Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
File: iO0MCQHGnlxdj1GmddBVmC-R0qc.mft (raw, json)
Hash identifier: o/ToP77u33kni6xe0YbnvgfhBn+rOniZnpAkBZHLzak=
Subject key identifier: D9:92:5F:90:C7:49:B1:C9:D5:66:3E:3B:C6:4B:91:0D:ED:E3:AD:FD
Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
Certificate issuer: /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Certificate serial: 0199221ED1F655DD7EDCE66539AD184E4B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
Manifest number: 0F9F
Signing time: Sun 07 Sep 2025 03:01:08 +0000
Manifest this update: Sun 07 Sep 2025 03:01:08 +0000
Manifest next update: Mon 08 Sep 2025 03:01:08 +0000
Files and hashes: 1: 5bB3yoqJtJ8O9S62QfWorgiioFY.roa (hash: 8Ndb6O5ZdaPJ5izfIbfWtZrPZCIF+KxMhtKJ5R+rDRA=)
2: F2pyX4AW0yNP_DxkJy2c7z3MxKg.roa (hash: YtC8cOEf9B52eoNJhdsOBs1/lz34UsGpGhA4ymHbCSI=)
3: iO0MCQHGnlxdj1GmddBVmC-R0qc.crl (hash: A4+GS0yVrPxcg3yHwffFdgixxlKHsSZFvaE3qg3brJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:d1:f6:55:dd:7e:dc:e6:65:39:ad:18:4e:4b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Validity
Not Before: Sep 7 03:01:08 2025 GMT
Not After : Sep 8 03:01:08 2025 GMT
Subject: CN=d9925f90c749b1c9d5663e3bc64b910dede3adfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:96:51:6f:80:28:d1:70:a8:3f:e6:15:a6:04:
63:6d:89:e7:aa:55:3c:8b:31:e9:14:20:b0:1a:fd:
c0:dd:b5:83:65:f2:4c:dd:04:c7:c1:c9:3f:62:75:
3d:e9:6f:83:78:66:2d:8f:f0:0e:b5:57:35:79:40:
ca:85:80:ce:82:23:c1:b3:16:1d:a7:94:70:bf:4f:
be:59:6c:9e:85:90:ec:d5:5f:a6:be:42:b9:8b:fd:
02:ba:e1:c9:b9:9e:f2:7e:b0:d8:13:24:4e:ef:7f:
a2:be:51:6d:e2:5d:12:54:a3:e9:22:20:16:c3:c2:
d8:f9:c7:8d:da:fb:57:56:98:b4:58:67:89:77:a4:
a0:3c:69:8a:8f:92:5f:0d:bb:2d:4b:cb:60:57:60:
9f:af:ad:04:99:62:ce:33:56:39:43:e1:8e:54:98:
68:ab:a0:52:d0:e0:7b:72:94:b3:50:e4:06:08:98:
db:ea:73:e9:d6:03:9e:5b:65:eb:6d:66:11:42:2d:
00:6d:9e:e3:61:f3:88:ef:54:7f:12:e9:f8:97:df:
e1:03:82:43:02:57:68:db:2e:4f:32:a1:df:a5:f5:
bf:63:5a:71:e6:3f:be:75:c0:83:cc:bd:4e:1c:a6:
fc:61:1d:a6:d8:4c:86:94:e4:86:03:53:93:42:36:
19:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:92:5F:90:C7:49:B1:C9:D5:66:3E:3B:C6:4B:91:0D:ED:E3:AD:FD
X509v3 Authority Key Identifier:
keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:df:bd:f7:26:bf:51:b5:4d:92:23:89:d4:99:e5:74:03:10:
f0:f9:c0:c8:9d:ae:cb:ac:b3:2b:14:03:68:a7:64:ed:4e:8e:
8e:f2:66:46:2b:19:31:6b:62:3c:2c:b7:fd:3f:1d:9c:a0:1b:
2b:92:d3:11:0e:bb:a9:11:ec:97:4b:d4:1b:39:80:28:b2:59:
50:c8:06:69:fd:ab:fc:86:69:3c:fd:a7:b3:d0:79:f1:85:71:
6e:85:59:e1:35:19:73:46:94:e7:78:fe:59:89:d7:a1:e7:50:
96:f3:bb:69:46:77:15:9e:52:47:bb:1a:0a:24:21:e4:75:36:
53:43:67:3a:da:7d:08:71:cc:02:2a:90:33:cc:f2:8f:20:52:
43:f0:3f:8e:5c:73:37:cd:13:0f:09:b0:6d:5e:d6:45:0c:2f:
6f:01:f5:cb:38:d4:82:1a:dd:a0:dd:1b:62:48:16:0b:f3:94:
c3:1f:07:32:25:b4:5d:da:e2:84:d1:6e:ac:0f:7d:15:f7:dc:
e8:7a:b9:c7:6d:0e:ba:9e:6f:65:8e:52:5d:c8:dc:46:43:19:
37:1d:54:7e:31:c6:e6:9f:60:75:fd:af:fd:86:34:3b:48:99:
12:bb:9e:1b:f0:af:b5:cb:a3:a8:23:30:6d:91:dc:0f:c8:0b:
37:5b:9d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:55:33 2025 by rpki-client