Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
File: i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft (raw, json)
Hash identifier: k1g3XzZ1gjiBOYyxPAvPl0niETv1tqINoKGslwLKD50=
Subject key identifier: 21:C7:97:4E:2E:F7:A6:A5:71:89:EF:67:E8:FF:4A:79:70:3C:FF:DF
Authority key identifier: 8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
Certificate issuer: /CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Certificate serial: 019873E2874B4B2D13AAC1CEA305259587FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:01:22 +0000
Manifest this update: Mon 04 Aug 2025 07:01:22 +0000
Manifest next update: Tue 05 Aug 2025 07:01:22 +0000
Files and hashes: 1: FE1p8xqk22ZLL8TtVpBgIJ5HCYk.roa (hash: EEjSbBj9sFsFeIYvGJ66Mb2B5f9wjNh8P6NHIHv03o4=)
2: Nj_g5XagzgChnaGJmyAjIxliPxQ.roa (hash: 2T2yAo36kvnreO/zfmG7HDMPjTZHcC33NYqG6yteeqQ=)
3: i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl (hash: gQKiR7Li8qTtClfO9jUBLqgMsc0g3vlXRI6SaEC7bPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:87:4b:4b:2d:13:aa:c1:ce:a3:05:25:95:87:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Validity
Not Before: Aug 4 07:01:22 2025 GMT
Not After : Aug 5 07:01:22 2025 GMT
Subject: CN=21c7974e2ef7a6a57189ef67e8ff4a79703cffdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:35:f1:90:07:5a:96:22:ff:a3:67:0c:09:7c:
c8:7c:c6:a8:84:61:bd:8e:4b:21:08:86:c8:9d:5e:
54:6e:9d:a5:2f:57:78:ad:60:9a:f3:2f:b5:49:71:
38:53:7f:62:33:d3:9c:98:1c:ea:bd:d0:d1:98:7e:
46:ac:0c:cb:8a:36:ab:e0:99:9f:25:a2:7e:3a:66:
ad:06:78:c2:ba:54:93:f3:d9:b1:32:a2:9b:39:05:
0d:4e:2a:fc:c5:6f:6a:06:89:ee:fa:3b:64:a2:2d:
a1:ef:bb:00:4d:85:f6:ea:aa:68:5e:fa:11:37:f1:
72:18:16:ed:c4:6d:15:56:ee:b2:d6:11:5f:b8:bc:
fd:68:cc:d2:2f:2b:25:35:e3:ba:1e:81:0f:6a:42:
2c:ab:bf:6f:86:ab:3b:0e:b0:f4:9a:49:17:40:aa:
59:54:37:c1:9b:4c:c6:7c:db:ee:98:b1:72:34:5f:
94:70:9b:4b:ed:b6:73:5c:24:1a:e6:25:4c:4d:ce:
c0:34:35:23:44:a7:1a:dc:5c:47:f1:80:1f:b8:ee:
bb:6e:29:b5:1d:16:46:44:d0:2a:8d:57:c4:83:99:
8a:5b:00:2a:95:dc:51:b9:ef:dd:d5:99:38:a7:bc:
d8:4a:e1:e7:9f:87:ab:91:11:62:12:41:aa:60:71:
ed:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C7:97:4E:2E:F7:A6:A5:71:89:EF:67:E8:FF:4A:79:70:3C:FF:DF
X509v3 Authority Key Identifier:
keyid:8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ef:06:0b:1f:45:c1:3d:a2:84:41:ba:5b:cd:36:06:bd:0c:
c8:dc:1e:47:24:b9:0d:58:2d:8f:88:88:91:6f:7e:8a:8e:47:
bc:f3:b6:eb:7d:8d:ab:95:0b:d7:4e:8b:40:ea:4e:50:93:ff:
63:f0:86:b6:a4:43:c0:cf:db:e5:a1:ea:7a:5b:c8:f2:1f:28:
59:e2:ac:c0:09:8b:b3:b4:33:7e:0b:80:ef:94:32:2a:71:84:
7e:1a:d3:75:1b:1c:54:13:29:ad:dc:98:13:44:c2:54:93:e1:
a7:ee:6d:ed:42:16:dd:0b:a7:9f:c9:57:74:6f:b6:95:23:c9:
57:d2:5c:51:aa:65:55:7f:df:e4:ab:03:d4:fe:bc:07:42:9e:
d8:9b:0d:2d:8b:13:16:ce:4a:6d:2b:17:22:60:86:cd:8a:f3:
59:cb:f6:4b:b8:26:e6:75:79:08:d7:1b:4b:ab:7b:78:23:1c:
3f:e2:c6:42:b1:84:b4:91:2f:2d:cc:e9:fd:88:fe:3a:46:ee:
56:65:ea:11:c1:18:a6:13:8c:94:c5:93:16:0a:83:d9:61:59:
74:2e:08:b6:a1:d4:84:eb:73:8a:fb:db:6e:83:2d:c4:48:56:
12:ec:d3:cb:8a:a7:b4:bc:25:73:70:80:f5:fa:b0:3f:85:58:
3c:75:31:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:24 2025 by rpki-client