Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.mft
File: iu8WONCRG6mIZOl5yEJrpPQaJy4.mft (raw, json)
Hash identifier: fXWV/5HnTSGWSpk+tow2PUcrrNcsgOiFxO1Vk4Gx0Xc=
Subject key identifier: 07:C2:8C:0A:D7:57:AE:FC:43:13:80:41:1A:2C:40:9A:A6:D6:B8:37
Authority key identifier: 8A:EF:16:38:D0:91:1B:A9:88:64:E9:79:C8:42:6B:A4:F4:1A:27:2E
Certificate issuer: /CN=8aef1638d0911ba98864e979c8426ba4f41a272e
Certificate serial: 01984B54F55513513DC748844A7E02E88BE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iu8WONCRG6mIZOl5yEJrpPQaJy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 10:01:55 +0000
Manifest this update: Sun 27 Jul 2025 10:01:55 +0000
Manifest next update: Mon 28 Jul 2025 10:01:55 +0000
Files and hashes: 1: if3KaihHpbg1Z08V6cXxVYQmFhk.roa (hash: 4GJMU1mopT3EhZuM0ayjHedY3bbBO8iZn11kZBRbuts=)
2: iu8WONCRG6mIZOl5yEJrpPQaJy4.crl (hash: 8YZynDynQhNqUy+QCBHZ5zh985B10MCSWxwDhRbTMTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iu8WONCRG6mIZOl5yEJrpPQaJy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:f5:55:13:51:3d:c7:48:84:4a:7e:02:e8:8b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aef1638d0911ba98864e979c8426ba4f41a272e
Validity
Not Before: Jul 27 10:01:55 2025 GMT
Not After : Jul 28 10:01:55 2025 GMT
Subject: CN=07c28c0ad757aefc431380411a2c409aa6d6b837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ed:f5:ec:10:1f:39:b9:af:29:76:4e:54:66:
5e:b8:6e:d6:9c:84:3e:84:dd:8e:fe:da:a7:85:34:
0e:26:7f:0d:f0:ce:05:2b:d2:88:c3:74:03:be:7e:
46:36:d7:96:ad:e4:c7:1c:6c:b1:bc:af:ff:62:6d:
17:12:7b:2b:b4:0e:fc:dd:74:d4:7b:81:21:11:73:
60:bb:37:99:3d:14:56:f0:40:96:83:26:cf:83:76:
6d:ec:63:8e:fc:4f:e3:5d:b9:f0:86:8d:93:cd:e8:
fd:9e:ab:7a:98:61:61:cc:f9:4b:97:e0:93:7f:70:
21:fd:6f:1c:1e:10:34:4e:62:a2:f7:9c:20:dc:c6:
3b:ed:fe:76:b2:21:cd:d2:f2:83:c2:61:57:28:5f:
b3:5a:59:74:03:91:5b:90:31:f2:ae:48:e8:80:9a:
22:23:8d:8f:6d:7d:80:d8:75:cd:fc:f2:7b:87:61:
5f:1b:fb:95:a2:7e:d9:82:75:94:90:d0:2a:09:cf:
7f:51:5b:4f:b0:f7:35:18:79:0a:57:f7:1f:7c:ef:
2c:db:84:01:77:15:50:be:7b:c1:95:2e:34:57:df:
e8:d6:a9:65:e3:c6:c1:87:f8:82:5c:cf:11:e7:e9:
7e:6e:96:ac:ec:1e:9b:e9:e9:ed:9d:e3:34:f2:16:
e4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C2:8C:0A:D7:57:AE:FC:43:13:80:41:1A:2C:40:9A:A6:D6:B8:37
X509v3 Authority Key Identifier:
keyid:8A:EF:16:38:D0:91:1B:A9:88:64:E9:79:C8:42:6B:A4:F4:1A:27:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iu8WONCRG6mIZOl5yEJrpPQaJy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:6f:cf:46:fa:aa:7d:7a:03:1e:2d:9c:6d:c1:b7:38:80:ab:
9b:6e:87:88:d6:94:8b:55:ba:9c:38:62:f7:a3:57:89:1c:43:
2b:7d:46:ea:9b:61:a3:92:7f:2f:2e:2e:c0:21:a4:c6:f5:ad:
e9:23:98:f6:da:65:54:d5:87:57:37:43:72:eb:56:a2:ac:a1:
97:04:4e:9d:76:35:e5:88:aa:9e:e7:08:b2:ed:65:67:7e:25:
92:90:4c:ee:03:09:db:79:f2:f7:59:88:ea:06:ce:e3:af:89:
2c:e0:67:5e:fa:db:30:a5:9a:89:a1:41:46:33:c8:7d:ca:13:
4f:ba:d4:04:5b:db:bf:48:79:98:58:cf:09:c5:fd:b2:9f:45:
60:d2:5f:07:f9:93:56:7e:83:00:eb:89:a6:ba:9b:48:fe:c4:
d1:47:43:c0:7e:e0:06:33:e7:81:8a:1d:d3:d8:e8:7d:d5:37:
fd:2c:e8:d8:e6:ae:b1:0a:1d:0b:a2:9f:40:bf:41:0d:ea:3d:
d9:bb:b8:a9:15:22:64:28:a8:1d:3d:63:0e:14:f4:c5:e3:aa:
c6:57:76:95:01:6e:1d:54:6b:6c:65:53:e2:51:59:64:04:f7:
25:4a:13:7f:a0:1a:30:5b:5d:6e:d6:2c:39:7e:c5:8d:57:6c:
ed:6d:b8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:16:41 2025 by rpki-client