Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
File: iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft (raw, json)
Hash identifier: e9QgKgVHRY+kyLAflvh/ubHepCgcuaYoq8bbJGbBdTQ=
Subject key identifier: CF:01:9E:33:5C:ED:27:42:4D:70:E1:0B:F9:EA:88:CA:0A:79:75:FA
Authority key identifier: 88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
Certificate issuer: /CN=887e81ba84344598c61462833aadf3204eae087c
Certificate serial: 0199394ADFA0C786C8710E200D4703DE3FFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
Manifest number: 1683
Signing time: Thu 11 Sep 2025 15:00:32 +0000
Manifest this update: Thu 11 Sep 2025 15:00:32 +0000
Manifest next update: Fri 12 Sep 2025 15:00:32 +0000
Files and hashes: 1: G8pM4BO4SDFuG0O0aHGZFSHu0bY.roa (hash: z8nYleBnvbZLzPZcC36R6KcHw5MKTfcdnhsG0y6RlGM=)
2: iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl (hash: 9B3fk0AEgXTW7fhguQWknvT1qrNOi2DRglmRvShdwPQ=)
3: shLVoHyiaZbg7eg2YqA4ky_a-CU.roa (hash: eojzTxeSDWN8wwV7q5opIiiSFcYnrY9hg5to5e5Gp1s=)
4: xifnCCeMNH18n0eWMqga1pgyjCM.roa (hash: apTXD8raL3qZhnZiaGrtnxJWUf2/cGGa8lnT/pZJ1So=)
5: ywH8wQjufiysHP5OXijDjTOBrH4.roa (hash: Kuw4rCVLsz9XQ+KOtke/DWSrK02REb1j13WO/v4sxqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:4a:df:a0:c7:86:c8:71:0e:20:0d:47:03:de:3f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887e81ba84344598c61462833aadf3204eae087c
Validity
Not Before: Sep 11 15:00:32 2025 GMT
Not After : Sep 12 15:00:32 2025 GMT
Subject: CN=cf019e335ced27424d70e10bf9ea88ca0a7975fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d2:42:99:84:21:28:f0:55:61:fe:f0:3a:bf:
16:c5:37:aa:ce:e4:2e:55:f2:8e:87:28:c4:f1:f7:
8c:6c:67:a0:76:ad:62:e6:2d:7a:60:3b:33:9f:c8:
6d:4e:44:1c:6f:c0:82:0d:2b:7e:dd:67:a8:26:77:
26:d5:33:77:c1:8e:de:81:8e:b8:44:bf:60:70:c4:
3d:b7:53:ae:25:b4:86:44:c8:62:2a:b7:33:0d:53:
95:5c:75:5d:38:57:b8:a1:19:42:18:98:95:e6:db:
37:f3:4f:74:69:35:7d:91:91:f6:40:64:99:57:9e:
bc:4e:ca:ed:8b:af:4a:f7:5e:80:4f:99:12:ef:b0:
0d:91:56:b0:cd:79:33:93:05:15:32:9c:ed:0d:81:
d5:91:e2:94:19:a9:2d:3c:6f:6f:c3:8a:70:94:ae:
d3:d6:66:20:39:3f:6e:3c:da:59:c0:49:fe:ad:1c:
ec:a4:61:f7:90:f8:1e:8b:ce:5e:a0:45:16:bf:6b:
6b:23:72:10:6d:d2:04:74:43:77:13:2d:14:0b:70:
0d:9d:4d:ba:91:d5:75:a2:85:73:86:a4:b0:5c:cd:
68:9f:26:52:0f:ca:29:f6:c0:e8:94:31:97:4c:b7:
18:82:9e:74:11:c2:4c:59:40:02:84:f4:91:91:3b:
90:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:01:9E:33:5C:ED:27:42:4D:70:E1:0B:F9:EA:88:CA:0A:79:75:FA
X509v3 Authority Key Identifier:
keyid:88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a9:aa:56:c6:58:aa:ea:fc:f2:d8:39:32:16:f2:15:9b:ba:
5f:ac:82:44:0e:16:bc:36:48:41:96:5e:65:bb:d5:32:dd:9c:
dc:86:6a:ed:c9:b2:d2:ee:1e:88:b3:d6:0a:e0:bc:04:f5:fc:
ee:b8:74:ba:e2:2f:f9:ae:6e:78:10:39:79:a4:66:3d:ac:f6:
0e:09:0a:78:ab:a6:0c:89:fd:b6:13:9a:44:0c:46:59:b6:fc:
28:ce:ed:25:d0:18:5e:8a:19:3e:5f:b9:fc:22:1a:3e:94:77:
31:55:a1:cf:c7:c0:4d:fd:87:ba:6e:99:5c:a7:15:7d:19:9f:
ba:c2:95:e7:a1:2f:e4:a9:65:15:13:3a:96:12:8b:df:6b:a5:
e6:07:22:2a:b9:31:1a:c4:83:66:d5:fc:be:62:a0:8a:40:2e:
da:3d:60:ec:66:b9:e3:25:6e:7e:bd:4e:2d:9b:16:dc:8b:e5:
53:00:40:3a:db:fe:e5:81:b3:9a:f7:8b:ec:6b:5b:c7:95:78:
d2:ee:a9:f3:02:70:15:e3:2d:2f:2e:1f:53:60:f8:4c:15:21:
c5:6f:34:4b:a2:aa:99:49:66:f0:fd:eb:be:16:4e:b8:1d:a0:
08:02:4f:5d:a3:df:16:5f:01:50:8a:9d:91:bd:67:a1:d3:17:
33:87:72:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 19:10:13 2025 by rpki-client