Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
File: iBD8MZigq5lkeHfb5XJeBc7gE_A.mft (raw, json)
Hash identifier: oSd7URMEyRSVl2kyNY0u4roWFinRMMEnLl4i6FPtKrk=
Subject key identifier: 45:28:75:56:CC:89:4B:21:BE:ED:F4:DF:65:B6:08:82:FE:C5:EC:49
Authority key identifier: 88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
Certificate issuer: /CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Certificate serial: 019933EE69B4EB68A50C9FF79984519DAE75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
Manifest number: 0EED
Signing time: Wed 10 Sep 2025 14:01:26 +0000
Manifest this update: Wed 10 Sep 2025 14:01:26 +0000
Manifest next update: Thu 11 Sep 2025 14:01:26 +0000
Files and hashes: 1: hGQAPrEg70xi3dTAsr6AkflPwzQ.roa (hash: fq94rKVVa6d3kPByOte4hBdKvb2vGf30OOEdIeQW7uc=)
2: iBD8MZigq5lkeHfb5XJeBc7gE_A.crl (hash: HHK70LbwxWBqdiY4uC2xso8iTMVO/ShsFW9X3bISXLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:ee:69:b4:eb:68:a5:0c:9f:f7:99:84:51:9d:ae:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8810fc3198a0ab99647877dbe5725e05cee013f0
Validity
Not Before: Sep 10 14:01:26 2025 GMT
Not After : Sep 11 14:01:26 2025 GMT
Subject: CN=45287556cc894b21beedf4df65b60882fec5ec49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:ba:db:67:89:ee:ee:2c:13:65:21:b8:7c:
b9:e4:7c:82:5c:9e:1d:f5:16:23:33:1a:a3:b7:13:
95:df:db:e8:00:c6:af:f2:9d:79:ba:b4:d3:e7:41:
1d:3c:7d:7b:5f:3a:9a:52:01:f7:bd:ea:46:c4:1c:
d6:57:1d:49:8f:26:b8:01:ff:29:a4:c3:76:de:b2:
b4:25:47:4c:67:67:7a:80:56:b7:96:3f:4f:fc:7d:
7b:a6:a0:40:1f:7a:f6:89:67:ce:eb:72:87:0d:17:
bb:ef:b1:9d:de:78:da:31:ac:9c:b3:1f:51:b0:ab:
e0:b4:3c:95:17:c0:e7:e9:73:74:25:fa:b4:a1:ac:
11:f9:cd:bf:94:e8:ad:30:a5:2b:4d:e9:7f:9c:1f:
55:ab:89:01:45:f0:88:fb:23:3d:07:a5:9f:55:13:
81:d9:bb:c7:ff:31:e0:d5:cd:c9:10:c7:fd:73:9e:
3d:9a:69:6d:7e:f8:31:3d:b3:85:05:c0:87:a2:68:
30:da:33:5e:28:27:da:c2:80:3a:bf:65:85:31:41:
53:a7:d7:09:35:2d:d6:b9:d1:db:ed:de:8a:86:1e:
55:f0:17:53:8e:b4:44:a0:38:8f:59:2d:42:6b:ec:
c3:48:fc:69:5d:ab:44:64:74:e9:f9:74:82:38:7b:
5b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:28:75:56:CC:89:4B:21:BE:ED:F4:DF:65:B6:08:82:FE:C5:EC:49
X509v3 Authority Key Identifier:
keyid:88:10:FC:31:98:A0:AB:99:64:78:77:DB:E5:72:5E:05:CE:E0:13:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBD8MZigq5lkeHfb5XJeBc7gE_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/cf1ffd-134d-4382-8e59-4a08d5a1c71f/1/iBD8MZigq5lkeHfb5XJeBc7gE_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:6d:51:b6:63:74:62:48:7d:c5:dd:91:ee:87:c0:6a:82:9e:
70:22:43:a2:68:b1:aa:2f:27:38:c2:34:fb:a1:30:bd:b9:f0:
01:ae:6f:c4:4d:f9:1b:2c:41:25:10:cc:75:20:e3:f0:df:da:
18:49:4e:70:ea:82:be:e0:e3:5a:11:a2:76:1b:96:26:55:be:
3d:79:b2:71:30:3a:54:a0:7c:2a:ba:f7:d7:f3:e3:8e:1c:36:
17:bd:81:f5:5c:d8:f4:47:e3:6f:73:8c:d9:50:29:40:69:e2:
fe:3f:f2:f0:ed:81:6d:44:bb:f8:53:d3:22:09:d7:c3:3d:9a:
51:44:52:15:e9:f7:b4:df:07:48:71:d2:90:ec:fb:11:41:c9:
16:da:a1:38:5a:87:a3:42:31:d7:2d:97:73:42:9e:8e:74:d6:
c2:08:ab:c4:36:cf:83:71:49:fb:a4:0f:c3:89:56:12:4c:fa:
d7:28:5f:fc:c6:90:b3:d2:1c:3a:91:08:29:e8:d1:ce:8b:78:
3e:dc:e5:80:f9:3f:4d:95:41:99:f7:8a:46:90:90:5c:c0:f9:
d5:af:de:c3:03:73:45:5c:7d:72:04:9e:65:5a:ee:15:f7:ff:
56:f6:83:81:48:4a:d3:11:43:c7:84:ca:16:1c:d3:d0:5c:97:
3c:a0:32:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:08:33 2025 by rpki-client