Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
File: iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft (raw, json)
Hash identifier: 5cmGRvhU3zWl2UvFkk2zJbcd1nYVwtmuUd8Q/zUIHI8=
Subject key identifier: E3:02:23:08:44:77:16:CD:E7:48:1F:0A:47:60:AC:19:BC:16:BE:D3
Authority key identifier: 88:5C:09:52:2F:63:5F:CA:FA:29:BC:EB:AC:72:C8:94:E4:FF:EE:D2
Certificate issuer: /CN=885c09522f635fcafa29bcebac72c894e4ffeed2
Certificate serial: 01985B350597F07BCC8A7E7EEC6A9CF2D491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFwJUi9jX8r6KbzrrHLIlOT_7tI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
Manifest number: BD
Signing time: Wed 30 Jul 2025 12:00:57 +0000
Manifest this update: Wed 30 Jul 2025 12:00:57 +0000
Manifest next update: Thu 31 Jul 2025 12:00:57 +0000
Files and hashes: 1: XcIL6Sukfm7k1AWtWl445xp4QV0.roa (hash: 4UDRmx72tIl2+y56n6Ye2uGR21iaVE2WkWXR6GxV+6Y=)
2: iFwJUi9jX8r6KbzrrHLIlOT_7tI.crl (hash: 0qdU9G10KIdwRjU6TAwcRs0UO72n8i5VkjfeA1e4D94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFwJUi9jX8r6KbzrrHLIlOT_7tI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5b:35:05:97:f0:7b:cc:8a:7e:7e:ec:6a:9c:f2:d4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885c09522f635fcafa29bcebac72c894e4ffeed2
Validity
Not Before: Jul 30 12:00:57 2025 GMT
Not After : Jul 31 12:00:57 2025 GMT
Subject: CN=e3022308447716cde7481f0a4760ac19bc16bed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:33:04:52:90:df:07:50:61:df:5d:32:e1:8d:
60:2c:15:a5:34:39:a9:cf:2c:5a:d2:67:c8:0b:46:
48:70:6f:f2:33:22:a1:e7:67:85:04:31:f5:27:c5:
59:d2:0d:2a:08:64:ee:18:5a:66:9e:85:4a:6f:6f:
3c:2b:bf:7f:51:67:cd:2c:2c:06:0f:39:3b:7a:78:
01:36:d3:05:ca:e1:d5:89:81:27:81:3d:88:3a:cc:
8c:f7:b0:10:a1:f6:84:90:28:08:bf:2c:61:a2:00:
e9:d1:05:7c:5e:5b:ba:2b:1d:cf:06:29:0f:ec:5b:
34:2b:16:2a:47:b9:91:09:bc:b9:32:c2:7c:c6:60:
9c:fb:5c:46:b6:9f:de:e8:8b:4d:bb:bd:33:f5:de:
9c:d3:50:7e:41:6c:b0:1f:6f:43:2e:fc:6f:0a:41:
24:b6:49:21:c5:90:44:41:7e:72:fc:cd:26:2a:bd:
75:a7:04:1a:b6:12:68:c6:62:a1:23:d9:c7:23:24:
8c:2a:e2:b6:5c:3c:b2:57:8a:82:5c:16:33:99:2b:
93:a5:94:01:a4:12:cf:bc:df:2f:cf:fe:7b:2c:7e:
77:d4:87:5e:21:b3:96:0a:11:a2:69:68:25:25:94:
2d:57:8b:66:f6:46:f1:00:79:cb:15:d9:25:b0:87:
4f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:02:23:08:44:77:16:CD:E7:48:1F:0A:47:60:AC:19:BC:16:BE:D3
X509v3 Authority Key Identifier:
keyid:88:5C:09:52:2F:63:5F:CA:FA:29:BC:EB:AC:72:C8:94:E4:FF:EE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFwJUi9jX8r6KbzrrHLIlOT_7tI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a02c08-f31b-48c5-ad47-f83b8d04087c/1/iFwJUi9jX8r6KbzrrHLIlOT_7tI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:26:9f:a6:a0:99:ac:6f:75:57:32:fc:0f:d3:7d:41:8d:14:
56:5a:ad:2c:13:f9:ae:d8:f1:ff:9e:1e:43:c2:c1:8f:1d:95:
08:9d:9e:18:a4:92:12:21:e0:a5:9c:29:83:f9:6b:47:58:eb:
d7:d5:55:4a:96:90:12:2d:f2:2c:85:08:e8:b1:e9:80:f8:18:
55:39:f0:fd:47:ee:2a:38:3f:90:b4:fb:5e:d5:7c:a0:57:b8:
71:75:df:bd:6b:c0:fc:9f:ad:2d:9a:b9:9b:47:e6:f7:64:0c:
bc:b6:de:9e:d1:0c:ae:3d:bd:21:ec:a8:4b:25:64:66:ac:a9:
cd:0c:ee:07:68:c9:42:55:15:00:55:2b:6f:2f:de:a9:10:26:
9e:23:91:e3:2f:c7:a8:29:1f:55:a4:9c:3c:a0:85:92:f0:e2:
94:e5:35:3b:64:49:c3:c9:46:e8:4b:a9:18:bb:9f:60:c5:93:
c1:42:f4:3f:cd:40:11:b2:98:66:60:81:00:f5:fa:5d:0e:6b:
e5:8e:f3:e2:f1:09:91:17:90:ef:67:08:24:93:6c:16:46:67:
de:57:d8:1e:db:74:8b:fa:c9:cf:4a:22:9e:bc:2e:08:38:90:
f0:d6:36:e4:6c:3d:5e:85:5c:18:7a:5e:43:f5:52:f7:9b:a6:
a1:08:53:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 22:10:09 2025 by rpki-client