Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
File: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft (raw, json)
Hash identifier: A8DgRnMff2veusXsDcuhLyoTg0jssBE9Jbkibv49sjo=
Subject key identifier: EC:4F:9C:A7:D7:C7:9E:C2:BE:60:7A:13:CC:3C:83:2C:20:D2:C9:E3
Authority key identifier: 88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
Certificate issuer: /CN=88e719f426793b1e9063771460abd311a3dff116
Certificate serial: 01995078360247DB3636B92808F865CFD8EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
Manifest number: 1687
Signing time: Tue 16 Sep 2025 03:01:19 +0000
Manifest this update: Tue 16 Sep 2025 03:01:19 +0000
Manifest next update: Wed 17 Sep 2025 03:01:19 +0000
Files and hashes: 1: 2JOqb_FcM3JCaikWzh1QzLM3NNs.roa (hash: isQtSQoVI4VnIJhK4p6fvX5w7lFtKPVqkwJW/rfKCwA=)
2: KkqNZ54Qewj5mCBLo3rtzCSFt7g.roa (hash: Rbv/KvRW9C13yYdCBXyUxqLUAuWNRC3szrxFy+NiiA8=)
3: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl (hash: 9/+uVk1iw2pKcXNE4TWb+VNwwdLmzY4w2sfcNLv6p98=)
4: soZKqGzihNQNfxzcrDh_Qn-1Tnw.roa (hash: +H581vOHkrLuu+UEmJR0K8H+S0wh9yACSCN32HI4jio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:50:78:36:02:47:db:36:36:b9:28:08:f8:65:cf:d8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88e719f426793b1e9063771460abd311a3dff116
Validity
Not Before: Sep 16 03:01:19 2025 GMT
Not After : Sep 17 03:01:19 2025 GMT
Subject: CN=ec4f9ca7d7c79ec2be607a13cc3c832c20d2c9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:79:b2:e9:d1:6f:58:88:c9:da:b1:32:ab:82:
1b:94:10:62:1b:92:c5:48:c7:bc:af:3e:5f:7e:5b:
74:3a:79:73:78:19:b1:21:db:0d:f1:2a:77:a3:bc:
fb:ff:03:7c:29:47:a8:57:d3:34:63:bb:41:55:3e:
af:1d:48:84:00:5b:3b:0e:fb:8b:3e:2a:5b:a8:4e:
27:46:e1:27:45:ca:75:34:58:62:7c:27:e2:78:56:
d3:ce:22:b6:1b:1a:43:40:5e:bd:28:8f:b4:08:cd:
61:43:50:67:a1:0d:81:85:8a:2b:f0:9e:b2:2a:14:
d4:95:d0:a4:bf:13:73:46:2a:35:6e:0b:e9:70:93:
1a:6f:dd:66:ce:07:89:68:49:a5:e0:46:63:1c:1d:
d1:86:12:22:01:0e:c3:16:fd:51:98:7f:dc:40:8d:
b8:d6:be:d0:13:58:da:11:b6:09:c5:7d:e6:1f:ed:
ec:74:36:8b:e6:94:23:7f:0b:bd:73:1c:6c:1c:c8:
71:17:70:a0:43:10:83:5d:f5:26:0c:8c:f7:b4:aa:
25:1b:97:d0:dd:5b:07:83:48:30:4f:76:94:8b:52:
85:db:a2:0b:01:7a:13:ed:bf:31:06:6d:22:e2:a5:
7b:6b:c1:2d:cd:22:99:05:67:67:18:84:d9:33:4e:
7e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4F:9C:A7:D7:C7:9E:C2:BE:60:7A:13:CC:3C:83:2C:20:D2:C9:E3
X509v3 Authority Key Identifier:
keyid:88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:c9:84:8f:54:d9:0c:03:7e:b2:98:00:da:ab:c8:9a:08:58:
c0:a7:4c:99:e6:2e:5f:d3:e7:30:ba:bb:0b:ef:a8:be:5c:6b:
70:4b:ee:ec:c8:b6:f1:7a:11:76:38:27:fd:20:f8:fe:31:49:
d2:e6:6c:0d:55:6f:02:a4:54:91:3a:c2:22:9a:57:aa:b8:37:
57:c0:5d:ab:d3:50:dd:40:d1:8b:5e:88:d9:02:ed:0c:e9:63:
24:ff:c7:31:d6:55:b0:60:2c:46:65:69:46:43:f0:52:7c:70:
9f:01:30:11:4a:9d:04:b9:15:85:fc:c7:b8:23:92:74:01:b9:
06:fc:18:35:cd:c9:c7:58:ab:7b:45:62:7a:1d:1a:6e:94:8c:
00:6c:aa:01:24:ec:e2:59:08:98:77:ca:dd:a3:90:a8:8c:49:
1f:b2:d5:e1:f1:e3:d3:d8:1d:8b:dd:36:5d:bb:e5:30:92:cb:
fb:9d:6c:dc:b1:de:c5:8b:c0:78:b1:84:4f:96:1d:c7:cf:34:
9d:cf:e1:4f:96:a1:6b:27:0d:c3:ba:a3:ce:b1:a6:d1:df:41:
a7:02:f2:26:17:39:d2:eb:4e:08:d2:d6:20:81:e8:36:1c:d4:
e3:e7:2e:76:c2:8c:88:4f:b4:6a:79:c9:ff:e5:89:63:f6:ef:
5e:f3:00:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 04:56:46 2025 by rpki-client