
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft
File: iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft (raw, json)
Hash identifier: uZv3xIOffM0IFXZrY9qorOeBRqGFnQBU6A+BAHjqKvE=
Subject key identifier: 80:9D:83:BA:4D:96:E0:E8:8A:82:8A:8A:0B:70:8C:AE:54:65:5B:FB
Authority key identifier: 88:F7:B0:DD:9F:FC:A2:F8:57:34:C5:37:CB:EF:5C:CD:11:99:E5:BC
Certificate issuer: /CN=88f7b0dd9ffca2f85734c537cbef5ccd1199e5bc
Certificate serial: 019849D36BB79A6AC90C650649A59E7F8280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPew3Z_8ovhXNMU3y-9czRGZ5bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft
Manifest number: 04A9
Signing time: Sun 27 Jul 2025 03:00:49 +0000
Manifest this update: Sun 27 Jul 2025 03:00:49 +0000
Manifest next update: Mon 28 Jul 2025 03:00:49 +0000
Files and hashes: 1: XBo1pVVrARNWOJzVGLIS7aXEyvs.roa (hash: LHmi+bbPW6X6RSAyxvQlIttnolx/pGqPJGLDRqAXVIU=)
2: iPew3Z_8ovhXNMU3y-9czRGZ5bw.crl (hash: cjV4ojY078H5YGFJRtABoTdEoAFDb/JcbWwrKvAGrwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPew3Z_8ovhXNMU3y-9czRGZ5bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:6b:b7:9a:6a:c9:0c:65:06:49:a5:9e:7f:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f7b0dd9ffca2f85734c537cbef5ccd1199e5bc
Validity
Not Before: Jul 27 03:00:49 2025 GMT
Not After : Jul 28 03:00:49 2025 GMT
Subject: CN=809d83ba4d96e0e88a828a8a0b708cae54655bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:a1:b5:bf:c0:89:05:21:34:05:90:e7:b9:
e2:c4:dd:51:96:8b:ff:51:4e:5c:ac:66:fc:76:0d:
56:af:ed:90:5c:c9:02:77:97:f9:e0:22:e2:57:69:
e2:b8:cf:d2:9b:13:84:b3:cd:22:f1:ed:68:a5:b3:
cb:5c:df:6c:ba:ef:87:3a:7e:ee:e1:79:de:40:bd:
5c:86:37:27:02:2b:3e:f3:3d:02:74:50:9f:7b:e3:
3d:3f:46:ff:a1:8f:41:ee:6f:d1:57:e3:1a:a3:9e:
3d:eb:2f:a4:0d:0b:a2:77:fd:ba:6c:ef:3e:d8:57:
2e:eb:1d:ec:d4:73:24:82:dd:34:e1:b6:af:21:e8:
ab:5e:97:c0:23:eb:5a:22:98:54:ee:71:0b:10:df:
3f:a2:a5:d4:fd:9c:18:4b:9e:a1:6e:ec:8c:c6:03:
e6:73:f5:ae:ce:61:ef:09:64:0c:f0:9c:90:67:1b:
b1:e3:d0:97:75:97:05:3b:88:82:00:00:e9:e3:a1:
33:8d:84:3b:ea:ec:f7:e8:95:7e:a0:74:15:33:89:
df:15:3e:b7:81:22:c0:3b:80:88:c4:8e:0f:b8:fe:
0d:d6:26:c2:2a:3c:21:a4:24:5e:e7:a6:2e:e4:a2:
df:1c:20:ee:5c:49:52:34:25:c7:0a:53:02:d6:be:
6f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9D:83:BA:4D:96:E0:E8:8A:82:8A:8A:0B:70:8C:AE:54:65:5B:FB
X509v3 Authority Key Identifier:
keyid:88:F7:B0:DD:9F:FC:A2:F8:57:34:C5:37:CB:EF:5C:CD:11:99:E5:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPew3Z_8ovhXNMU3y-9czRGZ5bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dc8c02-4f6d-49f6-882c-136905e2c7c5/1/iPew3Z_8ovhXNMU3y-9czRGZ5bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:48:30:b8:2a:39:3b:33:66:89:85:63:46:6a:80:74:7f:e9:
90:b3:41:28:67:d9:bb:3e:d3:5b:55:f1:08:12:a4:cb:7a:33:
ac:8b:79:f0:67:7c:f3:90:d3:89:bd:17:68:c6:ab:00:88:d4:
7b:15:63:2f:07:70:52:ef:b2:14:71:38:90:ad:3f:75:ad:0e:
b3:b0:bd:af:f9:ed:87:1f:67:81:ba:43:3d:f5:3a:9b:a9:44:
d5:e1:29:b0:9e:0a:00:4b:04:b0:0f:d2:47:c3:29:88:e2:73:
ea:a0:ba:9e:ee:71:dc:64:cc:8f:9c:ec:f3:d2:8e:12:d5:29:
48:4f:93:d8:e3:b4:54:51:ae:d8:1a:7a:d5:24:57:41:ee:f7:
c9:8c:62:48:22:c3:e6:25:db:2d:8c:34:f5:93:5f:8b:29:42:
7c:74:47:a3:56:a8:78:6d:ce:ce:11:49:75:06:92:46:54:b7:
47:4f:49:50:df:e9:0f:4b:02:d8:57:db:13:99:44:82:f4:47:
69:77:09:d5:e0:2a:ba:49:02:b4:4e:1b:7f:38:15:08:24:89:
b4:5a:18:f5:28:03:00:ad:a6:e2:e1:84:c0:aa:19:16:ff:e6:
2b:30:b4:eb:96:8c:a5:70:27:85:39:7d:a7:0f:01:fe:3a:03:
3a:b7:67:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:35:29 2025 by rpki-client