb:64:
8c:00:a1:51:bf:95:c0:e1:df:c1:61:37:c1:04:2f:
e6:c9:7a:af:1e:d7:28:ad:d3:1e:0a:61:c8:bb:0b:
e1:77:90:cb:4f:41:35:29:76:8d:97:8c:9d:bc:19:
6f:30:37:c5:74:78:31:d5:44:aa:41:46:7a:d7:9d:
24:c7:3b:4c:b8:91:e9:2d:0b:b9:05:66:7b:33:4e:
73:47:f4:37:79:de:4d:1a:e7:99:ec:33:33:bc:66:
f4:ec:3b:d5:f8:3a:e1:b7:49:c9:a2:59:46:27:8e:
d5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8E:CC:0F:09:A4:B4:93:25:FF:B5:85:C9:E2:6A:B9:50:4F:88:E0
X509v3 Authority Key Identifier:
keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:eb:d1:60:75:f6:0a:a8:0e:9e:72:6a:85:b7:c5:bf:89:b2:
36:77:a5:9c:3a:42:db:db:91:8b:a9:32:36:3d:6f:8d:e9:2e:
25:5c:34:11:27:e3:56:20:2c:f9:7f:32:24:df:18:46:cc:d3:
01:5d:af:68:e3:de:e0:2e:f8:a0:3a:85:25:b0:d4:58:0f:69:
f9:1a:54:67:60:26:38:2b:1c:95:66:a0:47:d7:a9:e4:66:ef:
21:0f:e0:01:e8:02:6b:17:ad:00:03:6d:fb:a6:b7:15:e5:ac:
c1:ea:79:89:9d:c8:27:52:c0:74:3b:17:c3:5c:51:22:28:9c:
94:68:bc:6a:23:15:71:70:74:1e:f4:b7:91:59:1b:e6:0d:98:
d1:30:66:bc:07:31:6e:1c:ba:3d:1d:16:e6:81:f3:8c:d0:92:
8c:43:90:9e:a7:cd:93:e0:14:50:65:ca:b4:d9:01:e7:93:2e:
1c:bc:fb:3f:73:27:a8:94:55:24:5e:e6:59:69:ff:b3:9c:3e:
5c:09:18:d8:76:91:97:22:4c:2f:d0:a7:de:a6:39:73:a2:77:
f9:fb:2a:26:e5:52:be:6e:7c:60:94:65:9a:d1:95:1d:5e:c7:
5c:20:d7:00:3f:34:33:8d:13:74:fa:30:74:64:ac:49:83:d7:
ec:01:2a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:27:12 2025 by rpki-client