Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
File: iaQ4np9NXMjEhtaCK-8fRO987UI.mft (raw, json)
Hash identifier: FTPb7Zk3sLY6tJPYtpxqBSYdtj45WAroLBBpBCCjPdM=
Subject key identifier: 2E:01:1B:30:69:BA:BF:7F:5C:B2:7F:91:13:6E:C0:0A:BE:38:AD:70
Authority key identifier: 89:A4:38:9E:9F:4D:5C:C8:C4:86:D6:82:2B:EF:1F:44:EF:7C:ED:42
Certificate issuer: /CN=89a4389e9f4d5cc8c486d6822bef1f44ef7ced42
Certificate serial: 0199221E92C6DF9F260324409B13F6CB3BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
Manifest number: 017F
Signing time: Sun 07 Sep 2025 03:00:52 +0000
Manifest this update: Sun 07 Sep 2025 03:00:52 +0000
Manifest next update: Mon 08 Sep 2025 03:00:52 +0000
Files and hashes: 1: 8ZpplWrhbVda_aSYHx2pbbAdBWI.roa (hash: KC0Osg8WEd8lVzUhmWMq6YDl/x9/ZL2h5Pd6qvq9PbE=)
2: iaQ4np9NXMjEhtaCK-8fRO987UI.crl (hash: xFuyLCzZNKPhVv3kxZ3nw8Tst3m2x4F2JbaOEfzM2p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:92:c6:df:9f:26:03:24:40:9b:13:f6:cb:3b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a4389e9f4d5cc8c486d6822bef1f44ef7ced42
Validity
Not Before: Sep 7 03:00:52 2025 GMT
Not After : Sep 8 03:00:52 2025 GMT
Subject: CN=2e011b3069babf7f5cb27f91136ec00abe38ad70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f3:12:59:74:14:39:79:f4:bc:5f:1b:a8:f7:
17:c6:e5:d2:51:b0:4c:81:85:73:71:7c:46:b8:d6:
37:f9:ae:f1:43:56:84:6b:0a:6a:ef:3f:d5:b1:23:
7c:7f:ea:72:e1:e7:8f:31:6f:dd:6e:30:fa:88:93:
7e:b0:39:1e:70:09:4a:ac:04:12:74:c0:11:03:1b:
22:85:b9:11:f8:71:f3:0a:d9:da:f5:51:c6:a8:ff:
f7:f7:0d:8d:21:7d:25:4a:c0:78:24:d5:13:ae:b8:
c1:e2:89:74:e9:59:1e:1a:25:52:5e:06:50:22:be:
1a:b8:9c:fc:a3:8a:e0:0d:53:d4:48:b9:67:af:76:
49:eb:d9:be:a8:c0:04:c8:62:bf:d3:b6:18:48:93:
65:e9:d1:0b:6f:49:2d:ec:24:9a:05:64:b1:89:69:
bf:90:33:67:f2:46:d2:25:7c:17:52:27:3b:51:6f:
88:50:50:88:fa:f1:a7:ba:22:86:53:b6:37:f6:72:
a0:2a:49:5e:82:32:ed:3e:12:dc:33:47:c4:eb:28:
cc:a8:d4:8b:c6:c9:95:02:5e:6a:0a:f3:9b:7d:72:
14:e1:01:57:70:ac:a1:bc:6b:13:68:98:e4:59:4e:
e8:08:59:5f:e0:f5:ec:9a:ca:1d:dc:a2:b5:8f:61:
84:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:01:1B:30:69:BA:BF:7F:5C:B2:7F:91:13:6E:C0:0A:BE:38:AD:70
X509v3 Authority Key Identifier:
keyid:89:A4:38:9E:9F:4D:5C:C8:C4:86:D6:82:2B:EF:1F:44:EF:7C:ED:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:90:b9:83:99:e7:38:3e:c4:bb:4c:9c:95:97:f7:4a:55:2e:
20:94:1f:95:b4:e0:2d:04:fa:da:6b:e7:ec:f7:b2:37:67:56:
78:e2:63:1f:e2:f2:22:27:13:96:e1:07:5f:28:83:16:6d:0d:
1c:b8:10:be:bc:b5:6d:6b:e2:3e:8e:c7:2d:e3:7e:31:b9:62:
78:da:99:42:8c:72:71:98:c1:5e:d0:60:e0:4c:6d:5b:d9:51:
64:d1:04:b1:12:03:47:98:80:d6:27:e2:cb:ce:a1:f0:8d:b7:
35:ee:e5:b9:9a:3d:b5:b8:56:11:d4:12:8f:93:26:d9:18:b1:
d2:fe:25:8b:0b:66:2a:3f:f3:8c:85:f9:9e:77:ea:a1:67:62:
bf:2d:67:bc:60:88:9e:68:72:dd:49:cc:21:16:6a:ab:d9:0a:
8b:0f:0c:61:0e:80:70:87:f3:5c:b5:97:ab:c3:0d:94:c5:e9:
6c:77:f7:8a:3e:3c:4c:f3:b8:e8:5f:25:63:e9:6f:dc:ea:3e:
d4:fd:2b:ac:81:2b:a7:5a:b7:e5:b6:9c:0c:05:49:61:9a:76:
7d:b9:53:d1:1d:97:ba:a0:2b:b5:a2:5d:fa:a9:dc:c0:66:39:
cf:8a:6a:15:40:c9:b1:ba:89:a5:67:0b:a3:b4:b8:3f:2a:de:
12:9c:5a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:16:31 2025 by rpki-client