Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
File: iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft (raw, json)
Hash identifier: 9xcDLso4YFJNqb3LO82N2soID9oXIMqzEdyncWrbFME=
Subject key identifier: 94:DB:F7:46:56:30:2E:8A:82:D4:9B:B5:9B:B6:0E:B0:76:61:5D:27
Authority key identifier: 88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
Certificate issuer: /CN=887fa37371d7d4593ba290ef45669ea0de293782
Certificate serial: 019933129A0ADED3A3EDA9CCDDD73B91072F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
Manifest number: 079C
Signing time: Wed 10 Sep 2025 10:01:21 +0000
Manifest this update: Wed 10 Sep 2025 10:01:21 +0000
Manifest next update: Thu 11 Sep 2025 10:01:21 +0000
Files and hashes: 1: XWaEMNo4oCmJKw7xuT_lUqU1a9o.roa (hash: vlh1Ps1w/BBZ8U+fD5oVlO0yHpfRUnw+NHa2xAJ40qE=)
2: iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl (hash: MOh1PebC6WAttJ/ldunBjMwg1J09vLm3De2FgZPR5IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:12:9a:0a:de:d3:a3:ed:a9:cc:dd:d7:3b:91:07:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887fa37371d7d4593ba290ef45669ea0de293782
Validity
Not Before: Sep 10 10:01:21 2025 GMT
Not After : Sep 11 10:01:21 2025 GMT
Subject: CN=94dbf74656302e8a82d49bb59bb60eb076615d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:89:4a:34:0a:56:29:34:41:db:0a:dd:38:58:
c8:f2:53:a7:89:69:9d:7f:84:d9:94:94:1b:0f:5c:
b8:62:f8:bb:80:78:15:39:a8:67:db:30:79:3f:41:
f8:15:09:6e:c1:d9:35:00:41:92:5b:3f:e6:e5:53:
a7:34:15:cb:71:9b:25:a1:70:ea:18:e2:7c:8e:39:
1c:5b:c8:21:2c:84:04:f1:95:0d:9c:83:a8:03:5d:
e0:59:b4:2f:d3:14:8a:c5:11:5f:ab:e5:2c:c7:b7:
e9:90:44:f7:20:20:59:4c:04:13:aa:48:94:99:00:
a1:14:f6:d2:3a:c5:dc:71:d6:3d:b1:b7:12:ac:1d:
6f:00:39:a1:b9:1c:05:22:3a:82:32:df:64:4b:8d:
2b:f4:d9:8f:41:ab:a8:ac:3e:bd:3f:2b:9a:19:0a:
29:a7:fe:00:41:43:0a:c9:67:8d:0a:7e:9e:52:97:
bf:52:db:41:50:0a:4a:41:01:e0:79:90:ce:a8:ec:
33:78:58:b2:00:0a:31:2a:4c:1c:73:03:39:d0:56:
94:fd:ce:38:c4:8d:16:a3:cf:d2:65:10:f6:6a:ae:
1d:5e:d2:76:34:38:17:5c:85:8c:22:19:0a:fb:3a:
b8:89:72:f0:fa:32:e1:ea:d8:1f:03:c2:de:28:84:
a6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DB:F7:46:56:30:2E:8A:82:D4:9B:B5:9B:B6:0E:B0:76:61:5D:27
X509v3 Authority Key Identifier:
keyid:88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7c:0d:a3:6e:b5:27:0e:a6:61:e1:d0:d2:87:18:1e:5d:d6:
c9:40:39:af:7a:ce:c9:7a:dd:01:9d:24:36:42:67:67:99:26:
9f:9f:d1:cb:5a:a8:76:9c:93:f5:e8:08:dc:cc:c0:81:8e:1c:
77:89:53:9d:ca:1f:b2:18:60:a8:69:74:46:20:d2:ff:db:e1:
49:91:ee:f6:34:03:1b:9b:6b:43:0a:0b:9b:bc:05:68:4c:dc:
62:31:eb:83:99:d5:a4:20:58:0a:55:5d:f4:59:92:20:b1:45:
13:a5:d4:93:9e:a3:1a:40:42:36:48:e9:fa:89:66:cd:23:3f:
3d:f8:b8:ba:89:57:f0:cb:d1:4e:93:04:8e:d3:13:75:ae:cb:
6c:5f:1e:fe:71:52:b3:f5:df:4b:34:57:34:d4:b7:e9:48:ae:
4c:22:7e:91:b8:9b:d5:45:a5:65:18:9a:61:4e:a6:c8:2e:4c:
1c:e7:12:b6:8f:c0:9e:45:fe:52:e8:2e:47:e7:9d:88:23:32:
12:e2:20:93:95:26:ec:2d:e4:41:35:20:7d:92:f2:f2:5e:48:
bc:4c:9a:10:c4:c2:92:41:9b:fe:b6:81:5b:28:67:a8:81:de:
d5:67:9e:83:73:ae:7f:5a:40:79:95:b8:02:c8:0e:7a:57:f8:
c5:5e:44:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:49:25 2025 by rpki-client