Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
File: iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft (raw, json)
Hash identifier: 460DuwMCQthIH/iLsHohJ+qb0UmcHdP82V7BfRwYAvc=
Subject key identifier: DF:BD:73:B7:A0:E8:A0:59:5D:20:54:FD:F0:22:56:7C:23:3D:03:30
Authority key identifier: 88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D
Certificate issuer: /CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
Certificate serial: 0199221EEEC2F40B001162B32339265D0333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 03:01:16 +0000
Manifest this update: Sun 07 Sep 2025 03:01:16 +0000
Manifest next update: Mon 08 Sep 2025 03:01:16 +0000
Files and hashes: 1: RVfUxaKwVOxHFRtJ1M0yTsL4WXU.roa (hash: pKnXAopaFCsi1rLxZMLLXoTv9xoOBoXWRjgeegBslqw=)
2: iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl (hash: +d3FYu+3j5FPWS4PhAb78ZOoODITMgqUeC5kiuqq91o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:ee:c2:f4:0b:00:11:62:b3:23:39:26:5d:03:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
Validity
Not Before: Sep 7 03:01:16 2025 GMT
Not After : Sep 8 03:01:16 2025 GMT
Subject: CN=dfbd73b7a0e8a0595d2054fdf022567c233d0330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:68:e1:db:44:0f:68:81:2c:b9:ef:10:64:7e:
fe:c5:e3:ed:6d:5b:39:d8:d0:c7:b7:a6:1f:43:22:
58:f8:3a:12:e7:33:80:de:d6:84:c6:1a:92:37:30:
49:bc:44:b6:b7:c4:97:ff:f5:55:4f:af:51:1f:0c:
1a:4b:90:bf:41:3e:57:ca:50:f9:4c:7d:a8:90:7b:
b1:73:5a:4e:2b:d9:64:36:c4:a5:f2:29:26:cc:33:
dd:0b:53:41:40:f6:84:1b:17:0a:eb:d8:7c:2e:5b:
53:0c:9c:15:98:25:45:2d:c8:10:b4:f2:a7:55:0b:
5a:e5:18:9b:1f:2a:33:b2:d2:8c:58:92:08:e9:80:
4f:1e:c2:d9:df:88:8c:5a:87:b5:12:a9:bb:a4:8f:
cf:b8:3c:18:7c:56:cf:97:51:b7:5f:7c:14:bb:60:
b0:b2:84:9b:14:0d:19:ed:ff:5d:6b:e0:83:0f:70:
88:06:a8:6a:2c:c3:49:75:f6:f4:a8:49:0e:4e:3c:
e1:a0:db:08:b2:5e:50:41:4a:58:8f:8a:8f:f9:c9:
0c:b2:d2:fc:30:30:72:2a:9c:8c:6d:42:4c:76:bf:
37:f4:fd:9f:97:5f:52:7b:38:71:ef:a5:d0:ee:ea:
16:3f:8a:e9:07:52:a9:9c:2e:8f:d2:5c:b0:eb:e1:
19:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BD:73:B7:A0:E8:A0:59:5D:20:54:FD:F0:22:56:7C:23:3D:03:30
X509v3 Authority Key Identifier:
keyid:88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:4a:21:0f:42:9a:7d:2d:ba:43:64:d3:97:85:ee:1d:73:7d:
0f:13:c1:04:63:25:4f:a8:34:3b:06:80:28:6f:93:84:f9:c0:
4f:7e:2d:f5:5e:de:e5:27:e7:a9:36:52:2f:f7:64:42:41:1f:
2b:31:36:3e:89:f4:cf:f5:6e:06:8b:0a:1a:4d:84:35:ab:10:
76:f0:60:02:29:b8:24:2b:bf:96:d0:44:15:74:af:6d:22:67:
85:4c:77:91:34:99:00:b6:e0:4d:ef:d6:7e:d7:51:a7:96:3f:
f1:c2:65:1b:d8:61:0f:ae:cb:ee:dc:ac:0d:97:b0:c0:5b:58:
fa:33:4d:83:41:8c:f9:b7:1e:f3:7b:db:8b:16:73:20:20:52:
11:e8:4b:02:29:08:76:cc:6a:cb:2a:4a:5f:53:39:88:0c:ad:
a8:c6:0c:7b:6e:44:2b:2f:71:49:d7:a4:49:79:19:36:39:f9:
2f:0f:e0:70:e8:be:a3:68:a2:6c:af:6c:6c:05:a3:64:fc:a4:
4e:b8:65:5f:cd:97:c1:e8:db:13:7a:85:92:f3:6f:2d:91:0f:
25:ae:01:57:c7:21:74:ef:2d:c4:55:81:ff:37:f7:66:96:46:
94:a6:a4:ba:f2:fe:2a:33:16:c8:0a:6b:ad:8d:02:ad:3a:37:
3b:6e:36:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:28 2025 by rpki-client