Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft
File: irCobN7x1oVdGd50F1Nzzcga78w.mft (raw, json)
Hash identifier: k25NBf450vA2xlf+tNqOymk9wPVb1mbj5/Bwk4+waYU=
Subject key identifier: AB:D2:B8:63:91:24:14:24:3F:6B:77:67:5B:A0:AA:3A:75:55:81:5C
Authority key identifier: 8A:B0:A8:6C:DE:F1:D6:85:5D:19:DE:74:17:53:73:CD:C8:1A:EF:CC
Certificate issuer: /CN=8ab0a86cdef1d6855d19de74175373cdc81aefcc
Certificate serial: 0199239FA28B0CC42312CCBB22518F850D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft
Manifest number: 0127
Signing time: Sun 07 Sep 2025 10:01:28 +0000
Manifest this update: Sun 07 Sep 2025 10:01:28 +0000
Manifest next update: Mon 08 Sep 2025 10:01:28 +0000
Files and hashes: 1: iDD0dIi8FZu6HOhyS7tjvaUtgQE.roa (hash: 0JHKcL5Vnxkq7EPVZmPbz9exzTMRAeW5CIg2FGWWjPE=)
2: irCobN7x1oVdGd50F1Nzzcga78w.crl (hash: INp2JikeAXUCVJYXnJRVZhnacr7jWL0cLw3LgJJhO2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft
rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:a2:8b:0c:c4:23:12:cc:bb:22:51:8f:85:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ab0a86cdef1d6855d19de74175373cdc81aefcc
Validity
Not Before: Sep 7 10:01:28 2025 GMT
Not After : Sep 8 10:01:28 2025 GMT
Subject: CN=abd2b863912414243f6b77675ba0aa3a7555815c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e7:1e:b0:8a:91:ab:ca:82:c7:97:be:21:53:
7a:e4:bb:8d:f1:07:c7:85:91:38:58:dc:54:64:8a:
62:e7:c5:92:57:95:78:af:0e:6d:08:a4:ab:2d:17:
03:fe:c1:79:43:9c:d9:21:c3:2c:b7:ad:cd:92:1a:
94:2f:30:71:17:08:d8:71:2a:31:07:ef:7b:61:48:
d4:4d:e4:df:10:82:9d:32:e7:80:64:1d:ef:6d:4f:
93:41:36:3e:65:9f:50:09:43:59:62:da:e4:cf:a7:
c1:c0:ff:61:64:7d:dd:f9:8a:f0:ab:ce:d1:76:fe:
bf:81:7d:fc:cd:ec:54:ee:df:b3:33:c1:78:a0:82:
4a:6d:60:92:cb:02:61:af:9b:84:db:cc:7f:ca:6e:
92:93:fb:00:ec:06:37:be:89:13:06:08:7d:fd:4c:
30:c3:39:bd:ce:c8:17:b4:3b:5a:19:c5:44:9b:24:
a1:74:82:73:8d:9b:79:de:15:05:2c:27:9d:f2:45:
b3:79:bf:9f:bd:87:c8:03:07:de:72:16:86:15:fe:
31:ec:54:8f:35:72:74:51:0f:c2:34:b3:d1:3e:8c:
5a:18:ec:fc:25:fe:a8:ca:63:7b:b4:1c:a1:5e:19:
78:89:e4:01:43:d7:46:d8:d2:30:94:30:b1:5f:06:
b0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D2:B8:63:91:24:14:24:3F:6B:77:67:5B:A0:AA:3A:75:55:81:5C
X509v3 Authority Key Identifier:
keyid:8A:B0:A8:6C:DE:F1:D6:85:5D:19:DE:74:17:53:73:CD:C8:1A:EF:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irCobN7x1oVdGd50F1Nzzcga78w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f8237c-e04a-4ddd-8ceb-d0f249bc3fed/1/irCobN7x1oVdGd50F1Nzzcga78w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:39:02:5f:75:98:1f:ab:93:60:8b:90:11:2d:2f:9d:dc:85:
ef:f2:65:dd:ef:79:1f:ba:21:59:25:8c:67:dd:30:73:ad:07:
bf:50:c1:69:e1:a2:29:6c:2b:c7:c1:30:6e:e3:30:f8:29:c0:
0b:83:81:18:55:c1:d6:7a:35:59:e6:1d:4f:76:dd:67:cd:ea:
0e:77:04:de:a8:9b:f5:05:fc:af:3d:2e:f9:d4:09:8f:80:a4:
43:0f:11:83:bd:e7:51:1b:c0:83:ab:98:d7:86:bc:73:77:dc:
57:44:94:02:a0:60:13:ea:e3:3b:18:ec:bc:72:d1:33:1e:6b:
34:e1:21:21:80:14:f0:d1:9b:75:38:3e:bc:9b:af:9f:83:c6:
2b:c1:d4:f2:9c:66:7d:7e:b5:df:90:f1:d3:8d:e9:70:8c:11:
98:e3:6a:47:01:e9:76:6a:47:7f:55:ec:71:e8:d9:e1:b5:70:
10:59:9c:7d:75:14:e2:ad:7b:b2:6e:5f:25:1a:90:76:d2:6d:
ed:72:ac:3c:bd:ff:9d:12:34:91:a7:8d:2a:c6:9c:f6:c1:62:
7c:35:4d:29:18:d6:a1:89:08:d0:81:6c:91:3e:46:c7:4a:76:
80:26:1e:73:eb:c1:36:cc:d7:1e:d1:36:54:d6:ed:35:c9:0a:
c1:a8:03:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:38:57 2025 by rpki-client