Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
File: iNEpp8ePtm0Hc7yZAINX5QfB574.mft (raw, json)
Hash identifier: 1EW1ZaOut3Rw99qPytMQU/lcw3+VCmzAI8Ng0xwP0zM=
Subject key identifier: 7D:36:A0:C8:21:17:C3:56:92:F7:E7:4B:94:B8:7C:62:33:53:29:FD
Authority key identifier: 88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
Certificate issuer: /CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Certificate serial: 0198530CE493B1A7FF2B06C0D3D1706E2D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
Manifest number: 0737
Signing time: Mon 28 Jul 2025 22:00:10 +0000
Manifest this update: Mon 28 Jul 2025 22:00:10 +0000
Manifest next update: Tue 29 Jul 2025 22:00:10 +0000
Files and hashes: 1: 76xLkfM6kYxOK1NXh9OOS2MHsHA.roa (hash: 6Sbux0XZ8H/iAJjFbORSyS+kiaCneStSNPq6dnkA+DU=)
2: iNEpp8ePtm0Hc7yZAINX5QfB574.crl (hash: eXJxYRoF9DaIR5+Whr0GpiYVZlRs5mjPgimKvhHvYKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0c:e4:93:b1:a7:ff:2b:06:c0:d3:d1:70:6e:2d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Validity
Not Before: Jul 28 22:00:10 2025 GMT
Not After : Jul 29 22:00:10 2025 GMT
Subject: CN=7d36a0c82117c35692f7e74b94b87c62335329fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1c:3c:45:03:a5:a1:85:a9:7e:1c:01:b0:fd:
f3:99:91:d8:ae:1b:c7:ef:fe:a2:04:7c:4a:7f:a8:
d1:8d:46:5f:c6:fe:53:90:05:38:fb:8c:b2:64:02:
3d:01:cf:51:95:ca:ae:d7:a3:1d:84:70:0e:02:6b:
29:2d:e3:10:4d:f8:b1:98:77:40:41:9a:e4:b9:4e:
6f:fe:3f:b0:0c:90:8b:7f:85:05:e5:0f:d0:e4:9f:
57:88:ff:2c:6e:73:27:79:2c:77:03:40:f5:38:85:
95:11:4e:06:fd:91:09:b9:66:21:e9:d8:08:da:cc:
af:e1:0e:c8:34:a9:69:ff:85:2a:22:49:09:0b:6b:
c8:b0:d5:22:85:dd:2b:8e:3c:67:92:2f:0b:e8:be:
db:1a:38:3b:ce:4f:c0:6e:b7:42:a9:23:1e:0d:83:
c1:ef:12:09:4a:23:25:af:7a:09:44:af:72:8a:97:
f2:fa:75:3a:54:f3:15:90:01:60:73:4e:dc:cf:77:
0c:79:50:d5:0e:69:7f:96:3a:a3:46:2b:94:ff:80:
ff:27:3d:16:3c:bf:c8:b8:44:f8:1d:c6:59:c4:03:
53:cb:1b:bd:c9:4b:64:6c:bb:f4:4e:b9:d5:54:34:
b9:38:e7:11:06:ea:0a:d1:ef:bc:2d:aa:2a:01:4b:
7c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:36:A0:C8:21:17:C3:56:92:F7:E7:4B:94:B8:7C:62:33:53:29:FD
X509v3 Authority Key Identifier:
keyid:88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:13:86:ca:3b:38:75:5a:65:e2:b3:d5:31:3a:36:c1:09:e1:
8e:ed:5f:8f:5c:3d:35:ab:ac:86:62:d3:07:8d:53:f4:4b:88:
3b:2d:57:3e:c0:6e:d3:13:51:91:5b:82:b4:41:20:17:b8:a2:
21:75:b7:c6:95:02:61:06:c4:86:bb:4e:35:f3:cd:2c:d4:99:
90:6a:68:c5:2e:07:6f:0a:0a:e6:c2:69:a7:2e:f8:89:38:bf:
33:56:f7:73:8c:c8:57:ca:8d:57:66:c6:b1:6c:fc:f5:e3:04:
9a:67:5f:75:63:7d:a8:05:13:a5:d9:1e:cd:5b:c3:15:fc:1a:
ae:04:a2:67:b5:24:5b:11:76:44:a6:eb:f7:7e:d4:32:f9:af:
8f:34:9d:01:a4:73:31:e3:e9:ea:0f:61:76:f6:df:82:53:28:
07:b1:77:ce:ce:ff:96:4a:3b:ce:29:77:d2:c1:f4:90:c6:91:
1a:c9:c9:8d:21:f3:19:e9:48:b4:17:87:30:87:04:d4:a9:7a:
cc:6c:57:ed:ad:f3:1b:ba:a6:70:57:10:48:09:60:de:d1:a0:
9d:55:08:e2:57:01:94:35:6e:2f:55:57:14:4d:a3:a4:65:66:
81:29:c0:ab:1e:15:19:bf:9f:b0:34:ef:83:97:c8:45:45:48:
40:22:fe:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 06:20:44 2025 by rpki-client