
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
File: iwVEhe5ixvGTlhPLogZp7vRQT3k.mft (raw, json)
Hash identifier: SBw3zua83XxwQs3eEpx2pKYkT2sphDk4eVbDw6nDv8Q=
Subject key identifier: 90:F9:86:12:C1:D5:E3:CA:F3:A3:F5:B1:04:D9:41:B1:8C:FE:CE:39
Authority key identifier: 8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
Certificate issuer: /CN=8b054485ee62c6f1939613cba20669eef4504f79
Certificate serial: 01983C4E2EBD137DE66C97E2FBAD1F47B8F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
Manifest number: 0BEB
Signing time: Thu 24 Jul 2025 12:00:13 +0000
Manifest this update: Thu 24 Jul 2025 12:00:13 +0000
Manifest next update: Fri 25 Jul 2025 12:00:13 +0000
Files and hashes: 1: FmWPQsDQv1I31vsCB-XoPwOttAE.roa (hash: xjF9H58/BASj6CKq3v5pVooMgpKIb+h+UMw0XGNXQo8=)
2: W0D9WIXmr4DG_xEj-xUZT82-dxQ.roa (hash: fBvWuzB9wp05SoO5x+Vb/EneDFqD/kJHT0KgvrAsF24=)
3: aheTt6_pS0K22xA67glREELod8A.roa (hash: qWC2pzWM7a75jc5rNLOSS10p2/VCBqYrjSpxRU7D9zI=)
4: g_SxF-_E_VpwVrwNdmKsnzbOYaM.roa (hash: wSo0WU3KC/Wo2i+eQ7vlG4IlKtTmfnJLRouHYXZqnO4=)
5: iwVEhe5ixvGTlhPLogZp7vRQT3k.crl (hash: VDBn4PPPJKmJfbL5ID/dR8Sb5xZv5cMQjxbREW8/WK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 12:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:4e:2e:bd:13:7d:e6:6c:97:e2:fb:ad:1f:47:b8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b054485ee62c6f1939613cba20669eef4504f79
Validity
Not Before: Jul 24 12:00:13 2025 GMT
Not After : Jul 25 12:00:13 2025 GMT
Subject: CN=90f98612c1d5e3caf3a3f5b104d941b18cfece39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:02:1a:ab:61:9d:10:ca:8c:70:c7:9b:68:
ed:1e:7f:50:24:4d:54:2f:ff:9a:3f:3a:be:90:11:
cc:33:58:97:24:fa:16:99:7b:a8:d2:d2:6c:b9:2b:
1b:a8:d2:49:ff:9f:67:9c:53:a8:bf:95:c8:9b:31:
12:2a:ba:93:4c:15:91:d9:80:e9:fb:46:94:5a:de:
e5:23:e2:81:35:81:a9:8b:49:a1:20:a0:e7:1e:24:
ae:27:f4:d4:00:36:ab:f1:d2:2a:fb:76:00:ba:83:
b8:51:93:8e:5a:82:f7:7f:ff:c7:d0:f1:cc:c7:51:
e3:33:65:ec:b2:d5:aa:35:d3:ac:cd:37:2b:6a:b4:
4f:f5:5e:3c:06:a8:69:14:33:10:88:6c:18:fb:fc:
38:64:f3:a3:ed:a4:e9:c4:45:c0:91:16:0a:b9:3c:
bf:c2:b3:e1:00:73:b6:7c:31:80:21:79:54:3b:55:
73:ad:93:16:a2:18:f6:6d:a8:dd:95:d3:f5:9f:5d:
ac:5f:39:52:6b:c8:25:f6:82:af:38:44:dd:97:29:
13:a4:62:94:08:a4:2b:0d:dd:d0:e7:fc:c6:f2:b0:
d2:b4:a5:63:93:4e:c0:b6:25:58:27:8a:c3:b8:00:
1f:0b:70:c7:15:df:bd:85:d7:7d:90:1d:49:43:9e:
e1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F9:86:12:C1:D5:E3:CA:F3:A3:F5:B1:04:D9:41:B1:8C:FE:CE:39
X509v3 Authority Key Identifier:
keyid:8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d7:e1:24:c4:52:3c:af:72:16:4d:45:30:1c:8a:86:72:1c:
7c:72:1b:4d:85:4a:e2:50:90:a1:2c:17:17:5f:7e:04:9b:db:
44:dd:06:33:20:da:fc:bd:2e:17:9e:ed:2b:df:04:b1:1e:30:
2e:bd:96:34:f3:22:f5:dc:27:de:db:4c:9e:64:fb:ee:9d:18:
62:53:ff:5c:f5:ed:2f:4a:f1:47:e3:f3:d4:e8:00:25:1a:cb:
e7:54:b7:73:d6:8f:90:05:0f:00:8d:84:4e:88:59:dd:9e:e3:
18:eb:cb:62:e3:a1:96:5a:a8:93:0f:86:26:f5:81:f6:f8:22:
b8:68:04:89:fd:e0:d3:1c:7c:b1:c8:88:38:a7:34:e4:44:81:
20:ba:b2:80:90:0e:42:17:f1:4a:07:d7:f2:96:9a:4d:23:b7:
31:60:c4:a4:d5:4b:fe:3c:19:9c:89:ea:4d:39:3e:cf:0a:60:
b0:ae:58:17:d3:05:9c:98:f8:ce:87:81:5b:68:b4:24:7c:50:
53:29:46:65:2c:6a:01:60:03:11:3f:14:d2:f3:a2:0d:88:22:
b7:2b:86:a1:78:9c:f9:1a:6a:8b:67:b1:a4:fa:ce:b2:f5:20:
61:3b:db:e0:b6:c6:72:d1:69:21:d3:ca:42:2a:b9:62:b4:5c:
af:fe:18:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 20:19:14 2025 by rpki-client