Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
File: iXj_XaszxC2mX-Thq_vKTq-90qo.mft (raw, json)
Hash identifier: oxfWPNlCfUb5H7yFdXS89Jtr9br1THPOIe6UY9kM/y0=
Subject key identifier: BB:68:EE:1F:C6:8C:9A:93:CB:76:97:ED:4C:F8:D3:EB:CB:E8:1F:1A
Authority key identifier: 89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
Certificate issuer: /CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Certificate serial: 01984AAF5DD6267D7E9799636DFE17D06765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
Manifest number: 11AA
Signing time: Sun 27 Jul 2025 07:01:03 +0000
Manifest this update: Sun 27 Jul 2025 07:01:03 +0000
Manifest next update: Mon 28 Jul 2025 07:01:03 +0000
Files and hashes: 1: 5-1oK7ZffFqStfo7QWXqKcGuZfk.roa (hash: ae86GvhPxW1Ea0shedYB3VtmcIvsIfxJLLLA1E/5h/A=)
2: e4U8yl2fAVY2sT3p5fbr_erY7oA.roa (hash: 2KHYehyUkqT72mAQaz7HDc/red7uQn+krX6/aXcIZtE=)
3: iXj_XaszxC2mX-Thq_vKTq-90qo.crl (hash: PsDGi1SDytDnTG7U7IXo6WXISMzOCJdL2wVdxl0bkzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:5d:d6:26:7d:7e:97:99:63:6d:fe:17:d0:67:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8978ff5dab33c42da65fe4e1abfbca4eafbdd2aa
Validity
Not Before: Jul 27 07:01:03 2025 GMT
Not After : Jul 28 07:01:03 2025 GMT
Subject: CN=bb68ee1fc68c9a93cb7697ed4cf8d3ebcbe81f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:cf:91:8c:2b:3d:fa:f6:90:7d:75:1f:b0:
f5:b7:0a:f7:c7:25:a5:69:78:35:ec:0d:54:2c:0e:
b3:2b:be:23:2d:7a:aa:d7:d1:b2:7b:5f:1b:52:15:
cc:a5:48:d3:77:06:6c:c5:0f:50:c4:d2:73:2e:17:
74:f6:f2:b8:52:a7:32:25:2b:e3:70:f7:f3:88:50:
ff:81:e4:c5:79:fb:69:a4:bb:74:3a:a5:cb:b1:d2:
42:ac:84:7c:51:27:9d:f6:e3:1e:dd:b1:51:df:aa:
ef:6c:95:e7:13:00:f6:8a:ff:02:87:6f:9b:3c:e2:
a3:c8:1e:ff:ed:a9:34:fe:48:58:3c:d8:7a:a4:10:
b7:fd:e8:7e:a5:3f:7e:fd:22:56:35:2c:83:da:f9:
6e:61:0d:bc:26:70:a8:00:49:c0:3e:ab:ec:13:c3:
02:23:66:83:c8:64:d0:b4:e2:e8:95:28:9d:3d:30:
f4:e1:18:74:58:cf:29:e2:ec:ba:f1:71:3a:bb:d9:
7e:c7:c5:25:be:cf:d4:f4:f5:24:7b:8a:33:d4:c1:
5a:2e:55:c8:f4:6e:d2:cf:ac:bd:5e:ce:09:ef:c1:
b2:48:ff:4b:5a:e3:b8:fe:f8:19:1d:c8:f6:08:ad:
ba:07:0a:17:5e:4f:83:04:e9:b9:b3:c9:a6:96:d2:
5e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:68:EE:1F:C6:8C:9A:93:CB:76:97:ED:4C:F8:D3:EB:CB:E8:1F:1A
X509v3 Authority Key Identifier:
keyid:89:78:FF:5D:AB:33:C4:2D:A6:5F:E4:E1:AB:FB:CA:4E:AF:BD:D2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXj_XaszxC2mX-Thq_vKTq-90qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2e8347-d9c7-4e51-9b14-d02d96c36ca3/1/iXj_XaszxC2mX-Thq_vKTq-90qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:10:1f:68:61:2d:26:38:51:32:d9:4c:bd:58:e2:6c:7e:fa:
12:1b:7d:34:ca:8e:a6:05:49:1c:19:cd:55:69:51:5e:81:ab:
4f:84:eb:fb:89:5e:6b:b1:3d:2f:57:ca:86:49:1f:7f:c2:4f:
a7:3c:ac:01:12:de:7d:37:d9:6e:d7:f1:cb:d5:55:ab:1f:22:
6e:86:5f:0b:bf:0f:de:74:2b:f0:46:83:7e:08:b0:a8:0e:28:
e9:fc:54:43:e5:e6:af:d9:db:dd:90:56:fa:0f:a6:d2:11:72:
0c:4a:08:d9:3b:b8:94:ca:bd:53:52:ad:df:99:d0:97:dc:fd:
0e:f4:76:85:92:36:06:08:fe:75:21:94:14:f7:29:2c:97:f1:
86:9d:0e:7c:0c:63:b8:99:67:8f:06:28:19:59:c9:a0:62:0b:
0d:98:0e:41:2d:0d:58:e9:68:a5:bb:5a:95:47:f0:7d:63:65:
64:d5:c7:11:02:45:8f:dd:90:ef:68:9a:f2:c5:08:ce:65:b4:
b0:3d:54:4a:1b:ee:48:e8:cc:37:34:4c:83:00:06:6b:e5:b5:
7c:24:2c:92:29:40:2c:9e:aa:fc:9d:73:f1:5f:91:cb:f4:c0:
24:aa:da:6c:23:51:88:81:67:e5:1b:80:fd:3b:42:79:0b:19:
83:72:c2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:59:08 2025 by rpki-client