Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
File: iA2KtqoscvB5dV92zwEgql3dx98.mft (raw, json)
Hash identifier: XAcwqpL5OiWWBLyTOFTrOAbzIJPgi+nPD7VT0W4eRcc=
Subject key identifier: 34:2C:2A:6B:49:D5:E9:E3:F9:68:0F:8D:3A:88:29:01:F0:0C:73:6E
Authority key identifier: 88:0D:8A:B6:AA:2C:72:F0:79:75:5F:76:CF:01:20:AA:5D:DD:C7:DF
Certificate issuer: /CN=880d8ab6aa2c72f079755f76cf0120aa5dddc7df
Certificate serial: 01984DE6A9F39D597E4715E4B3FCBBD2608C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
Manifest number: 0DE4
Signing time: Sun 27 Jul 2025 22:00:19 +0000
Manifest this update: Sun 27 Jul 2025 22:00:19 +0000
Manifest next update: Mon 28 Jul 2025 22:00:19 +0000
Files and hashes: 1: hi3FrnF-3jLI3lIxcnrMYtC-4ow.roa (hash: Hon+3addqQMzwZi2hE3IgLssZw3bA0MMDqOLsP3ZK0E=)
2: iA2KtqoscvB5dV92zwEgql3dx98.crl (hash: 9U1XcR9sQxbX1a42GXgCXzMI0ExbQeMJQBGZR03a7T0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:e6:a9:f3:9d:59:7e:47:15:e4:b3:fc:bb:d2:60:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=880d8ab6aa2c72f079755f76cf0120aa5dddc7df
Validity
Not Before: Jul 27 22:00:19 2025 GMT
Not After : Jul 28 22:00:19 2025 GMT
Subject: CN=342c2a6b49d5e9e3f9680f8d3a882901f00c736e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c2:c1:b5:bf:3f:be:4d:73:a3:b6:a9:29:ba:
33:63:26:c2:58:04:9f:cc:8b:88:8a:26:33:d9:db:
e5:8f:01:a7:55:d0:ef:57:c4:a5:f0:f4:3f:16:85:
45:bb:44:4c:99:f4:a9:17:34:f1:c8:56:3e:f6:96:
b5:64:6c:fd:13:20:48:0d:47:ea:17:48:2b:d4:1c:
fc:09:32:d8:44:3e:a8:59:80:a6:5d:1e:00:52:e7:
e4:52:f8:c8:7e:02:87:6d:c4:ca:6e:6e:b1:39:b1:
57:a5:9c:4b:03:b2:34:aa:0f:75:9b:4e:4a:ec:0c:
35:67:de:df:df:62:2c:2f:3f:1a:bb:e0:5c:d6:08:
39:08:ae:5d:04:4f:f0:ea:7f:e5:65:b7:e0:07:48:
3a:b1:09:7f:ab:16:61:b1:fa:64:d0:6b:0f:cb:58:
62:d6:65:bd:cb:75:ff:6e:00:e2:69:f6:12:14:64:
91:ad:b7:4f:f7:02:0b:d4:de:23:97:fd:8a:3f:98:
d7:d6:20:9e:9c:c4:75:7e:66:75:91:8c:54:53:57:
07:9f:51:ca:02:9f:d6:ab:cc:d4:aa:a4:3d:83:52:
cf:75:b1:55:3e:3c:d4:f8:53:6a:f3:3b:a6:10:cd:
b2:7e:2f:da:e6:a6:46:67:25:fd:e7:31:be:7c:c7:
55:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2C:2A:6B:49:D5:E9:E3:F9:68:0F:8D:3A:88:29:01:F0:0C:73:6E
X509v3 Authority Key Identifier:
keyid:88:0D:8A:B6:AA:2C:72:F0:79:75:5F:76:CF:01:20:AA:5D:DD:C7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:0b:56:0b:e4:a6:fe:71:de:bf:33:8f:a1:0c:94:43:a6:78:
13:fc:96:dc:ae:ff:fb:e5:63:40:65:df:25:02:8f:bd:d1:29:
92:29:2e:a7:fc:30:eb:33:4b:eb:3f:ce:b0:4a:91:ad:c6:9a:
72:27:e8:b9:b3:bf:47:a9:68:72:a1:0f:29:be:d2:6e:76:30:
12:70:2c:7c:20:4e:68:9a:55:59:1f:89:a0:52:1b:3c:9c:2e:
9f:ac:9b:24:27:b7:2b:87:2b:8a:4d:33:40:ee:f5:3c:1e:c5:
d4:c8:9a:fb:df:2c:49:ef:62:b6:98:7a:04:77:18:bf:6b:45:
87:41:dc:1b:48:3e:97:e3:ed:a5:73:a3:26:c6:d6:13:1c:63:
d1:77:3f:f2:db:3c:59:37:19:61:66:c9:d5:9d:82:3e:65:56:
15:f6:da:68:88:2f:76:5d:e9:86:e3:5d:4a:db:6f:90:39:5a:
44:fe:9e:28:0e:26:f3:05:fb:49:d0:9b:4c:26:4c:92:b2:8f:
9e:d5:50:e2:3d:b5:ef:a9:8b:92:be:ce:a2:67:a4:01:a0:e6:
6a:f0:03:51:b0:ea:fa:bb:7a:57:af:cb:73:06:3b:b0:36:8d:
b1:34:c6:cc:b2:f9:15:30:4f:cc:78:30:17:7a:b5:5b:21:03:
89:7a:d5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:55:19 2025 by rpki-client