Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
File: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft (raw, json)
Hash identifier: aoC7odrIWmiwmnXgDqwH9jBpX1T1gV0bPWA1T0EqWnM=
Subject key identifier: E6:A4:36:CF:8E:3E:DF:98:72:AD:FD:13:4A:14:1B:BF:40:C2:BE:F4
Authority key identifier: 89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
Certificate issuer: /CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Certificate serial: 01992330D12D827704F832437835C0E722BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
Manifest number: 1648
Signing time: Sun 07 Sep 2025 08:00:25 +0000
Manifest this update: Sun 07 Sep 2025 08:00:25 +0000
Manifest next update: Mon 08 Sep 2025 08:00:25 +0000
Files and hashes: 1: QdF_t5GM6hFZDI7Ycz1kPbhRE0s.roa (hash: gZA+5nFU0e3J+dZOb0p/gBtvIfB/51rVDEOTe4nlfP8=)
2: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl (hash: K9zcfWHEsaZRrcp67WRC7WZtqrvEZhohmsn6azhR6qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:d1:2d:82:77:04:f8:32:43:78:35:c0:e7:22:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Validity
Not Before: Sep 7 08:00:25 2025 GMT
Not After : Sep 8 08:00:25 2025 GMT
Subject: CN=e6a436cf8e3edf9872adfd134a141bbf40c2bef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4b:69:53:cf:3c:69:5c:34:4c:80:7e:9d:a7:
73:2a:84:80:96:50:6b:c3:8d:43:ed:a9:13:6a:ad:
ad:38:bb:2e:be:e1:32:2c:42:a8:1a:ae:d5:29:b7:
8a:4b:99:db:55:6d:61:c4:70:3e:00:47:68:b9:42:
d4:9e:d9:ca:a6:0d:f3:1b:f7:49:0e:cc:c0:45:a4:
d9:1d:b2:25:11:bd:cc:bb:f3:dd:e8:ca:cd:61:29:
11:ca:85:47:83:dd:ec:8d:3e:17:3f:c3:44:6a:7c:
0d:c3:ea:61:3e:25:16:7b:8d:1b:f8:6a:5f:c3:d0:
be:7c:95:26:d3:15:c6:1f:4f:6d:72:6f:70:5b:c2:
ba:8b:de:5f:e0:6e:e9:87:18:12:30:31:2c:d5:30:
c1:06:d0:f5:bf:1d:21:4a:7d:63:20:f3:92:01:d3:
3b:0f:35:0e:50:26:97:ad:42:eb:8c:15:bb:c2:3c:
46:20:85:09:ca:94:54:a7:a6:d4:8a:a2:81:21:db:
92:ca:13:83:75:9b:cc:03:de:6a:99:79:88:3e:3e:
64:cd:e7:af:c0:a7:fc:8c:dd:50:e7:86:68:78:69:
8e:4f:af:d5:d1:42:0d:41:85:57:3d:27:44:b6:01:
0c:35:51:c8:e5:35:6e:a1:e5:b3:c3:52:fc:8d:61:
47:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A4:36:CF:8E:3E:DF:98:72:AD:FD:13:4A:14:1B:BF:40:C2:BE:F4
X509v3 Authority Key Identifier:
keyid:89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f3:c7:e6:1c:f8:ce:aa:ae:3e:3f:1c:ea:03:f5:1a:f3:ed:
0c:af:1c:ba:33:a8:de:9f:11:1c:86:3f:75:64:f7:92:f1:2f:
d2:1d:a6:29:0b:82:b9:51:32:68:e4:46:7f:31:41:37:a6:92:
27:b8:a9:98:a1:f0:c4:d1:3a:86:b7:d1:ef:2e:ad:9a:1e:36:
0c:f0:fc:41:57:50:08:17:ea:34:f5:0d:fc:e1:e4:a0:11:99:
f1:06:cf:81:8c:89:ad:e4:43:f6:fd:1b:87:7c:7a:61:44:54:
d3:c7:c7:97:78:f0:5c:01:1b:08:c6:ef:23:1c:a1:f8:d3:49:
a2:fc:5e:32:34:c1:47:26:94:8e:cf:ff:fd:d8:24:10:4e:15:
e4:35:f5:03:1b:b7:95:ad:c7:ab:0b:1a:f6:56:04:63:8a:5c:
7c:18:ed:5e:05:e5:00:c9:1b:c4:af:3f:7a:c5:91:c0:6d:95:
0c:24:6d:36:0e:75:5c:37:0a:0d:e4:3e:b3:bd:29:52:ae:d3:
1e:59:fb:e6:06:0d:f8:b1:d1:51:87:25:5f:ce:12:c0:67:53:
5a:14:28:a0:cc:08:2b:a8:19:bf:b3:29:f2:61:c1:9d:63:53:
c9:cd:2d:f9:07:10:77:22:e7:eb:df:22:48:94:01:d9:88:0a:
1a:ee:11:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:14 2025 by rpki-client