Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
File: iZJ3h0cqfL3Zff209Tt077O7vFs.mft (raw, json)
Hash identifier: XMg0fd8KDQbAl5on8rAi82KLBLC13YhHxh8DMr8ln8M=
Subject key identifier: FC:0E:1F:BC:9B:F5:36:85:67:D1:9B:06:2F:17:6E:5F:03:33:4A:FD
Authority key identifier: 89:92:77:87:47:2A:7C:BD:D9:7D:FD:B4:F5:3B:74:EF:B3:BB:BC:5B
Certificate issuer: /CN=89927787472a7cbdd97dfdb4f53b74efb3bbbc5b
Certificate serial: 01984AAEEC96CB3CDC4199AB38F0DEFF17CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZJ3h0cqfL3Zff209Tt077O7vFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
Manifest number: 1132
Signing time: Sun 27 Jul 2025 07:00:34 +0000
Manifest this update: Sun 27 Jul 2025 07:00:34 +0000
Manifest next update: Mon 28 Jul 2025 07:00:34 +0000
Files and hashes: 1: iZJ3h0cqfL3Zff209Tt077O7vFs.crl (hash: r2TfQH57IcJWYsbjDqZICZrcKfquEG86S3IovDRMmKI=)
2: k_0z9yImMkkx7Q7hZaLKVoTRO74.roa (hash: bY1XGYbefYoSOVyj59OiTxL9N9Rlyyr/sbaOhEye3EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iZJ3h0cqfL3Zff209Tt077O7vFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:ec:96:cb:3c:dc:41:99:ab:38:f0:de:ff:17:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89927787472a7cbdd97dfdb4f53b74efb3bbbc5b
Validity
Not Before: Jul 27 07:00:34 2025 GMT
Not After : Jul 28 07:00:34 2025 GMT
Subject: CN=fc0e1fbc9bf5368567d19b062f176e5f03334afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ec:ea:25:27:b5:e6:a6:ee:4a:30:bf:8a:31:
5d:c1:ff:2b:be:2a:0a:02:51:b1:00:8c:45:ac:ee:
35:34:f0:04:4d:76:bb:9f:c4:67:3e:c9:0f:b2:1b:
1e:02:4b:28:bd:da:18:e8:cc:00:90:f9:ab:61:2a:
fa:76:6d:af:f3:15:b5:4f:2f:69:0b:0f:aa:ff:13:
03:ba:77:8f:ba:74:04:3d:4d:34:8c:14:fb:57:7c:
26:b7:50:db:fa:63:bd:00:59:f6:39:37:9f:cf:02:
b5:61:d1:6d:ea:59:2b:f3:0d:02:fc:2e:48:4b:ac:
bd:f9:c1:e7:70:5a:0d:45:b2:25:b2:23:48:74:33:
a1:fc:27:d1:9b:ec:84:0c:3a:6f:47:7d:bd:91:e4:
63:c6:62:72:17:e8:c0:d2:0b:99:d0:37:79:e9:57:
19:54:13:b3:34:83:53:cf:a9:0c:0f:19:fa:ee:33:
c6:79:53:74:4f:68:3a:7a:d7:ee:a5:1b:42:43:41:
57:ab:f2:b7:21:44:06:53:43:6f:94:68:37:da:94:
f2:dd:86:1a:9a:6f:16:58:ec:a8:73:1e:b0:67:5f:
f3:4b:0f:9b:86:5d:07:c6:a7:39:39:70:05:06:e6:
0b:f4:3d:23:e3:b2:66:5c:ec:73:99:98:bc:fd:d4:
e7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0E:1F:BC:9B:F5:36:85:67:D1:9B:06:2F:17:6E:5F:03:33:4A:FD
X509v3 Authority Key Identifier:
keyid:89:92:77:87:47:2A:7C:BD:D9:7D:FD:B4:F5:3B:74:EF:B3:BB:BC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJ3h0cqfL3Zff209Tt077O7vFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:88:14:3d:c8:31:e4:c5:f8:af:ab:5f:82:e3:b8:d5:8d:73:
23:0b:35:a7:b7:79:71:32:54:e9:ae:cc:cd:b2:6e:71:1b:b3:
40:85:8e:d1:20:d5:f6:8f:46:cb:d7:b8:17:a1:f7:0c:e0:1d:
af:d6:1e:11:33:b8:42:ad:26:8c:ad:13:52:cc:90:34:36:1e:
1b:03:21:3b:e2:44:7e:8b:7e:55:4d:fa:b5:ee:74:e0:bf:51:
c4:d0:14:95:dd:e7:60:19:f8:3f:b9:dc:0e:d7:e7:89:f7:cc:
31:da:23:e7:00:69:e7:7a:d5:08:e6:1f:8f:0f:48:a5:cf:0b:
e0:38:49:d9:fd:a7:f6:d1:24:10:1f:69:27:6d:75:a7:8b:7f:
63:43:6c:a1:8f:4c:92:41:8d:da:0b:89:59:7f:80:3c:5c:2c:
d0:91:d6:86:d9:3f:e5:fe:e6:7f:ba:d7:4f:5c:92:70:0f:ea:
2f:49:c1:0a:e4:ed:a3:4b:b7:a3:5a:99:45:50:0e:6e:4d:f9:
3b:e3:eb:4c:b1:46:b2:7d:17:d1:e5:63:ef:fe:6c:73:37:07:
ac:77:66:39:47:2c:d2:71:6e:79:89:d7:3f:49:11:0c:17:a4:
e0:ca:47:c0:bb:4b:87:2c:e1:4f:6c:60:11:5b:0f:c4:e0:55:
fc:82:81:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:56:08 2025 by rpki-client