Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
File: iq94tpd0pVUH3qv4xMlpQunvDSA.mft (raw, json)
Hash identifier: Wg5Ev8RbAryNQxLx3Yh1haA9vbdwdT2/Vityk4xjd3E=
Subject key identifier: 5A:A7:89:C6:9E:35:4B:62:36:82:F8:0F:9F:D5:26:41:18:D3:F7:CC
Authority key identifier: 8A:AF:78:B6:97:74:A5:55:07:DE:AB:F8:C4:C9:69:42:E9:EF:0D:20
Certificate issuer: /CN=8aaf78b69774a55507deabf8c4c96942e9ef0d20
Certificate serial: 01985456E0E1FCEC0CDFDDECC35DD551704A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
Manifest number: 0D02
Signing time: Tue 29 Jul 2025 04:00:36 +0000
Manifest this update: Tue 29 Jul 2025 04:00:36 +0000
Manifest next update: Wed 30 Jul 2025 04:00:36 +0000
Files and hashes: 1: JQCJu_zj_dBb25hVe1CPLuILo-c.roa (hash: ppq/kkdZOhkWPFmrOFoKNIk30mkp2cJ+7oYbrYYHQUY=)
2: iq94tpd0pVUH3qv4xMlpQunvDSA.crl (hash: zM99vtpEHRluZoCffmH+TYsMSS8X3Q3OKAKS+5k8sNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:56:e0:e1:fc:ec:0c:df:dd:ec:c3:5d:d5:51:70:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aaf78b69774a55507deabf8c4c96942e9ef0d20
Validity
Not Before: Jul 29 04:00:36 2025 GMT
Not After : Jul 30 04:00:36 2025 GMT
Subject: CN=5aa789c69e354b623682f80f9fd5264118d3f7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6c:4a:79:8b:ef:2e:01:c9:35:41:a4:5d:55:
e7:d3:89:8d:52:7d:d6:ad:6c:92:69:22:ad:19:91:
a9:be:d1:8e:2f:7b:db:55:85:d0:77:9d:31:ac:95:
0d:8f:ac:97:eb:63:26:45:44:be:d3:80:95:51:fa:
16:c5:2a:42:bf:22:56:09:6f:3f:50:63:27:01:f6:
f7:4e:5c:21:5f:4b:0d:47:74:25:37:e1:ba:0a:79:
f3:70:90:fa:31:fd:05:30:51:4d:0f:6d:20:b3:11:
e7:c8:8a:48:fe:c0:b5:4e:a5:47:1e:57:92:8b:67:
c6:1f:da:6a:e9:4d:cb:7c:29:50:9f:da:2c:1f:dd:
e2:e4:2f:8d:69:31:59:d2:8e:e3:a3:f8:35:d3:9b:
9a:d5:ac:fe:26:45:ca:95:60:1d:30:91:29:e3:b2:
ea:07:f0:d7:e7:ce:b9:73:5b:d5:bf:f8:5c:7f:bb:
ad:ff:e1:e8:18:04:cb:bb:dc:42:19:4c:64:a1:03:
79:43:05:c3:f1:37:10:65:5e:f6:ac:47:25:ad:3f:
95:6e:2a:b3:7e:50:54:e9:d4:04:91:3d:20:b2:b5:
1c:5d:c1:a9:3d:d8:8b:03:cf:e9:6c:99:4d:1f:4f:
db:c8:e0:9c:f8:98:65:7e:87:de:49:ad:e9:e1:a6:
c9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A7:89:C6:9E:35:4B:62:36:82:F8:0F:9F:D5:26:41:18:D3:F7:CC
X509v3 Authority Key Identifier:
keyid:8A:AF:78:B6:97:74:A5:55:07:DE:AB:F8:C4:C9:69:42:E9:EF:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq94tpd0pVUH3qv4xMlpQunvDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/797390-81d4-4c5d-ab71-7088568c51c0/1/iq94tpd0pVUH3qv4xMlpQunvDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1c:73:6f:d2:ee:30:b5:80:2d:19:b5:dd:9b:12:2d:9c:2c:
8e:52:13:69:c8:94:f3:77:ff:e0:f0:be:74:17:21:d6:54:50:
ad:9b:76:27:2d:bf:1b:23:1a:cb:66:87:c2:11:e1:50:cf:0e:
f7:ed:30:b6:09:b9:bb:ac:1b:4b:4b:4c:a3:e7:f9:00:f3:85:
ad:d1:24:96:7b:56:38:7a:35:aa:f1:5a:b6:eb:d8:5f:db:b7:
c9:26:2c:5b:7f:e6:8c:86:b4:7d:54:a0:7d:4c:72:23:09:bf:
79:d3:0c:df:0e:e4:a8:88:ab:65:6e:0f:cc:e9:8a:85:03:ed:
a9:c5:2d:9c:8b:90:b2:3d:9a:dc:8e:15:fb:ca:3e:2f:82:d4:
a8:13:6d:ae:4d:d4:a0:f5:c9:7c:1a:0c:a1:f7:41:84:99:b7:
ff:d3:0b:17:e5:33:f8:dc:6a:eb:72:5d:e0:ce:c8:0f:39:24:
f7:d7:c4:8a:6c:c5:4f:44:c9:40:27:3b:6e:a1:d8:06:da:7a:
01:c9:21:37:df:c1:a7:75:04:e0:17:17:7b:01:f3:2b:2f:7d:
e1:ba:ba:2f:a6:d7:99:e8:9b:5e:c4:93:4f:c3:93:e7:df:3c:
d2:ce:9f:59:5c:0d:da:6a:a6:5b:d9:b2:5c:e0:28:a7:f7:26:
d3:a5:15:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:45:30 2025 by rpki-client