Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
File: I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft (raw, json)
Hash identifier: M5cakiHi/z211lxuzn4Ssgd0zWwEQUJp3z3/qYUMnRw=
Subject key identifier: 70:7D:9C:BE:04:B5:74:0A:6E:64:4C:F1:C4:10:D8:63:CE:01:42:70
Authority key identifier: 23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
Certificate issuer: /CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Certificate serial: 019896A6644DF2DE026EBA25E22F517B598E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
Manifest number: 0971
Signing time: Mon 11 Aug 2025 01:02:23 +0000
Manifest this update: Mon 11 Aug 2025 01:02:23 +0000
Manifest next update: Tue 12 Aug 2025 01:02:23 +0000
Files and hashes: 1: I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl (hash: Q2bE2Eq3CyYVq94RkWDcUGj8qdKUeyznfDTUpJYrMHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:64:4d:f2:de:02:6e:ba:25:e2:2f:51:7b:59:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Validity
Not Before: Aug 11 01:02:23 2025 GMT
Not After : Aug 12 01:02:23 2025 GMT
Subject: CN=707d9cbe04b5740a6e644cf1c410d863ce014270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:64:5c:a3:ce:fa:e1:3c:fc:b2:83:59:3b:33:
e5:97:df:c2:ec:95:da:48:52:0c:d0:22:f5:96:76:
b5:05:70:af:89:32:e9:ad:ac:bc:83:07:8c:b2:3a:
db:0b:21:a1:63:36:d5:5f:b2:a8:e2:af:5a:02:e1:
a4:48:f5:bb:a0:3a:53:d0:7e:44:90:de:8f:f4:5c:
2c:01:11:f0:72:3a:cd:0d:7b:e4:6b:36:03:0b:15:
48:20:a0:2a:dc:e7:7a:f6:2b:ee:86:be:1f:19:84:
2b:3c:ca:bc:82:ec:7f:21:fd:88:1e:7b:df:8f:43:
d5:2c:31:74:2b:0d:94:de:14:33:bf:b8:5a:73:fa:
c1:39:1f:28:49:52:31:de:c3:a8:c2:3c:3c:f7:95:
78:0f:38:be:c7:68:81:3e:13:f6:d7:e2:cf:d0:d0:
1f:1c:e9:1a:00:9f:58:a1:f8:d7:01:1a:23:4f:81:
73:e7:66:00:64:f8:e7:ab:b9:1e:e4:be:59:04:e5:
ee:8a:7f:a1:32:6f:ec:94:2d:10:e0:1e:7c:d3:1b:
a5:ea:fc:a4:29:31:94:48:e2:9a:82:5e:61:58:64:
55:3f:f0:55:42:bb:94:45:cd:e4:2f:e3:9a:e2:37:
51:86:e1:7f:23:53:9e:45:f7:5d:91:75:86:31:46:
ba:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7D:9C:BE:04:B5:74:0A:6E:64:4C:F1:C4:10:D8:63:CE:01:42:70
X509v3 Authority Key Identifier:
keyid:23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d8:58:a2:0d:46:c2:aa:1a:2d:2c:c4:21:b1:43:35:f1:36:
1c:87:7b:bf:c8:71:a9:af:6c:67:69:26:e5:3b:20:a6:ba:5f:
e9:88:fc:0d:3d:2b:c2:a2:1a:7d:c0:c9:15:a7:50:97:b7:0a:
37:fa:15:20:41:a9:cc:54:68:f3:70:f0:f4:a8:6d:86:a2:6c:
7f:fe:70:67:02:97:e1:40:f1:e9:cb:43:59:13:55:8c:71:c8:
bc:77:af:a1:99:9a:3d:4f:37:bb:c2:19:56:87:89:8c:43:66:
07:5e:f6:e5:5a:69:ec:d9:63:e1:e7:c9:3d:17:a3:cb:6f:11:
47:67:12:1f:0b:f4:a8:97:d6:9d:19:40:c6:cc:2a:cd:64:9e:
28:e6:2b:a8:40:ac:0a:01:34:17:c4:f1:34:6b:85:a6:fa:ec:
93:0f:4b:7f:6a:18:ec:69:71:3f:64:75:15:a9:c8:6b:45:e4:
d8:9b:d1:ec:cb:d5:a4:e0:6f:b0:0e:c0:92:9a:2c:27:b7:5f:
47:26:94:5b:2f:f8:b7:a3:35:2a:91:f3:04:b7:6c:30:cd:f5:
2c:06:dd:9f:21:e3:8c:11:bc:a3:1f:fa:e1:9c:75:b9:4e:7d:
8c:b6:76:c2:ed:4c:e5:56:ed:06:87:91:59:6b:12:2e:64:bf:
14:c1:c0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:50:47 2025 by rpki-client