Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
File: iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft (raw, json)
Hash identifier: K6EJzs1/4yo/lpNMmmYqWbsBJaaXXijRSsTwQ3mnRrg=
Subject key identifier: 99:5A:6A:C2:FA:1F:7A:77:71:4B:24:A0:59:32:C9:68:CC:D7:21:B6
Authority key identifier: 89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
Certificate issuer: /CN=893a58124ce9cc43783955255e7f583905cdb14e
Certificate serial: 0199221E3FD3DF998A12FB46E49E5219B304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
Manifest number: 0EDA
Signing time: Sun 07 Sep 2025 03:00:31 +0000
Manifest this update: Sun 07 Sep 2025 03:00:31 +0000
Manifest next update: Mon 08 Sep 2025 03:00:31 +0000
Files and hashes: 1: iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl (hash: UArfLmpJfA+6AsdOFki0c0xXC/qtiJSga74xTncTzNQ=)
2: t9nkji_Xq4DRGMttbRDw-jVfqPI.roa (hash: MJaMfbYXB+V545skyyIWbRiW1FYp9UFjL+ooREdIKpc=)
3: x3UpgxINfYGtKCtOQQ8nTKqnfYQ.roa (hash: bx0oE168u4Tmbz20f8oi8B9aCfZBYtjemV0iReEb4PI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:3f:d3:df:99:8a:12:fb:46:e4:9e:52:19:b3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893a58124ce9cc43783955255e7f583905cdb14e
Validity
Not Before: Sep 7 03:00:31 2025 GMT
Not After : Sep 8 03:00:31 2025 GMT
Subject: CN=995a6ac2fa1f7a77714b24a05932c968ccd721b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:95:e7:33:28:70:a3:47:9f:67:ef:5d:fe:cc:
00:b2:98:ca:ae:b0:c4:4b:43:c5:ea:17:75:9d:0e:
83:76:88:35:1f:7b:b3:24:6e:cd:9d:b3:bb:b9:e9:
a9:d2:55:d0:22:03:11:3a:60:d1:92:25:3c:98:ee:
9d:48:06:c8:e4:ce:fe:5a:33:79:e6:fe:60:99:98:
b8:53:88:b3:6d:9f:b8:1e:ad:1b:81:29:ca:d5:bb:
ba:a5:05:b1:93:be:85:fe:22:a3:19:2f:ad:e7:81:
39:00:89:f7:03:4a:a2:fd:f0:ae:6f:b2:ca:5a:14:
fd:26:be:48:41:e6:fe:d6:23:da:26:2f:f9:47:30:
f4:f4:17:1e:3b:cd:49:c5:df:71:0e:d5:a0:d9:c5:
e5:d9:01:37:ff:07:20:72:fb:5b:8e:15:5e:fb:fe:
4d:00:38:62:e6:66:be:60:7d:a1:63:ef:21:c1:cb:
93:43:cf:79:e4:a3:8f:40:ed:ed:f1:1a:e1:69:f6:
1c:c2:a8:1a:be:7f:a4:22:bf:33:ef:9e:62:9d:ec:
96:c8:f2:97:57:ce:e6:21:20:d9:bf:2e:b9:c1:c5:
9f:42:d0:e3:33:95:f5:67:de:d9:eb:8c:57:e0:d2:
3b:40:9c:67:7d:8c:7a:0f:5b:e1:67:d8:98:38:37:
88:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5A:6A:C2:FA:1F:7A:77:71:4B:24:A0:59:32:C9:68:CC:D7:21:B6
X509v3 Authority Key Identifier:
keyid:89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:54:c5:9a:96:0c:28:12:bd:0d:5e:f4:f2:aa:1d:f7:fe:57:
6a:89:e9:cf:e5:33:34:7b:61:7e:59:c7:49:60:e2:8c:dd:8d:
bf:af:65:6b:78:c3:58:b1:f8:5a:83:ea:71:7e:3b:6b:9c:33:
ec:00:f2:fd:85:72:49:b9:90:da:11:c6:c8:75:49:3d:78:0e:
93:16:fd:e9:31:54:f4:54:f6:a5:af:ed:99:ba:ca:74:c0:63:
c6:9d:c9:96:e8:c8:1c:9e:fb:bb:8a:f9:5b:3e:14:e5:85:89:
b7:69:5d:32:4f:24:98:10:00:29:30:c8:8e:ef:3d:60:22:df:
e4:a0:91:06:d9:bb:9d:c7:3c:6a:17:9c:40:c4:52:81:46:e2:
c6:5f:31:b3:d3:59:de:97:ad:91:5e:a9:0e:75:d4:3f:8a:90:
77:99:1b:36:2b:0c:73:ae:c3:7e:d4:3a:f8:c2:49:4c:8b:c4:
db:3f:c2:84:2a:af:ca:1a:59:03:aa:20:f8:b8:fb:6d:6d:c5:
c3:86:17:88:a9:3d:66:a9:d4:1d:26:76:ef:a8:4e:ab:66:d5:
69:af:20:87:fe:e3:52:80:8f:ee:d1:c4:68:1e:fb:53:32:73:
af:59:f5:4f:a3:96:ee:52:b6:54:d1:99:a3:66:df:15:e2:1f:
64:fa:d6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:26 2025 by rpki-client