Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
File: iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json)
Hash identifier: 22uaqFQnm9nFdz29qdeIpZXbpwn+sKzhOcdltXhW9ZA=
Subject key identifier: 25:A3:F6:CB:78:AC:2B:0E:BD:7F:C9:EB:4E:B1:22:DA:9B:51:AA:2A
Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
Certificate issuer: /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Certificate serial: 0198439AEC7EEA81BB30844A354A6ADE702C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
Manifest number: 0C6B
Signing time: Fri 25 Jul 2025 22:01:23 +0000
Manifest this update: Fri 25 Jul 2025 22:01:23 +0000
Manifest next update: Sat 26 Jul 2025 22:01:23 +0000
Files and hashes: 1: 8l1JGPKaxK0LdzidLYE5O7KO7uc.roa (hash: iLVJNEHjRSQZgufW9Xco39laNybFCSoPb4TytjD2nas=)
2: ZaUvqR58Anq8vLQipN0wr5eky28.roa (hash: SPNO6fIwJVYF/onFgsSackS0wfwUe38bLzIxAklnkrs=)
3: dXGr5BqS128mRLd0J3At49a2qzg.roa (hash: wuoQDj1SJzE/S7y91rkdzuUmyIzNX+hGJtJoYwKPBvU=)
4: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: S1Y/APx7OagMnpf0VE7EL1kaHIDqsMX+u4Qd5yLkwO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9a:ec:7e:ea:81:bb:30:84:4a:35:4a:6a:de:70:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Validity
Not Before: Jul 25 22:01:23 2025 GMT
Not After : Jul 26 22:01:23 2025 GMT
Subject: CN=25a3f6cb78ac2b0ebd7fc9eb4eb122da9b51aa2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:68:35:a0:f8:c0:bf:8a:e2:2c:0f:83:7a:1d:
32:b5:e9:47:ea:58:70:af:f0:17:96:9f:45:e3:8f:
fc:2b:79:f1:4f:47:6d:b7:a2:1e:bc:ff:5d:bc:6b:
d0:c3:48:5b:c6:d8:ee:62:a5:84:59:06:b3:c5:b1:
39:5c:80:6c:35:7f:66:ed:0d:7d:dc:57:fd:16:92:
1b:6f:ae:7a:0a:eb:9f:e6:f3:8f:80:51:e6:c3:9f:
29:0f:22:21:02:b0:d3:88:63:2d:51:8a:44:c4:08:
74:eb:14:f5:de:56:fb:7a:92:30:eb:f2:e6:e1:c9:
a4:78:49:90:f9:7c:35:89:c7:0b:e2:24:3d:bf:bf:
d9:1a:36:3f:96:57:78:4d:8a:7c:ad:0c:99:e0:c0:
10:53:01:25:43:af:9f:d9:c1:73:97:ac:a0:8a:dc:
98:91:36:ec:c3:16:c4:f6:9a:f5:b1:00:30:c0:f2:
6d:03:70:ff:28:54:5c:f7:f5:24:36:bc:43:b0:c7:
bd:62:35:65:13:b3:6f:c9:7e:69:1e:e2:47:9b:e7:
0d:ca:c5:45:d3:cd:c7:5e:ae:11:fc:32:e9:3d:26:
15:eb:42:70:65:73:24:37:d5:c0:fd:16:ed:5c:4c:
5f:c9:10:92:fc:2d:75:51:96:54:2c:11:5d:f2:9e:
75:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A3:F6:CB:78:AC:2B:0E:BD:7F:C9:EB:4E:B1:22:DA:9B:51:AA:2A
X509v3 Authority Key Identifier:
keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b9:5e:7e:45:ab:14:6c:55:4f:d8:cd:57:4d:df:14:5c:05:
15:08:18:5e:bf:04:c6:b0:78:36:69:90:24:24:5b:87:a6:7c:
70:cb:3a:2e:f3:0e:ac:37:a9:08:43:e1:1e:50:44:9e:3d:0e:
ac:22:3e:c1:af:30:83:6b:d8:33:4e:63:46:5d:d4:1f:2a:05:
11:1f:07:dc:4d:a6:63:12:84:8d:2e:af:1a:2a:c3:75:fb:ca:
a2:40:e1:38:47:01:6a:b2:23:97:e0:6c:7a:58:5a:9d:2f:6d:
3d:7a:67:6d:71:36:37:9a:40:e9:fc:31:90:5f:88:50:d2:c4:
af:89:59:f8:3b:ed:fc:70:f6:b4:be:83:47:b8:4c:32:9e:f4:
1b:31:15:d1:00:6b:e0:3d:8d:b3:79:90:b5:1c:df:d9:a2:75:
b8:36:f9:67:d9:bd:5d:ea:33:69:d8:b5:14:4b:01:a0:0d:0d:
70:b2:37:5b:72:41:20:51:92:e5:87:79:33:e7:61:b7:a7:7a:
eb:40:c2:84:23:a9:65:e1:cb:0a:e3:94:61:01:7a:2c:35:c3:
f8:70:6c:82:d7:4e:d3:bc:40:45:ca:e9:23:b0:b3:d5:fc:06:
b8:17:96:49:b4:2f:e1:78:d9:3f:42:8c:5c:7c:bf:dd:1e:32:
5a:62:54:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:07:09 2025 by rpki-client