Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
File: IAs7I0VxCglvajTX8Im-seP8U4g.mft (raw, json)
Hash identifier: Dp8vBj/zl45mVN2PdRIf23CWvVVUTHfa/gUruiCK0HY=
Subject key identifier: 36:E6:26:BD:79:15:44:A1:60:07:2C:09:98:66:A7:47:85:C2:5A:52
Authority key identifier: 20:0B:3B:23:45:71:0A:09:6F:6A:34:D7:F0:89:BE:B1:E3:FC:53:88
Certificate issuer: /CN=200b3b2345710a096f6a34d7f089beb1e3fc5388
Certificate serial: 019922FA0D3D96ED2D31A37F88B0CF4A84ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
Manifest number: 0493
Signing time: Sun 07 Sep 2025 07:00:36 +0000
Manifest this update: Sun 07 Sep 2025 07:00:36 +0000
Manifest next update: Mon 08 Sep 2025 07:00:36 +0000
Files and hashes: 1: 3twUXXIP_KmiWrUBvyT5612yZdA.roa (hash: i8TOwD+JQVgsZynDBd1FE+mCLj4YL4GBf0bnlreCNh4=)
2: IAs7I0VxCglvajTX8Im-seP8U4g.crl (hash: nQP7JioHJRVn5we5kRIDKEQ3mO9UV8/yaOEhSGvpcpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:0d:3d:96:ed:2d:31:a3:7f:88:b0:cf:4a:84:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200b3b2345710a096f6a34d7f089beb1e3fc5388
Validity
Not Before: Sep 7 07:00:36 2025 GMT
Not After : Sep 8 07:00:36 2025 GMT
Subject: CN=36e626bd791544a160072c099866a74785c25a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:21:78:66:bc:a3:32:b7:76:a9:e1:33:0f:36:
19:0f:25:78:89:dc:f0:5c:91:01:70:b9:4a:51:b4:
66:00:b4:e7:c3:4c:de:42:2c:b1:4d:76:c0:fe:29:
0b:21:c0:01:97:5b:c4:4f:9b:d1:38:64:b1:1e:b0:
81:93:6e:e7:ed:16:98:74:06:2d:36:a0:be:9a:a5:
39:e3:fb:fa:e0:9b:63:ee:92:ef:85:53:b3:82:22:
cf:02:c6:6a:dc:1b:6f:2b:0d:00:c7:a3:ba:3b:25:
2a:1c:6f:71:e7:3d:37:a9:a1:a5:20:9b:e3:51:f2:
c1:35:07:57:e3:82:c4:9c:1c:be:20:01:a6:bc:80:
3c:a2:9f:23:95:eb:99:56:1a:61:cc:dc:65:90:85:
f4:bd:c9:61:2a:49:12:14:b3:77:4b:90:21:3d:f5:
71:ae:6c:4e:e9:5a:b7:b8:f3:d6:ce:24:06:ab:68:
8c:78:6b:ad:cb:41:d8:43:f0:9d:d9:38:b6:2b:93:
38:1a:d9:2d:c2:ef:b6:31:a0:54:2a:c8:d7:3f:eb:
02:ab:b1:bc:83:fa:96:0d:1f:ac:70:1e:98:92:17:
2f:71:0c:b3:9a:0c:21:25:a3:46:7d:e0:e1:46:0f:
88:83:3d:c2:45:fc:9d:c4:52:3f:83:62:37:1c:e4:
99:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E6:26:BD:79:15:44:A1:60:07:2C:09:98:66:A7:47:85:C2:5A:52
X509v3 Authority Key Identifier:
keyid:20:0B:3B:23:45:71:0A:09:6F:6A:34:D7:F0:89:BE:B1:E3:FC:53:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAs7I0VxCglvajTX8Im-seP8U4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df9a4c-79fe-4004-9413-4b47e8f8c86f/1/IAs7I0VxCglvajTX8Im-seP8U4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b6:46:9c:4d:68:9a:68:c5:b0:ab:89:88:21:96:b7:b7:46:
8b:fe:19:4d:36:4e:a4:91:3e:39:6c:51:5c:17:95:dd:3a:0e:
26:8f:de:ad:54:3e:f2:bf:68:d3:44:f1:62:c4:25:f7:df:a9:
83:ee:2d:e5:fe:bf:69:91:cf:16:c7:3b:76:65:a6:9c:5a:de:
38:b5:75:4f:c0:b8:ba:76:61:37:27:18:c9:79:d6:59:fb:24:
8f:e6:65:f0:14:ac:49:05:a2:af:f5:ae:0b:08:12:eb:eb:48:
a1:ec:83:83:ae:c8:9f:90:5d:a4:70:f9:05:b7:de:cd:79:8e:
97:f7:be:fe:8a:db:70:01:a6:58:f0:3e:fd:0d:da:3f:82:b6:
8d:b4:4f:ad:2b:65:15:d5:ad:c5:4e:95:3b:28:b3:3d:41:6e:
3c:9d:88:d3:b1:49:e7:c6:b7:d8:2d:5b:56:7a:75:e9:5b:fb:
64:8d:73:45:3c:d7:e6:3d:59:6e:88:ba:41:21:fb:63:a3:2e:
12:6d:f8:d1:8e:32:05:36:da:ce:28:46:c7:54:35:fa:8a:bc:
a0:c6:22:cc:4d:d0:73:30:f9:b4:fa:44:78:56:f2:47:1c:fb:
a6:3b:da:6b:18:61:4a:7c:cf:0f:d1:06:ab:83:54:b7:78:a2:
66:56:9f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:16 2025 by rpki-client