Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
File: iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft (raw, json)
Hash identifier: oodtE4XEsGzJUeUEjBXoEAj5c/pGD+2u2nK8lN2XOOU=
Subject key identifier: 85:BA:AD:5C:6E:DC:4B:8F:7E:11:F7:4D:F6:AB:55:5F:66:79:9F:D6
Authority key identifier: 89:53:64:DD:8F:F7:30:A9:08:B0:9B:5F:99:13:C1:53:FC:16:AA:3C
Certificate issuer: /CN=895364dd8ff730a908b09b5f9913c153fc16aa3c
Certificate serial: 0199239F0CEEFCC2218E2EF43ABCEBD0C4FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
Manifest number: 1675
Signing time: Sun 07 Sep 2025 10:00:49 +0000
Manifest this update: Sun 07 Sep 2025 10:00:49 +0000
Manifest next update: Mon 08 Sep 2025 10:00:49 +0000
Files and hashes: 1: iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl (hash: +7oT6aKPAYUGYZwao0Vlh3mO7ko66j685dHgb49kSXQ=)
2: vZncObou1n1Gou3XB_i7Ru4V5WA.roa (hash: iik1zhTFoCIgqbBLWbxX8UR2ffHIMvhG03bvL/Xp/YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:0c:ee:fc:c2:21:8e:2e:f4:3a:bc:eb:d0:c4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=895364dd8ff730a908b09b5f9913c153fc16aa3c
Validity
Not Before: Sep 7 10:00:49 2025 GMT
Not After : Sep 8 10:00:49 2025 GMT
Subject: CN=85baad5c6edc4b8f7e11f74df6ab555f66799fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:eb:d7:97:b4:66:20:58:71:2b:72:f8:70:96:
e2:a8:3e:d4:25:f2:a3:ac:33:28:a2:f1:07:00:c9:
13:3b:be:a8:ac:8e:ed:78:02:79:4d:01:dd:bb:a3:
11:19:05:d5:18:e5:e5:f0:d3:88:59:5b:08:6c:f0:
49:28:db:32:9e:62:6d:7a:da:5f:80:30:ca:a2:55:
9b:a6:4e:73:d1:00:6a:aa:d1:51:32:50:bc:a8:f7:
17:33:28:bf:14:f9:f9:7d:60:b0:7a:c4:13:a4:68:
6a:46:8a:38:95:81:3e:bd:38:41:e5:c4:2d:77:ba:
62:99:7d:01:df:48:d1:53:56:3e:87:0f:56:91:d1:
66:2b:3e:64:df:9e:01:54:3d:dc:89:82:6f:5a:1a:
e0:55:10:bd:f5:13:7c:48:6d:d9:b5:f7:5e:59:69:
32:a9:b2:07:22:37:f5:3f:79:c5:20:d1:75:5f:c6:
77:84:c0:62:9e:c3:e6:b2:6d:38:a8:e6:29:c7:b5:
16:5f:03:7e:2f:4e:dd:22:3b:19:6c:68:bc:b2:14:
a6:36:1d:41:be:42:11:17:2d:28:6a:01:40:27:10:
4f:c3:f0:0f:d9:26:53:7f:fe:09:1b:bf:41:e5:d3:
2c:f6:07:28:43:17:6e:b7:c4:67:79:8c:24:b1:07:
0c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BA:AD:5C:6E:DC:4B:8F:7E:11:F7:4D:F6:AB:55:5F:66:79:9F:D6
X509v3 Authority Key Identifier:
keyid:89:53:64:DD:8F:F7:30:A9:08:B0:9B:5F:99:13:C1:53:FC:16:AA:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/922bcd-f1ad-4d63-8243-294b1aa14866/1/iVNk3Y_3MKkIsJtfmRPBU_wWqjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:76:28:3f:b0:b3:fb:9e:6a:c0:00:6e:73:c8:7d:0a:ba:c4:
d6:96:94:80:f2:d7:73:e1:4f:b2:1a:22:e3:55:eb:60:e7:91:
f6:bb:fc:31:01:95:94:22:5f:06:a6:c7:3f:fc:db:99:0a:21:
75:e8:78:e8:28:00:4d:73:72:36:d4:1a:47:95:bc:ca:f3:92:
e0:f1:a4:ce:b4:b7:5b:00:58:6c:9f:64:96:40:15:c3:58:79:
a6:0f:17:a5:b9:97:93:a0:cd:f5:e5:be:d2:87:27:ff:0e:4e:
93:2f:44:69:48:31:11:0a:f1:b1:dd:94:67:66:b9:ef:81:22:
f0:c3:f6:11:5b:8e:de:53:d4:4a:3e:19:d2:45:cb:c1:28:10:
ec:93:45:c7:c2:0a:7f:df:7b:15:5a:2d:a4:42:ea:ad:fa:c7:
ab:06:ae:4d:2c:9b:c0:28:72:6d:41:10:2d:83:ad:d5:34:43:
32:50:f4:da:c6:f2:ca:dc:06:cf:e0:cf:a5:ab:1c:1d:cf:cf:
ea:0e:39:7d:2a:b4:c8:67:80:cf:cf:6e:4f:f5:84:b2:29:d0:
50:9d:7c:80:20:87:8b:7a:86:cd:8c:f4:35:ba:97:d2:dc:79:
4e:10:e0:d8:9c:75:de:cc:a2:ee:08:61:38:2e:07:ab:fc:2d:
a6:5c:1e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:18 2025 by rpki-client