Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
File: i5HgoQS1s93x9dCOessreeDVZvk.mft (raw, json)
Hash identifier: BTWmjnfmEaATSyUfxip5JUWTLmHGGmkgRAT6Mn/wzFE=
Subject key identifier: 38:6B:51:B2:8F:9A:F3:97:30:C4:42:34:DF:56:BC:07:FD:B4:5F:A9
Authority key identifier: 8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
Certificate issuer: /CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Certificate serial: 0198C6ED7FBBF0A6F61C9E48843FECE98813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
Manifest number: 104D
Signing time: Wed 20 Aug 2025 10:01:50 +0000
Manifest this update: Wed 20 Aug 2025 10:01:50 +0000
Manifest next update: Thu 21 Aug 2025 10:01:50 +0000
Files and hashes: 1: KwomHtAHnCM0D-yGdW_0Sf3mopc.roa (hash: nJuUP0j6H239g1R7GMJyKq0zviXnK+AhK7Q4U43dyg4=)
2: ZYlcf7X6lFUqPdlZgjx7h6pY7f0.roa (hash: Z91lhusvfId6xXTKVa6gm5qmkQJNcO8M7YoIqY37LFU=)
3: i5HgoQS1s93x9dCOessreeDVZvk.crl (hash: afc+RIqRmEl9lr4c85AasO8AZ6kv2N4xqS5sh75bMV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:ed:7f:bb:f0:a6:f6:1c:9e:48:84:3f:ec:e9:88:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b91e0a104b5b3ddf1f5d08e7acb2b79e0d566f9
Validity
Not Before: Aug 20 10:01:50 2025 GMT
Not After : Aug 21 10:01:50 2025 GMT
Subject: CN=386b51b28f9af39730c44234df56bc07fdb45fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a2:b8:99:86:79:79:4b:70:c4:24:01:4a:4c:
b9:04:13:5f:b0:42:1a:5c:38:b8:85:08:32:4d:63:
04:41:be:9a:46:58:d6:b4:f5:48:52:e3:2b:e7:56:
6f:3e:c1:e3:ec:1b:de:91:54:47:83:ff:cb:45:1f:
b6:38:df:d5:89:fa:f6:df:3d:12:eb:a5:35:a6:39:
07:e7:2b:74:fa:b8:30:21:a9:dc:9c:df:ce:26:e0:
89:39:48:0d:86:a3:6a:7c:1f:37:7b:bf:6f:29:e2:
ed:d6:20:5e:6b:9c:00:8f:c5:a4:8e:44:a7:71:45:
fa:4d:0a:ab:4f:1d:98:6b:d2:bb:b7:40:89:8b:53:
75:59:b7:6d:93:56:0c:b4:69:22:38:57:6c:39:0d:
de:96:13:ac:d1:f4:e2:4c:be:e2:c6:7a:d9:dc:df:
ae:d2:54:b6:0f:fc:a5:09:62:6d:b9:58:b4:49:1a:
59:0e:50:a6:3e:0b:8f:65:3d:aa:c2:e9:a9:38:7b:
eb:10:a3:a3:46:a6:55:38:7f:09:f9:ec:65:c5:89:
e9:3b:fe:46:1f:b0:03:a0:c2:39:07:5d:81:b0:25:
c1:59:67:23:bb:79:98:3b:70:aa:9b:61:59:e5:68:
75:53:a7:c5:3b:cf:27:80:d2:8e:7b:fe:c6:ca:3e:
7d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6B:51:B2:8F:9A:F3:97:30:C4:42:34:DF:56:BC:07:FD:B4:5F:A9
X509v3 Authority Key Identifier:
keyid:8B:91:E0:A1:04:B5:B3:DD:F1:F5:D0:8E:7A:CB:2B:79:E0:D5:66:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5HgoQS1s93x9dCOessreeDVZvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dfbfc4-cc3f-477c-8d76-a8c576224ba2/1/i5HgoQS1s93x9dCOessreeDVZvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f5:27:e6:d6:26:56:dd:73:d9:1b:29:db:5d:ea:d7:7c:5c:
5a:7f:4e:7d:b8:c5:d1:92:71:a2:9f:6d:fa:fc:d1:6b:24:3c:
3a:9f:77:5f:8e:7b:bb:87:94:b2:98:b0:d4:34:b9:16:1d:e9:
5e:d4:90:f7:64:24:52:20:ed:dc:f5:b3:99:d2:dd:e3:7e:6a:
f4:d2:c0:9a:fb:07:0f:c7:fc:5e:90:bf:29:62:66:12:6c:ee:
4c:bf:eb:b7:f6:25:12:74:8e:08:ba:19:4f:f0:f9:20:7f:e4:
ef:d3:ec:02:da:73:17:a5:23:f0:7c:97:44:f8:0e:af:66:70:
86:2a:3b:f2:4b:6c:58:1d:c5:ac:f6:12:ec:f9:a1:cd:88:8f:
0b:a4:2b:54:2c:ea:c0:74:f6:32:09:af:71:e8:d4:62:3a:5a:
83:a7:03:67:9c:a9:e1:c5:d7:d5:8d:d1:df:80:3f:bc:50:04:
ef:ba:f8:cf:65:a9:99:a9:1b:c6:d9:eb:15:c5:d6:21:d3:10:
6e:e5:ba:e2:c6:8e:53:af:c3:c3:d0:30:ac:95:d8:d7:0c:70:
7a:53:f6:e9:eb:46:aa:90:e4:c2:1a:05:12:76:fc:ee:5c:d2:
34:73:ca:e3:bb:5d:76:e8:4d:9d:fa:4a:a4:c8:98:e7:a1:48:
f5:1a:b6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:28:04 2025 by rpki-client