Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
File: iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft (raw, json)
Hash identifier: m/HN4W1naQxdnamWOKAUi3RERi1v5ye9Ol3i1GtlyHU=
Subject key identifier: 73:4B:20:FD:23:CB:AE:71:A7:84:7C:A2:B5:21:D8:3D:F9:38:0C:35
Authority key identifier: 88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24
Certificate issuer: /CN=8898db8cb861bbbdd1fb7562def4d77d8642c324
Certificate serial: 0199228CC476555C93641355F7E7CE988EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
Manifest number: 1393
Signing time: Sun 07 Sep 2025 05:01:14 +0000
Manifest this update: Sun 07 Sep 2025 05:01:14 +0000
Manifest next update: Mon 08 Sep 2025 05:01:14 +0000
Files and hashes: 1: hIJG4JYkLEhwraYEYvL-fraByuk.roa (hash: 5YFKdkA5FRK1IPjfHxOUcAbA5SZ2reBZq68WODkSIGA=)
2: iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl (hash: OwoO+PWZNhOFU93pcy0uwjqUlEypNxhGT0W7pcv5n9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:c4:76:55:5c:93:64:13:55:f7:e7:ce:98:8e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8898db8cb861bbbdd1fb7562def4d77d8642c324
Validity
Not Before: Sep 7 05:01:14 2025 GMT
Not After : Sep 8 05:01:14 2025 GMT
Subject: CN=734b20fd23cbae71a7847ca2b521d83df9380c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2d:8e:cd:39:ea:8a:eb:e6:8d:27:df:77:1f:
04:d0:29:07:10:ca:cd:c2:a2:03:66:65:14:4c:07:
6e:02:42:94:f1:aa:2d:31:e3:dd:6a:d5:10:f5:d8:
c7:6d:bd:40:df:8f:15:a5:25:1b:a5:45:f3:81:40:
6d:f8:36:d4:2f:77:a0:5a:e7:3d:9e:72:56:26:3b:
5c:99:a2:34:9f:8b:9d:82:b0:88:a9:29:51:05:b5:
2a:82:ec:d5:8b:97:ff:02:3c:72:d0:81:60:fe:4f:
63:f1:7c:c4:01:4d:75:9c:20:85:42:85:6d:54:7d:
20:7c:84:02:a2:99:c2:5c:0e:3d:af:5c:59:2c:64:
57:e3:42:6b:10:ec:74:ac:4a:79:de:9c:61:98:74:
5a:ed:eb:a7:05:36:2c:84:25:ef:ae:c3:e9:13:a9:
f2:95:a9:69:12:e2:10:af:ae:67:6c:dc:85:8f:b7:
60:b4:12:f0:ef:3b:53:45:66:99:9d:f3:b0:2a:99:
fc:06:d0:44:4e:9f:f8:a7:e8:b9:1a:16:fa:a3:3b:
7b:7b:9a:ff:51:ac:a1:e2:90:a8:e5:a5:c2:99:69:
34:ea:83:b7:71:8b:b6:52:a7:7b:20:40:ac:84:7d:
27:63:19:12:a9:a8:6c:7b:a6:27:ad:f6:94:ff:65:
5c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4B:20:FD:23:CB:AE:71:A7:84:7C:A2:B5:21:D8:3D:F9:38:0C:35
X509v3 Authority Key Identifier:
keyid:88:98:DB:8C:B8:61:BB:BD:D1:FB:75:62:DE:F4:D7:7D:86:42:C3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a6cf5-1342-4c3b-87af-160c24c66630/1/iJjbjLhhu73R-3Vi3vTXfYZCwyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1e:6d:37:78:ce:6b:e4:7d:01:c2:d4:fb:82:a8:9d:36:b5:
4d:fe:5f:fd:2c:13:52:c4:d4:17:12:08:fd:1a:09:94:1d:3d:
0e:5a:5a:79:b9:d1:19:96:42:1b:ba:a8:dd:21:37:a6:22:a0:
cc:f3:da:81:7e:80:19:1b:ea:b2:d0:2d:aa:b7:ed:9b:0c:9f:
20:79:95:9e:fe:d7:47:96:e2:f2:80:d5:44:98:70:4d:70:4b:
fc:da:ac:0c:b7:ab:a6:c9:16:c7:30:62:09:f5:36:d1:cf:24:
e0:07:5b:80:27:fd:83:96:88:38:cb:6e:3f:4f:f1:56:97:c5:
b7:ff:3e:0c:aa:5e:3e:89:52:45:d2:cd:8c:ee:1a:0c:55:e3:
ec:d2:82:f3:62:f3:72:37:57:f4:b3:cc:dd:06:b9:29:81:f1:
a7:4b:c8:11:8b:d5:a1:0f:d9:c3:d2:e1:d0:06:8f:45:1e:89:
3f:9f:cc:35:ef:91:59:a5:eb:1d:80:7c:ed:0d:41:9d:38:7d:
9e:e5:5f:e8:ba:da:d3:fe:bf:4f:93:c2:14:80:1f:b3:b1:2c:
d0:df:01:a8:86:06:23:79:dd:95:40:92:41:63:15:0d:8e:fd:
4e:56:d3:f2:59:76:85:96:3e:49:ab:2d:f4:24:f6:54:40:0e:
75:4e:43:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:01:49 2025 by rpki-client