Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
File: onIAVE-TpnX8jHhBhWmA44o1Kcs.mft (raw, json)
Hash identifier: oXaUEroamMxwxSecdpefFzoY6giGOCp5ehYNRUqw9YQ=
Subject key identifier: F9:52:CD:92:51:86:AA:E5:E6:2D:35:2E:08:84:3E:BC:C0:95:FD:DB
Authority key identifier: A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB
Certificate issuer: /CN=a27200544f93a675fc8c7841856980e38a3529cb
Certificate serial: 01992D46AC806164EE2226A883A7E250E0AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
Manifest number: 1112
Signing time: Tue 09 Sep 2025 07:00:30 +0000
Manifest this update: Tue 09 Sep 2025 07:00:30 +0000
Manifest next update: Wed 10 Sep 2025 07:00:30 +0000
Files and hashes: 1: WsJxTcqQMdNcfxDwYxL96RxQkLE.roa (hash: AzUS2a/hUE19ESDc/skGDA/ldB6bGDxX9L5RO7/taEk=)
2: onIAVE-TpnX8jHhBhWmA44o1Kcs.crl (hash: gwxWqOG5MHKV2961C/CEPC7eBCFm2ZWgmFAJygaJDQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:46:ac:80:61:64:ee:22:26:a8:83:a7:e2:50:e0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a27200544f93a675fc8c7841856980e38a3529cb
Validity
Not Before: Sep 9 07:00:30 2025 GMT
Not After : Sep 10 07:00:30 2025 GMT
Subject: CN=f952cd925186aae5e62d352e08843ebcc095fddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b7:8a:e4:f5:fe:f1:c5:4f:12:32:d7:25:db:
ab:bd:a9:38:15:f0:ad:82:d4:f0:a1:ca:b3:e1:2a:
2d:af:a9:eb:b8:60:a2:c5:f1:1b:56:7f:07:4e:b0:
f4:dc:12:f0:65:5e:e8:29:3c:6b:64:5b:87:ff:bd:
0b:53:75:11:91:37:76:cd:5b:79:b8:82:f0:aa:48:
46:95:7a:27:50:13:f4:a3:79:d7:ba:5d:d4:7a:21:
d9:e1:22:be:a1:9b:59:f4:a0:f1:74:b9:ff:98:a8:
62:48:25:e2:6f:dd:4e:d0:61:f0:f5:2a:27:42:5c:
47:dd:2c:7a:99:31:71:6c:59:18:34:f9:bb:e9:94:
a9:8d:8c:46:75:f2:9d:f2:b8:7f:1e:be:a3:52:1b:
a7:de:6a:71:48:a0:88:d7:65:24:bd:d4:80:fe:ee:
7a:92:4b:2e:fc:f2:20:30:3b:94:3d:27:e6:10:09:
7e:a1:28:3e:65:88:3c:d5:60:9c:88:f8:15:03:36:
c2:5e:d8:67:84:75:78:ac:93:1e:69:ba:9c:e4:f0:
c5:05:4f:d5:25:bf:a8:d5:cb:15:7d:4c:46:8e:38:
7b:b6:0e:b3:07:f0:30:49:be:89:b2:4b:5f:69:9f:
c8:2e:39:f1:0f:db:b9:50:1d:aa:93:fa:89:1c:95:
76:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:52:CD:92:51:86:AA:E5:E6:2D:35:2E:08:84:3E:BC:C0:95:FD:DB
X509v3 Authority Key Identifier:
keyid:A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:1b:e0:65:0c:36:8f:9d:ee:1c:8a:7e:3a:46:d4:20:39:bb:
14:53:50:c5:48:d5:43:ec:84:48:38:5a:7e:00:fb:f3:14:da:
92:2b:15:54:b5:6e:a4:22:cc:9e:ca:90:c4:21:21:6b:e4:8d:
6b:2e:bd:8b:c4:5d:f3:ac:ce:76:7d:fe:83:23:08:d0:02:e0:
1b:1b:6e:96:43:02:b3:4e:83:26:a5:82:90:5c:6c:d5:58:a7:
6a:d0:3b:2c:ec:e6:df:94:86:53:3d:54:1f:92:30:7d:1d:64:
f5:30:29:5d:0a:d1:3b:b1:65:9c:35:fe:4e:91:b3:91:de:a5:
3d:f2:6b:ee:19:31:6b:24:f3:03:53:c0:27:05:f9:c3:fd:de:
45:a6:50:5d:e8:f8:f1:25:a3:4c:0b:ba:6a:cf:44:b0:11:f2:
2c:33:15:e8:65:64:2b:58:ab:dd:fd:ce:8a:75:73:f9:a3:43:
36:99:11:20:6a:dd:dc:0d:7b:e0:50:1e:06:f7:79:73:5b:5e:
72:c5:f8:48:99:a8:f3:be:fa:2a:ca:c1:98:99:b8:cf:09:ec:
e9:17:9e:1e:e5:47:d3:3d:07:48:f7:08:4c:3c:8c:28:d6:6d:
db:32:d3:55:ff:02:1a:68:66:f4:ce:bf:b7:b5:77:89:ed:90:
93:21:fd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 10:21:38 2025 by rpki-client