Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
File: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft (raw, json)
Hash identifier: BBU0GlhzxRze5+gTiznZIqcDZRN7e2Z5SlqB2ev2hXI=
Subject key identifier: 3B:09:CA:F9:50:7B:BC:D9:CB:72:21:85:6C:F0:D8:BA:5D:58:39:2E
Authority key identifier: 88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
Certificate issuer: /CN=88e719f426793b1e9063771460abd311a3dff116
Certificate serial: 01984BC221FF4EA9E4B3061F2D3A41223B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 12:01:10 +0000
Manifest this update: Sun 27 Jul 2025 12:01:10 +0000
Manifest next update: Mon 28 Jul 2025 12:01:10 +0000
Files and hashes: 1: 2JOqb_FcM3JCaikWzh1QzLM3NNs.roa (hash: isQtSQoVI4VnIJhK4p6fvX5w7lFtKPVqkwJW/rfKCwA=)
2: KkqNZ54Qewj5mCBLo3rtzCSFt7g.roa (hash: Rbv/KvRW9C13yYdCBXyUxqLUAuWNRC3szrxFy+NiiA8=)
3: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl (hash: aHHt7IrLqLaEQJGEQMJGkq5Gn92WNADRNiOQl943spc=)
4: soZKqGzihNQNfxzcrDh_Qn-1Tnw.roa (hash: +H581vOHkrLuu+UEmJR0K8H+S0wh9yACSCN32HI4jio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c2:21:ff:4e:a9:e4:b3:06:1f:2d:3a:41:22:3b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e719f426793b1e9063771460abd311a3dff116
Validity
Not Before: Jul 27 12:01:10 2025 GMT
Not After : Jul 28 12:01:10 2025 GMT
Subject: CN=3b09caf9507bbcd9cb7221856cf0d8ba5d58392e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fa:e6:a9:76:22:6a:d4:e1:11:67:ee:24:db:
1c:70:44:fe:ed:de:d5:02:b5:d2:ca:47:41:b6:2d:
4b:ec:16:ce:b6:4d:94:5d:83:45:60:e4:9b:67:66:
be:4f:34:81:8b:2d:82:6a:61:23:3d:2c:fb:dd:4c:
3f:15:cc:7e:ce:3a:f0:e0:56:c3:eb:4d:43:fe:aa:
af:09:04:cb:26:f6:7e:9e:5c:21:c4:b8:3c:ea:96:
f3:92:1c:32:32:05:b3:c0:cd:52:bf:cc:99:aa:55:
01:49:73:04:3e:70:0a:19:ed:72:d8:df:c2:58:40:
46:c1:be:c5:05:5b:27:eb:17:43:f3:71:03:b7:3e:
e9:28:46:92:2e:59:85:ad:83:47:c9:33:cb:1f:19:
26:6a:21:f5:6d:dc:a8:c2:0d:8e:8f:38:b1:de:d3:
24:36:a9:1e:5b:a3:52:ce:2a:1d:10:d3:53:1c:ba:
b1:b3:ac:8d:67:90:a4:7a:7b:52:d7:11:e1:08:0c:
db:0c:f3:ae:9d:a0:c6:cf:87:51:43:c6:0e:0d:30:
c5:cf:d2:81:ad:68:a2:bb:00:dd:5a:8c:4b:b9:2a:
f0:1d:8a:72:e9:07:31:6f:80:4f:32:c6:73:5d:08:
7a:23:31:dc:b9:86:8a:d3:3f:ea:af:86:63:42:dd:
9b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:09:CA:F9:50:7B:BC:D9:CB:72:21:85:6C:F0:D8:BA:5D:58:39:2E
X509v3 Authority Key Identifier:
keyid:88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:68:35:fb:58:38:4d:91:67:41:58:a2:32:a1:41:52:04:09:
94:fb:4d:fb:e4:c4:c4:86:54:e6:8e:83:18:f9:a6:ad:e2:5e:
38:bc:74:16:1f:55:c2:5c:c4:8d:a8:d2:e1:3a:b0:e8:06:48:
b1:1a:51:a5:ee:69:2d:bb:e2:7e:a2:0c:ca:71:96:a7:cc:66:
30:ce:ee:09:e1:aa:00:cb:67:01:7f:8d:55:cd:fd:c3:ed:bf:
df:47:dc:36:bf:8b:59:e0:98:38:4a:e8:1b:8d:42:0c:46:02:
a2:b1:31:43:f1:d7:33:be:c8:be:63:d1:91:26:2f:ba:ef:08:
ff:73:dd:a6:54:33:ee:29:9b:15:d7:28:78:9a:71:8d:a4:f9:
bc:98:d1:24:bb:9c:8c:a9:ba:e9:ca:fe:e9:30:b0:85:f3:dc:
fa:1b:65:25:ae:61:4a:03:bb:d8:8a:f4:1a:97:06:d1:08:5e:
27:a9:b2:ce:fb:82:55:23:0d:23:d3:e7:75:09:e4:88:0e:d6:
57:99:53:56:92:41:7c:c4:06:39:de:c2:ea:d4:66:02:61:c9:
23:7f:eb:44:b9:ba:86:0d:6b:d8:e2:ed:14:36:13:3e:04:c1:
46:98:e2:ed:5f:e6:bb:4c:1c:07:60:27:97:fa:95:b6:cc:db:
2d:38:90:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 22:01:04 2025 by rpki-client