Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
File: iC-gGQL06MNH8hFuRkXaGmtOCWI.mft (raw, json)
Hash identifier: vBZVuYjTbecAhmbGZXMhvhYvVK1rSvo+iSeaXPMY6tY=
Subject key identifier: AC:09:F2:53:A8:15:79:F4:5F:AA:0A:9E:BE:07:78:EE:5D:23:25:DD
Authority key identifier: 88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62
Certificate issuer: /CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
Certificate serial: 0199239F245D89A799B15B4678AD8B792A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
Manifest number: 1432
Signing time: Sun 07 Sep 2025 10:00:55 +0000
Manifest this update: Sun 07 Sep 2025 10:00:55 +0000
Manifest next update: Mon 08 Sep 2025 10:00:55 +0000
Files and hashes: 1: ENS55DqOSCIACYKV88lsj2-9Qt0.roa (hash: DHbJggMAa2s1Y5SQ9CvEy1KweRl3G7QnT7Ch9hrVq4Y=)
2: Eh5XcZTOlwwjICZ8D5e6YinN9to.roa (hash: i3hRAhyXtajePfAySoecKpTzxKsfIbEuHCpoNygQqoo=)
3: iC-gGQL06MNH8hFuRkXaGmtOCWI.crl (hash: ZBPPE4ctQRBTh+8htADMNxfDMt/iQL5TMXUzxJ/EQTI=)
4: rqFZA9uVkdGBL0x6Ei0L9MHEurQ.roa (hash: L0IGvxVXiMO117M8Wm4IgrHBTq1xuhWbcFCP05D3zJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:24:5d:89:a7:99:b1:5b:46:78:ad:8b:79:2a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=882fa01902f4e8c347f2116e4645da1a6b4e0962
Validity
Not Before: Sep 7 10:00:55 2025 GMT
Not After : Sep 8 10:00:55 2025 GMT
Subject: CN=ac09f253a81579f45faa0a9ebe0778ee5d2325dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:13:97:76:f9:f7:b8:55:ad:0c:b7:fa:56:
53:12:02:b6:b8:e2:c1:b7:48:da:32:e3:0b:65:b4:
85:ff:06:74:5d:ff:51:e1:d8:e6:8b:0e:31:2e:3a:
0a:ac:3a:0f:6b:73:6a:7b:4a:fd:8a:52:b2:22:69:
70:57:bc:18:13:b8:87:80:25:43:72:3e:96:89:fe:
4b:1a:a8:30:48:2e:c2:ec:cb:f9:c6:ad:0a:9d:b3:
4d:24:3d:db:3c:e9:b3:28:0e:4e:ae:62:0b:e9:a7:
c1:c6:92:3d:31:13:e6:25:23:f1:cc:45:09:84:fc:
6c:79:11:87:69:9b:df:5b:19:0e:77:2d:9f:f7:a7:
53:2a:45:a5:d9:3d:a9:67:07:ab:b2:c1:49:93:72:
3f:e6:f2:62:fd:b1:42:89:17:94:c9:d5:5a:11:09:
5e:4a:71:c3:45:c0:20:a6:c9:67:2c:6c:eb:37:e1:
4b:ed:9b:69:4e:47:5d:cb:5d:d3:89:c0:bf:0f:d5:
0a:c1:32:93:f7:a6:79:fc:e2:ec:74:3a:0d:b7:52:
d7:07:c6:71:6d:35:31:f8:be:74:4e:a0:65:1a:02:
c7:ac:65:f0:c8:18:3a:06:3f:fa:be:f5:33:9c:13:
bc:78:91:c5:50:05:fc:ef:4e:c3:15:df:44:63:78:
1c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:09:F2:53:A8:15:79:F4:5F:AA:0A:9E:BE:07:78:EE:5D:23:25:DD
X509v3 Authority Key Identifier:
keyid:88:2F:A0:19:02:F4:E8:C3:47:F2:11:6E:46:45:DA:1A:6B:4E:09:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iC-gGQL06MNH8hFuRkXaGmtOCWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ec0981-d682-4f7b-b210-5c2d265705e0/1/iC-gGQL06MNH8hFuRkXaGmtOCWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d8:02:a7:98:61:14:50:00:a2:62:e7:a6:f4:e9:c9:2e:64:
32:bd:85:f1:e1:05:ab:57:67:59:c4:7b:f2:63:f9:03:1e:fd:
87:11:88:5d:01:f0:b5:a2:fb:53:6f:0a:f0:e0:9e:bc:71:f9:
4a:c6:12:dc:18:cb:be:02:1c:63:d3:6e:e8:d6:95:a9:60:0d:
8d:8f:9f:b5:af:45:c5:6e:b1:87:a2:a9:8f:69:20:47:34:71:
16:bf:d7:c3:e9:05:4e:dc:07:22:80:ad:b7:54:a1:ae:01:d2:
12:02:a0:9f:18:12:24:86:07:91:f9:29:08:d4:c3:fd:55:87:
01:f5:77:48:f0:3d:e6:d2:22:23:31:45:03:d9:35:e8:9a:74:
e3:2a:16:20:08:fb:12:e6:44:4f:4b:66:79:59:3d:2c:f5:97:
fc:88:89:b6:31:69:2e:33:84:36:e3:e6:03:0f:e8:2f:fe:a8:
72:49:d2:ba:71:cf:57:ae:61:87:8a:15:6f:3f:de:0a:85:b2:
59:74:ea:0a:78:c0:6e:24:68:e4:c3:cb:48:6d:81:56:ce:50:
e0:4c:24:d5:a7:43:b6:ca:ef:ff:b0:93:0f:06:05:ea:08:9d:
09:ac:54:93:39:d5:59:af:55:3b:08:0d:2c:88:cc:40:a8:d0:
d5:30:56:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:32:20 2025 by rpki-client