Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
File: i42FmAZNtajts6YIQGTNKhrYxuM.mft (raw, json)
Hash identifier: EowO76LiAeQMwkTVgnu/yzmpcFIWS3P6wVHwHlIIsPI=
Subject key identifier: 84:AE:C3:89:34:FD:BB:7E:24:46:E7:27:02:6D:CC:36:47:CA:97:73
Authority key identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
Certificate issuer: /CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Certificate serial: 0198C9B843322A966A20B050E2A2D95939FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
Manifest number: 0BB0
Signing time: Wed 20 Aug 2025 23:02:32 +0000
Manifest this update: Wed 20 Aug 2025 23:02:32 +0000
Manifest next update: Thu 21 Aug 2025 23:02:32 +0000
Files and hashes: 1: 18pU9OUJZfEjtQtM3d6KCEE-wf4.roa (hash: g9Yx6RdVIwFFC/gP3XLwi8dipV0AyWlMkba67EAqwI4=)
2: f2nWyu3vigJSlBOetOrjZwH1G1A.roa (hash: UMryrqtW8NDhWGWT0rJw80JqEFYALJXz4j6oSIXBhd4=)
3: i42FmAZNtajts6YIQGTNKhrYxuM.crl (hash: vXRrb/C8UilsYzAw2tEgoeXgs0Oxnk5Lm+SSukRwsaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:b8:43:32:2a:96:6a:20:b0:50:e2:a2:d9:59:39:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Validity
Not Before: Aug 20 23:02:32 2025 GMT
Not After : Aug 21 23:02:32 2025 GMT
Subject: CN=84aec38934fdbb7e2446e727026dcc3647ca9773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:bf:98:a6:bd:1a:75:99:46:e0:1b:f6:d4:9f:
41:ea:70:11:fd:58:3e:8d:58:a8:9d:01:60:55:6e:
36:0e:3c:62:56:1c:cc:c9:0e:5d:5d:3b:b2:81:f7:
98:b8:13:62:c6:e9:a3:d1:2c:ad:f9:4b:00:04:78:
90:9c:b6:c4:cb:3f:56:b6:44:40:85:c0:42:09:7f:
cd:a8:05:8a:66:63:ed:41:66:fc:80:75:e2:10:9e:
7c:44:db:fd:e2:89:54:1c:80:be:b1:7c:d1:a9:31:
dc:09:40:9b:12:72:e9:9a:17:9c:7a:34:47:5a:70:
8d:75:4a:25:31:22:94:dd:a9:c9:a0:33:2b:89:b9:
92:4f:43:1e:74:a7:a7:c4:cb:85:c5:25:d4:14:f6:
f7:3b:ce:b4:bb:88:70:10:39:93:03:10:09:9c:c3:
f0:47:fd:7e:0c:ce:4f:e2:e9:a2:0a:d1:b8:73:b5:
07:21:2a:c8:ca:dd:c9:a5:60:30:6c:b4:33:bb:52:
d4:bf:de:c0:92:1e:1d:9c:f7:e1:9b:6b:da:ba:2d:
54:19:30:d8:16:24:c1:5d:78:27:8f:4c:85:57:0d:
ec:b8:cb:06:b0:74:e0:b2:ad:c6:26:15:41:45:13:
50:36:5b:e8:5e:b9:c4:db:a9:3c:c8:87:04:77:44:
ff:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AE:C3:89:34:FD:BB:7E:24:46:E7:27:02:6D:CC:36:47:CA:97:73
X509v3 Authority Key Identifier:
keyid:8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:39:07:3e:5c:d5:9f:f9:b3:ec:ac:33:61:1e:8d:ff:5e:37:
c1:ac:5a:79:bd:3d:ee:c6:6e:10:1c:77:72:d0:9e:6e:3c:23:
a5:d9:94:44:87:48:5d:ba:96:91:2c:6f:a8:b2:d2:d0:cb:36:
55:de:5b:d8:a0:20:ef:c7:90:13:10:9e:52:05:05:0b:62:21:
68:be:a0:86:0f:01:ae:13:28:60:21:aa:3c:78:c2:3f:de:6b:
69:a2:00:d2:11:65:79:63:4c:c6:7a:9b:1a:2d:e9:88:9a:1b:
15:dd:ba:9c:a4:30:da:16:3d:11:c8:14:e4:d5:8c:99:50:1e:
27:e9:44:37:94:08:84:eb:a7:56:01:6d:4a:ea:a9:5e:ce:6e:
43:87:dc:40:29:e7:2d:fa:d4:d0:1c:1f:64:18:c9:af:ec:99:
dd:9f:fb:73:13:93:71:49:0e:ba:86:ee:08:57:2b:c7:b0:dd:
a5:dd:82:2c:ae:55:f0:ca:be:c9:94:69:fc:0c:3f:fa:3a:f1:
b8:fc:02:b2:1c:68:87:81:f4:ce:af:42:b2:72:a3:ad:68:1e:
94:36:51:9e:fb:0f:48:38:38:40:a1:96:a2:bf:9c:d7:ec:5d:
92:64:57:b0:f2:08:e4:fa:86:2c:2c:54:ec:a5:5b:75:4b:95:
41:22:cf:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:24:44 2025 by rpki-client