Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
File: iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft (raw, json)
Hash identifier: 0Jh77t8uBH1aHK4t70STN6Jec0ORr00Xkm59hpVN/Cw=
Subject key identifier: DD:7A:09:BA:5C:40:A6:BF:5A:89:F5:B6:58:04:31:44:3B:FD:43:67
Authority key identifier: 8A:A1:FE:9A:4C:03:D0:15:AE:C9:74:E2:D2:97:09:A9:79:EB:82:F1
Certificate issuer: /CN=8aa1fe9a4c03d015aec974e2d29709a979eb82f1
Certificate serial: 019867A6CA3FF52E47D83C34E0E3A7EE5C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
Manifest number: 0EE0
Signing time: Fri 01 Aug 2025 22:00:40 +0000
Manifest this update: Fri 01 Aug 2025 22:00:40 +0000
Manifest next update: Sat 02 Aug 2025 22:00:40 +0000
Files and hashes: 1: 03mz0LQjzt1ORtulSs8-RgKcMnM.roa (hash: o7HH4upfGHhmSB89uCr8oSYNHbC8ZdA+S7MeD1sbYe4=)
2: 2Qr14eAD37nuU_5fo7_UeplXIWU.roa (hash: usgUNw1aFsserU4Vh7SHZUsSrOPQTJ2Wa8CALhVnFWI=)
3: XcS7NtVySUtUzIKZEZ4PM2dCvo0.roa (hash: RI3/B49k5u7aP42xJ7PCHqmPzqodpebWnjl4/ch5Tn4=)
4: iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl (hash: Saoxe6VvlQhVA9HNlAmDmkuTrFqglRUam1NQ2JTSqe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:67:a6:ca:3f:f5:2e:47:d8:3c:34:e0:e3:a7:ee:5c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa1fe9a4c03d015aec974e2d29709a979eb82f1
Validity
Not Before: Aug 1 22:00:40 2025 GMT
Not After : Aug 2 22:00:40 2025 GMT
Subject: CN=dd7a09ba5c40a6bf5a89f5b6580431443bfd4367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:73:de:c6:d4:6b:49:25:30:6a:34:1f:4c:58:
50:85:5c:6c:23:3d:bb:49:f3:80:b2:ee:b5:b3:66:
b2:86:ed:74:ce:ea:59:34:d6:d7:15:8a:60:06:63:
3c:a5:2e:40:87:05:2c:f5:c8:66:ec:33:3c:a6:8d:
7d:96:f9:f3:32:14:65:79:3f:5e:8d:28:61:02:a1:
2f:ae:61:89:0b:58:1d:c7:ba:df:38:49:0c:e0:10:
95:7b:64:35:e5:8e:41:98:de:8d:b5:64:34:49:27:
87:d0:81:6a:02:55:e1:9e:b4:4b:aa:16:16:a3:6b:
8f:d8:2d:9f:c1:a3:e2:24:19:8d:78:04:a4:f0:f1:
94:df:44:6e:ef:f1:80:53:bb:5c:e3:f8:3e:75:84:
a3:13:6e:f0:35:43:fe:8a:e5:11:90:e9:b0:4c:f4:
cb:ed:e0:17:4e:b1:34:ec:76:e4:42:c8:3c:87:be:
2f:6b:ad:a0:1a:7f:70:8f:d8:d3:af:59:15:f6:87:
c5:bd:e2:9c:b8:82:87:09:27:d6:e3:58:ca:a3:d7:
3e:d5:a6:cc:15:a8:31:2d:86:3b:09:c7:c4:1d:87:
99:e9:30:2b:b9:83:04:c7:87:33:1d:cf:56:b9:fd:
30:b1:1f:8c:c7:9f:8f:04:91:ae:cb:0a:67:94:0f:
ae:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7A:09:BA:5C:40:A6:BF:5A:89:F5:B6:58:04:31:44:3B:FD:43:67
X509v3 Authority Key Identifier:
keyid:8A:A1:FE:9A:4C:03:D0:15:AE:C9:74:E2:D2:97:09:A9:79:EB:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e6:b8:91:75:64:50:d4:85:42:ef:8a:1c:1e:8e:bc:e9:ea:
89:37:d5:0d:83:2b:f5:97:6d:1e:6a:6e:6e:d0:ea:35:0c:2d:
ff:b1:e1:a5:1a:76:cc:44:82:45:0c:48:e4:72:cf:fa:f7:bd:
78:4c:43:17:2f:1e:4e:7f:0d:6c:33:76:41:fc:30:19:fb:19:
c0:c3:19:1b:1b:11:fb:3b:26:eb:28:0d:f8:84:ed:88:bc:67:
cb:8c:29:53:d2:2a:3d:e5:bd:bf:73:d7:46:cd:56:ad:d5:30:
04:60:2e:51:c9:af:58:7a:c5:08:94:ef:f3:e2:64:62:27:84:
aa:a7:82:fb:fa:c4:fd:a1:54:b9:3f:78:b3:6f:ff:21:48:11:
e0:f6:66:e8:33:22:d3:87:53:4a:19:91:fe:e0:86:8f:b3:12:
66:91:f7:d6:57:25:e5:12:e3:94:ea:e4:87:c1:71:6b:40:56:
f1:d8:ce:de:50:c1:cd:3c:df:6d:05:08:b9:3d:89:0b:bd:f3:
69:09:f5:52:30:00:8f:a1:68:25:63:1f:3f:e3:a0:55:78:7d:
82:84:21:25:f3:9d:81:47:f5:17:c0:a1:b5:15:12:54:84:3f:
ee:fc:84:76:12:40:77:55:48:da:40:ec:50:8a:7d:d2:d2:5b:
92:cf:c7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 07:00:33 2025 by rpki-client