Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
File: iBvRQCkk7CpkTo9U5plMtKyOJKY.mft (raw, json)
Hash identifier: H/EmSzE42QAvTurFzub7793DAMI+3Nm8KqlQEzWysvU=
Subject key identifier: 0D:43:82:EB:1B:B4:58:4D:4D:4B:9B:E1:41:C0:F9:1A:23:DD:5B:D8
Authority key identifier: 88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6
Certificate issuer: /CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
Certificate serial: 019921B08592E96B20075550C943A4A23EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
Manifest number: 0F37
Signing time: Sun 07 Sep 2025 01:00:40 +0000
Manifest this update: Sun 07 Sep 2025 01:00:40 +0000
Manifest next update: Mon 08 Sep 2025 01:00:40 +0000
Files and hashes: 1: 7ibZVwlfZ8ueZalO2s5Z7rPx0H0.roa (hash: Umej8EQSMHbvS0Ig+vK3MM7fmk+X8RtofGrUKqtGKkc=)
2: iBvRQCkk7CpkTo9U5plMtKyOJKY.crl (hash: 7SGrs07Hqd2Ywramk8NbxgQeW6QDvl0AYQJVeKYxdkc=)
3: kb-KEA3ZQd2MnkxgOKCpwGpH7ac.roa (hash: PVNmYw7m9lOZowA6tdOLawiD6fJdAXnNIKgq+V8sW40=)
4: vqIlQ51IAOGJFiTSPtHU72fvx08.roa (hash: zUhV3nwfP0jHHq/oTFIpW9P4yGQL+wJghHGlBxSt0/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:85:92:e9:6b:20:07:55:50:c9:43:a4:a2:3e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
Validity
Not Before: Sep 7 01:00:40 2025 GMT
Not After : Sep 8 01:00:40 2025 GMT
Subject: CN=0d4382eb1bb4584d4d4b9be141c0f91a23dd5bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a4:1c:a4:14:14:79:92:11:58:ff:a1:c0:c7:
cf:7c:87:48:f0:f1:de:e1:e2:4c:fb:c4:ae:58:02:
24:c0:f7:d7:d3:d8:d1:68:fe:8a:23:09:65:e6:2b:
c8:1a:48:86:3e:c4:10:c2:11:e3:df:31:33:e7:de:
9f:06:8c:ab:b9:07:cd:1b:88:f5:7d:0e:7e:26:9f:
9b:df:96:5b:ac:bc:2b:1b:6d:4c:a7:51:85:3c:43:
87:9b:27:94:0b:79:99:16:7e:33:5d:c7:eb:cf:9a:
43:fa:23:d6:0a:77:c3:31:61:b7:7d:87:f6:76:ca:
a1:7e:d9:ec:ee:7a:ce:5a:4d:47:64:00:30:e6:21:
dc:48:9b:4f:bb:55:f8:b1:d9:17:6b:ce:8d:0d:22:
6c:11:60:2c:9b:d0:96:c8:a8:6c:3d:4b:8a:8e:50:
cf:55:bd:d3:00:2f:d7:fa:eb:e1:a5:a2:c0:16:fc:
68:3d:e9:90:00:81:b5:10:18:8f:da:08:ff:b2:b2:
df:3b:96:16:06:8c:f2:14:8f:36:0e:f3:ed:28:ee:
2e:61:85:4a:03:03:77:7b:81:f3:e0:dd:bb:cf:2b:
c0:71:91:63:a3:8b:7c:b6:46:83:8d:8d:5a:f9:ca:
bf:57:1e:17:14:7d:24:6c:38:d7:8b:72:5e:b1:b1:
90:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:43:82:EB:1B:B4:58:4D:4D:4B:9B:E1:41:C0:F9:1A:23:DD:5B:D8
X509v3 Authority Key Identifier:
keyid:88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e6:2c:1a:8a:52:f1:a5:da:9c:60:27:2f:90:87:59:f0:76:
d7:aa:5d:60:20:36:72:0f:3e:2a:03:eb:6d:41:a3:14:db:e7:
19:48:62:9b:2d:c3:34:78:f1:01:76:62:54:c1:63:e3:47:ec:
53:c1:c6:e2:48:11:de:07:2a:54:fe:24:e2:2e:6c:fe:3a:f7:
ab:7c:69:31:6f:d9:60:09:75:2f:ca:c2:3f:34:1c:d4:98:14:
6e:48:fb:d6:a2:68:0c:18:7a:cc:dd:5b:53:0e:9b:e3:54:aa:
b1:cd:b3:91:63:da:c7:d9:8a:9d:65:0c:e1:27:76:7c:3e:35:
43:3a:80:7e:3d:49:54:5c:1e:11:48:3e:17:ff:fd:03:3f:f7:
ea:50:21:c3:a0:62:a7:f1:fc:e1:63:95:c3:b5:be:17:0b:53:
a0:7c:bb:bd:6f:c6:9e:d8:40:10:3d:a8:e3:d3:48:f1:d2:58:
7e:90:98:ae:c8:d9:c3:6a:0b:db:b2:7d:13:56:a6:ee:dc:d7:
da:36:c6:df:7f:7e:68:8d:fa:c6:cf:ab:a6:22:f3:4c:2c:c9:
d3:75:59:22:4b:53:09:bd:93:b6:b3:4f:0b:fe:26:c0:23:e1:
b7:ae:5f:17:6f:4e:52:f6:74:db:5b:bd:1e:dc:e1:f6:6a:cf:
82:97:46:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 03:37:04 2025 by rpki-client