Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
File: iBD8MZigq5lkeHfb5XJeBc7gE_A.mft (raw, json)
Hash identifier: grzV4FifU49uZkaYVHMFD+b/es8E7JIAwuOVIoJ7Abo=
Subject key identifier: 55:EF:3E:8E:D3:FC:29:C4:A6:D2:EE:2F:4F:2C:8B:93:DB:F8:7C:E7
Authority key identifier: 88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
Certificate issuer: /CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Certificate serial: 01984A416DDE05A70354246F8BD23A6D4D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
Manifest number: 0E74
Signing time: Sun 27 Jul 2025 05:00:58 +0000
Manifest this update: Sun 27 Jul 2025 05:00:58 +0000
Manifest next update: Mon 28 Jul 2025 05:00:58 +0000
Files and hashes: 1: hGQAPrEg70xi3dTAsr6AkflPwzQ.roa (hash: fq94rKVVa6d3kPByOte4hBdKvb2vGf30OOEdIeQW7uc=)
2: iBD8MZigq5lkeHfb5XJeBc7gE_A.crl (hash: SQQrPqE1GMq9x/Jlciy0Y9BKP84UVx2AIZhucqQON4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:6d:de:05:a7:03:54:24:6f:8b:d2:3a:6d:4d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Validity
Not Before: Jul 27 05:00:58 2025 GMT
Not After : Jul 28 05:00:58 2025 GMT
Subject: CN=55ef3e8ed3fc29c4a6d2ee2f4f2c8b93dbf87ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b4:f9:a2:ce:9d:c8:7e:dc:df:78:21:42:de:
6f:38:a0:2a:37:18:95:af:ac:d4:f7:3f:4e:c9:71:
52:78:53:40:04:07:8b:77:ff:45:cf:5b:d3:5b:2a:
16:f6:bb:0d:6a:c8:5d:f5:7c:c1:ba:eb:2a:6c:f8:
aa:af:6e:8c:71:0a:81:0b:4e:38:03:12:ed:7f:85:
24:c0:aa:07:e5:b5:2c:02:31:17:c8:07:65:0e:be:
34:8f:33:71:f8:64:0d:91:1d:4f:37:64:e5:72:52:
91:0f:88:7f:94:40:02:2c:d4:13:82:14:b0:1b:9b:
64:d6:34:89:a6:77:5c:c9:8a:cf:b7:9e:2b:d1:c8:
60:4d:f0:36:9c:d3:0e:6b:93:db:45:0d:d8:a1:d1:
f5:51:fc:a9:c7:51:cb:ea:51:9e:01:ad:2c:d3:13:
e2:59:00:37:d3:d8:8f:88:52:68:dd:d3:df:f9:e7:
24:98:cf:dd:f9:a0:a3:97:37:83:ef:68:79:3c:43:
a0:79:57:c9:b5:8f:64:87:98:ff:f0:8b:6d:4c:50:
9d:b1:73:b7:f5:98:65:4c:33:fc:f4:34:e2:4d:bf:
da:3b:a3:c0:f4:c3:a4:e4:70:3a:fe:24:46:8a:60:
af:78:09:52:5f:da:f7:25:41:ed:04:8c:cb:cb:d1:
16:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EF:3E:8E:D3:FC:29:C4:A6:D2:EE:2F:4F:2C:8B:93:DB:F8:7C:E7
X509v3 Authority Key Identifier:
keyid:88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d4:1c:eb:50:04:33:ae:82:ad:25:3e:49:fa:da:80:56:03:
0a:0a:74:50:1f:bc:25:12:67:5d:34:ca:2f:72:59:33:f0:b9:
d9:3c:9f:df:f0:3a:5c:fb:8a:fb:c1:db:14:3b:89:4a:7a:ca:
97:39:b2:21:92:0d:f9:9d:24:0d:70:42:1e:8e:a1:b6:4c:d8:
8a:bb:17:e8:cf:e7:4f:01:60:6b:74:8a:58:7e:91:83:5d:f5:
f5:e0:8c:3b:ce:8d:34:35:7c:07:9b:72:3d:06:a2:99:66:8b:
2f:c6:27:8b:92:bc:68:9a:01:12:0e:a7:f2:40:85:f6:b5:94:
36:c4:8c:60:94:39:de:56:e2:4b:ab:4d:32:65:6e:e9:9a:8d:
8b:a4:41:7a:d6:a9:a7:88:7d:39:2f:b3:c4:86:e4:ac:40:64:
c3:86:a9:c6:eb:aa:47:c5:0b:ef:c3:8e:32:a4:8c:b2:36:bc:
70:79:dd:d1:fa:f7:9a:88:0a:23:52:ea:67:0b:6b:63:0c:8f:
da:9f:28:9a:4c:f9:93:f4:af:63:ff:c9:a8:97:f5:8f:4b:14:
4d:90:e1:23:8c:79:12:b7:c9:57:f4:ad:1f:83:29:2d:6e:34:
04:54:32:85:3e:8b:6b:6e:16:72:74:29:ae:10:e6:e5:ef:dc:
45:be:25:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:15:55 2025 by rpki-client