Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
File: I-5ecUCbIf1cgg89OsP9wPznWgs.mft (raw, json)
Hash identifier: r0LYIgc+j1Vh5ptOpbUn3YfhOstBJd6h8U1/flxUYOE=
Subject key identifier: 51:EC:80:49:F6:DC:FB:DB:23:AB:78:F3:E4:1E:28:87:4F:93:53:44
Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Certificate serial: 019872989E8B25D19CDC758011EBCC4B23BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
Manifest number: 131A
Signing time: Mon 04 Aug 2025 01:01:01 +0000
Manifest this update: Mon 04 Aug 2025 01:01:01 +0000
Manifest next update: Tue 05 Aug 2025 01:01:01 +0000
Files and hashes: 1: I-5ecUCbIf1cgg89OsP9wPznWgs.crl (hash: hRMUQL/JpV5t425/GD7bxuovsMGpN/9ZKFEczRZt1Qw=)
2: JLTWHRuvioIZeiPuQHITq0nguEU.roa (hash: bk5yHjHsl6C1xvyULuJt1KQ0iqgopaEeKAR0yVznkzo=)
3: plwZ9l0lVtWa8erZq6nE-HfiL5Y.roa (hash: pvnWu+3SngeR8hyMQVNUkiZf5MAZJKgs78KtEduSXvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:9e:8b:25:d1:9c:dc:75:80:11:eb:cc:4b:23:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Validity
Not Before: Aug 4 01:01:01 2025 GMT
Not After : Aug 5 01:01:01 2025 GMT
Subject: CN=51ec8049f6dcfbdb23ab78f3e41e28874f935344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c5:c6:0c:b8:04:4c:a2:95:61:ce:c0:db:84:
56:fe:51:42:34:0e:c6:8d:ca:d3:c0:0a:53:1c:dc:
47:93:ab:2f:94:1c:28:76:cc:6b:4b:ac:45:24:a0:
2f:6c:69:26:8d:aa:d6:97:e0:85:d5:39:e1:6c:dc:
bd:dc:b4:73:d2:1f:6a:92:4c:12:1b:53:94:38:65:
74:43:15:c2:47:b0:8c:be:3f:52:44:7b:79:9e:0a:
3b:71:f3:ff:95:b3:6c:5a:19:9a:be:b7:3a:18:e0:
5d:7c:ef:c2:2d:8b:17:25:12:d7:3d:52:e9:18:50:
9c:b1:ed:d7:81:dd:8b:d8:f8:f5:72:d8:09:95:ed:
3b:41:7c:c0:ef:aa:83:f7:5a:06:15:ab:d1:9b:44:
3b:f9:3f:34:c7:7a:20:08:48:6a:b5:11:0a:3a:c8:
d2:52:ac:c1:95:d5:60:86:b7:da:13:e1:66:c8:ba:
03:60:09:f0:71:bc:23:1c:4b:e5:63:be:e7:c8:46:
c0:02:36:91:a9:62:a7:e0:bb:7e:b9:eb:bf:1e:af:
c8:3d:35:dc:93:a2:2a:19:d6:4e:2f:01:da:5b:e9:
25:28:9e:77:38:18:fc:88:24:72:70:68:a5:64:ca:
1e:87:7a:c0:30:f2:d0:02:ef:40:b5:a4:f1:be:7d:
e1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EC:80:49:F6:DC:FB:DB:23:AB:78:F3:E4:1E:28:87:4F:93:53:44
X509v3 Authority Key Identifier:
keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b2:e8:ad:18:66:dc:4d:47:bf:12:a7:45:de:18:2f:5d:d0:
99:52:83:d6:dd:f0:b1:d6:be:73:8a:03:f3:4a:f4:47:f6:8c:
b9:3d:e6:7d:0c:6c:fb:e6:9c:f8:3b:16:60:c9:47:44:ff:ad:
83:d4:27:9a:06:b3:09:53:1c:61:00:a8:12:c9:4d:06:46:bd:
a0:36:12:53:93:da:b1:e8:46:62:95:2a:87:0b:66:ca:40:68:
c0:11:5f:5c:ab:45:a1:26:ec:56:a0:0f:0e:0d:51:fc:8c:98:
e4:db:ec:4d:ce:5d:71:61:d0:2f:3a:bc:aa:27:5e:7b:62:21:
ec:70:d0:cb:3e:b9:06:80:5e:f4:95:84:9e:d5:c6:4e:98:94:
b0:69:75:0e:36:bf:38:54:04:9f:78:e3:9d:45:66:a4:ca:e5:
ad:a1:b2:a5:88:09:23:15:90:52:4b:f4:cc:01:80:87:02:b5:
61:68:d2:db:6a:79:d5:53:7b:85:b9:b8:c9:2e:4e:63:0f:cc:
8e:37:fa:2f:87:b2:b0:99:77:8b:b0:f9:25:58:82:a8:68:92:
91:7f:d3:bd:20:fe:b5:2e:42:46:2f:44:9a:92:cc:3f:01:79:
58:25:43:e4:74:07:18:83:54:30:d8:71:35:6a:4b:8f:33:0c:
46:b9:8d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:59 2025 by rpki-client