Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft
File: ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft (raw, json)
Hash identifier: RtX8zmJckG+iNSru4XM3/RNPOLUQielQYR5Mea55gg0=
Subject key identifier: 5F:05:85:CC:E6:55:C2:43:1B:FF:EB:B7:A6:23:1F:2E:2E:DD:26:63
Authority key identifier: 8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
Certificate issuer: /CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Certificate serial: 019927B2849A3C38455A976F3567389A044B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft
Manifest number: 0D1A
Signing time: Mon 08 Sep 2025 05:00:34 +0000
Manifest this update: Mon 08 Sep 2025 05:00:34 +0000
Manifest next update: Tue 09 Sep 2025 05:00:34 +0000
Files and hashes: 1: 52LURRKHhsuXGtaB1ANEy4yK2aU.roa (hash: 6pIRlcrWZsK7b5ZhODLvWeekkcvv6vlup79R4S6fe4w=)
2: bO1VBPqpSOaGTv0D3U1J8a3Ogsk.roa (hash: YtTxtq7GNbE/i9Tq037SwqJYKg04qn/GGhCrb6d2v/w=)
3: ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl (hash: peZ+V3YBs54AIJcoCzAF2l8lgjQ0VsLKh4jeoc4xbHg=)
4: wkXfodQiMlzIrY-XwijDv3ZScmc.roa (hash: QibJgJXwTU1FbLJ1XY5UdzigDZl+rgmIxHJ+4Yba4lI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:b2:84:9a:3c:38:45:5a:97:6f:35:67:38:9a:04:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Validity
Not Before: Sep 8 05:00:34 2025 GMT
Not After : Sep 9 05:00:34 2025 GMT
Subject: CN=5f0585cce655c2431bffebb7a6231f2e2edd2663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:83:3c:f6:53:b1:ef:c8:bc:a1:08:ff:69:66:
a0:2b:28:6e:be:f8:7d:75:c4:50:16:87:f1:44:29:
74:b7:5a:6d:bc:3b:03:aa:ac:89:cb:02:35:f1:aa:
3d:8b:cc:72:0b:85:85:68:f8:ea:77:66:b9:6c:ae:
3e:26:6b:92:fb:41:a8:0e:2a:f2:d6:f8:dc:d1:03:
ac:2a:da:b8:7b:81:78:b2:bb:01:aa:10:48:f9:a0:
57:fa:95:fc:4f:43:71:93:65:48:5e:ab:53:66:b9:
26:a2:4b:9a:51:df:49:63:3c:1f:15:9e:94:94:e5:
2c:e5:a2:38:7b:a0:dd:32:91:a9:ed:9f:b1:2f:18:
8c:50:fe:90:f6:ab:e5:86:a1:50:dc:22:7a:54:97:
fa:83:74:be:e9:6c:95:ad:8b:dd:24:82:d3:ed:8e:
62:b1:57:0b:d4:e1:27:75:87:9d:c3:d0:d7:bd:d6:
0c:f0:9c:96:1f:d8:65:5f:4c:9c:b3:07:a4:03:84:
df:e3:32:ed:c6:3d:0f:53:c4:7d:7e:32:c6:16:81:
f4:e6:20:e5:af:07:0f:f0:51:eb:64:aa:89:92:1d:
d7:7a:97:b4:c6:80:2c:f8:6e:10:1f:ec:23:2b:88:
b8:6b:6b:b7:e6:64:96:4a:46:db:eb:02:18:0d:e3:
58:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:05:85:CC:E6:55:C2:43:1B:FF:EB:B7:A6:23:1F:2E:2E:DD:26:63
X509v3 Authority Key Identifier:
keyid:8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:97:70:8a:cf:01:87:7e:b9:f9:78:aa:a0:e1:f1:93:f7:ba:
04:fc:d6:5f:ca:74:e1:30:1d:ea:28:3d:a1:f0:2f:01:b7:2e:
5b:86:8d:75:c5:d7:b2:17:92:65:9a:02:8c:15:9e:ff:06:71:
9d:26:72:02:05:34:f7:d5:29:28:ac:b4:fe:ba:78:19:c8:ea:
28:2e:5f:df:2d:db:1d:b8:0f:0e:7f:65:4d:f6:da:22:76:82:
fe:3e:b4:3d:3b:5e:af:c8:50:ca:4b:fb:0d:03:fd:4f:12:27:
5e:36:5d:f4:96:89:9c:0c:b6:59:9c:31:d7:f7:5f:70:9e:cb:
39:58:90:f1:85:9c:f7:4d:70:79:be:91:8d:e4:81:1a:2c:57:
cc:84:a9:f7:d3:a7:f3:db:bc:ba:3e:b5:16:9f:1b:35:d3:ca:
90:7a:46:36:5b:df:16:99:c0:cf:31:4c:91:58:fe:96:67:b2:
87:69:89:06:0b:de:19:bb:cb:9c:58:9a:1d:8b:df:ff:02:be:
ec:9f:1f:1b:6e:f6:da:9f:bd:bf:c9:92:82:8a:96:4d:00:35:
2d:71:67:2f:53:fe:4f:c4:e7:69:86:d0:4a:fe:0f:3a:ac:44:
5a:d0:01:9f:10:30:20:98:01:8a:8e:24:1b:04:8f:81:90:4b:
4d:7d:7e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 11:16:10 2025 by rpki-client