Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
File: iDa9j605PlExoCNykxWzVgFOZjc.mft (raw, json)
Hash identifier: LqfKqLClB9Cmd2PH5FDTXI7NsiVuak0vEH+WA2lgS8s=
Subject key identifier: 87:C4:C5:FB:50:5D:FE:68:21:A5:9E:D0:DD:6F:D4:38:BF:2A:03:61
Authority key identifier: 88:36:BD:8F:AD:39:3E:51:31:A0:23:72:93:15:B3:56:01:4E:66:37
Certificate issuer: /CN=8836bd8fad393e5131a023729315b356014e6637
Certificate serial: 019844ACA89ED13616BB078CC9DA545D493B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
Manifest number: 15FE
Signing time: Sat 26 Jul 2025 03:00:22 +0000
Manifest this update: Sat 26 Jul 2025 03:00:22 +0000
Manifest next update: Sun 27 Jul 2025 03:00:22 +0000
Files and hashes: 1: UKX34TFCd0figIbF32wm6M0tdxE.roa (hash: BFLvjvBRECITaOdgL/U7OU6npGQVInzdalw4vhrK37A=)
2: iDa9j605PlExoCNykxWzVgFOZjc.crl (hash: q1Qit9fxuvEEF4S8Fljsx6IeYjSE6qJAa2nvDp5XNH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:a8:9e:d1:36:16:bb:07:8c:c9:da:54:5d:49:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8836bd8fad393e5131a023729315b356014e6637
Validity
Not Before: Jul 26 03:00:22 2025 GMT
Not After : Jul 27 03:00:22 2025 GMT
Subject: CN=87c4c5fb505dfe6821a59ed0dd6fd438bf2a0361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:69:bd:25:23:aa:e7:4b:aa:a6:30:ed:7d:b3:
dd:d4:08:17:d0:ea:76:2e:5b:60:9a:3a:cd:a8:ce:
35:bc:6c:d7:41:b8:61:89:49:b4:e5:44:0d:0b:d5:
1b:e6:7f:04:65:b2:fd:aa:0a:e4:76:32:9a:35:79:
26:a3:fb:4f:dc:93:89:47:97:18:c4:bf:c6:44:66:
bc:41:61:1d:d2:4c:50:70:d4:41:34:7c:d8:63:23:
35:25:80:c1:06:57:9c:79:70:6e:b4:0d:89:40:19:
19:62:1e:09:9c:12:e5:fe:12:cd:56:1b:0b:84:9d:
f9:99:b2:54:5e:dc:05:85:b1:15:f4:da:3e:2b:28:
63:b7:a1:dd:3e:18:8d:b3:4d:8f:f3:78:32:25:ad:
b4:d9:92:c4:31:d0:d5:11:b1:cb:47:19:ac:b0:5b:
63:7d:d9:57:ab:f8:c7:19:27:24:60:49:0d:0d:e4:
67:c0:55:cf:2c:4f:22:5d:b7:d2:e1:ff:02:e9:26:
fa:6b:b6:ae:6c:60:e9:0c:3b:0a:aa:41:db:c4:4b:
ae:d9:8a:ba:f7:c5:17:46:38:f9:93:c8:26:5b:9a:
04:68:6c:c1:b4:be:e6:61:fd:a7:29:c8:56:5a:f4:
02:23:c9:06:7e:3c:ff:cb:af:89:10:d2:7b:43:3f:
ee:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C4:C5:FB:50:5D:FE:68:21:A5:9E:D0:DD:6F:D4:38:BF:2A:03:61
X509v3 Authority Key Identifier:
keyid:88:36:BD:8F:AD:39:3E:51:31:A0:23:72:93:15:B3:56:01:4E:66:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:7c:ba:5e:01:f5:28:ed:d0:c8:25:e8:a0:94:27:41:04:f8:
d9:3b:f6:d3:c8:3d:4d:5c:f9:95:cb:e3:5b:d9:ea:c4:65:d1:
b6:8f:c1:5c:d5:5e:f6:4d:8b:ba:17:52:77:6c:2a:23:0f:18:
5e:79:43:89:5f:87:3a:78:72:5b:69:5b:da:8c:98:0d:d0:7b:
8b:9a:ad:d6:79:7d:a8:d4:1b:13:c7:6f:14:86:78:fa:fb:50:
e5:96:26:38:4a:f7:e7:13:7d:de:56:6f:78:64:ae:b2:39:13:
bf:8a:56:79:94:a9:4b:03:d1:57:2d:18:ac:e3:84:ac:79:f6:
5c:c9:8b:c8:1a:a9:0e:d4:4e:01:be:e7:b8:f8:14:7d:0c:c3:
88:b2:da:75:8a:78:4d:27:a3:b5:60:5a:41:87:2f:89:6b:3a:
10:42:07:f7:54:00:8a:5d:c2:c4:0c:45:e8:d5:31:e4:0e:ea:
19:b8:2c:da:64:5f:f9:fa:e5:95:49:59:da:f7:67:1a:32:98:
9b:c1:82:3e:f9:52:69:06:bf:9b:6a:e3:51:d5:d1:06:0b:f1:
94:44:6a:aa:56:32:f0:b1:b5:31:7a:6f:ca:26:51:26:a5:85:
d5:4b:9a:01:9b:7a:25:67:b2:3b:05:de:60:e7:be:d5:86:e4:
ec:4b:62:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:46:31 2025 by rpki-client