Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
File: iH0wEZNRUA8lmlfi_2hQeX0bTho.mft (raw, json)
Hash identifier: 1dW9g16mWJVRzo7aPm3RGfb617yHW+H09nI1sJH+Ph8=
Subject key identifier: DC:CD:F9:30:95:D4:A4:94:F5:37:20:6F:21:2E:59:9C:CA:BD:C9:6B
Authority key identifier: 88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
Certificate issuer: /CN=887d30119351500f259a57e2ff6850797d1b4e1a
Certificate serial: 01984B553902ABBD0227F670B42D962984A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 10:02:12 +0000
Manifest this update: Sun 27 Jul 2025 10:02:12 +0000
Manifest next update: Mon 28 Jul 2025 10:02:12 +0000
Files and hashes: 1: iH0wEZNRUA8lmlfi_2hQeX0bTho.crl (hash: 3IoXxFYncKFEZfr08BECm/Te92VlTY2CoIyykrG0mgE=)
2: qABhsOLWjcCV2-NCnGtwC8QlYyU.roa (hash: md9z/89P3sn3nXo5h/larqHDUL4eXCPfvLewxfl/iTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:39:02:ab:bd:02:27:f6:70:b4:2d:96:29:84:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887d30119351500f259a57e2ff6850797d1b4e1a
Validity
Not Before: Jul 27 10:02:12 2025 GMT
Not After : Jul 28 10:02:12 2025 GMT
Subject: CN=dccdf93095d4a494f537206f212e599ccabdc96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:24:7e:34:ff:9f:22:6c:a9:8c:d1:c7:35:14:
00:d5:fe:6a:d3:0c:9f:f6:89:0e:b1:05:46:bc:93:
8b:94:39:60:e8:20:72:9b:bd:fd:50:88:58:62:8d:
01:15:c1:de:3d:73:8d:f8:32:79:e7:a6:dd:f8:61:
5f:20:ae:71:db:ba:36:31:12:01:b9:8b:5a:3c:7c:
d0:73:e6:a8:a4:9c:d5:3a:0b:86:65:37:64:09:d9:
6e:7f:67:f7:eb:af:47:72:b3:38:70:0e:58:7b:95:
bf:32:44:1b:85:84:78:9e:31:40:a8:b6:a6:ff:6f:
82:34:93:25:9d:95:d4:a0:de:d7:a4:1a:ce:80:21:
60:10:15:7c:2c:e4:60:96:a2:8d:fd:3d:47:1e:16:
3a:af:76:03:65:fa:1d:29:70:13:45:67:d8:3a:79:
75:a7:a7:49:b1:9b:4e:03:ea:de:2e:a4:22:a9:7e:
15:37:99:b1:c0:9d:c0:7d:2f:d8:77:d0:25:da:50:
d0:ec:8a:a9:92:c3:73:14:2a:49:af:39:61:61:07:
9d:7e:c9:42:1b:80:5c:5e:0b:d3:f0:eb:75:4c:ab:
60:94:d9:03:7c:b9:e6:7a:b8:9f:56:7b:c6:b6:8b:
f7:3a:ac:d8:17:e2:0a:0c:20:29:ca:05:0d:e4:00:
75:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CD:F9:30:95:D4:A4:94:F5:37:20:6F:21:2E:59:9C:CA:BD:C9:6B
X509v3 Authority Key Identifier:
keyid:88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2b:6b:5b:1f:7c:6a:3e:ef:bd:63:89:23:eb:33:96:81:42:
fd:d3:c4:19:b1:38:6a:6a:58:24:8a:3d:b0:ac:f1:fc:92:60:
fb:47:ab:01:42:9a:4e:dc:77:34:e2:f3:bb:86:00:65:b0:30:
ab:0f:c9:4a:e9:ca:28:67:f5:e9:09:72:ed:95:65:b9:3e:b6:
fe:37:95:b6:55:11:35:c5:d4:bd:75:46:c4:d6:34:fe:29:c0:
e6:d7:8f:2b:96:bc:22:19:8f:16:65:3a:11:75:2e:79:c8:d6:
6c:cc:d8:17:31:0f:84:66:5f:dd:fb:a8:4a:92:8a:90:d2:32:
b3:af:85:7d:85:75:59:50:ec:3f:35:7f:4e:18:73:6b:50:c0:
63:df:1a:cd:5e:90:4d:50:c6:a1:e8:91:83:a4:32:9f:a8:2c:
ef:d5:d1:09:97:16:2a:b0:73:b4:5d:3f:27:1c:10:b3:4b:ef:
ef:98:56:f2:a2:a3:c9:9e:a4:ab:6b:e5:7f:d7:e0:18:3d:78:
7e:d3:80:54:5e:8a:a1:1a:98:6c:1e:d1:42:9b:48:10:8d:3a:
0b:44:f4:c8:f4:61:c9:fb:7e:42:0a:3d:98:72:d2:f8:68:5a:
85:0e:5e:33:88:04:3f:28:64:cb:84:13:02:27:74:f6:2c:d3:
fe:e6:01:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:01:33 2025 by rpki-client