Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
File: i1_lDykN2eQeX0pl2rsjlyqCytM.mft (raw, json)
Hash identifier: MtdVKv8UcYOOOdp4hv+1AeOCM/eVj7d6Ao9qblzGuYg=
Subject key identifier: DB:4C:8E:45:86:CD:09:27:7B:5B:CE:3A:7A:FA:91:23:A8:81:2F:E6
Authority key identifier: 8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3
Certificate issuer: /CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
Certificate serial: 01988E0F561CE33C3B1FBF9F89E9136E73EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
Manifest number: 0A32
Signing time: Sat 09 Aug 2025 09:00:26 +0000
Manifest this update: Sat 09 Aug 2025 09:00:26 +0000
Manifest next update: Sun 10 Aug 2025 09:00:26 +0000
Files and hashes: 1: VyXgHHFFQ2oH5mDTe8acLrMgUes.roa (hash: LW13jFriZ57WfbtFccojs/LokeY+i7PgigFeLOhpQuY=)
2: i1_lDykN2eQeX0pl2rsjlyqCytM.crl (hash: Mn+wc2N+VzAHVyyt0RcAtKgzHppHP8gI2d+7odqYJM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:0f:56:1c:e3:3c:3b:1f:bf:9f:89:e9:13:6e:73:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
Validity
Not Before: Aug 9 09:00:26 2025 GMT
Not After : Aug 10 09:00:26 2025 GMT
Subject: CN=db4c8e4586cd09277b5bce3a7afa9123a8812fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:78:fb:02:b9:15:89:3f:84:22:aa:26:13:17:
f4:cd:54:2b:3c:fa:05:6d:16:34:67:43:73:1a:75:
81:8c:04:0b:92:ae:b4:49:7d:9c:7d:80:b7:21:64:
58:df:bf:f9:76:9b:fe:fc:7b:37:a3:6e:43:4a:cf:
6e:61:a4:84:c4:ca:e1:9c:e9:db:0a:29:1f:4a:a8:
6e:3a:b2:a7:ea:12:62:02:e9:2e:71:ba:89:d5:0e:
7f:0a:46:42:a7:ae:b0:b0:30:87:e7:fa:f4:05:1b:
58:1e:c7:2f:f7:98:eb:3a:5d:50:c2:55:63:2f:2e:
be:71:85:f6:69:a1:01:83:6e:94:c5:b1:66:e3:03:
a6:a9:54:c7:0d:fb:e3:40:b7:d2:b2:a6:3e:18:c6:
06:43:00:cf:37:d3:4c:75:88:5e:05:63:60:c6:d2:
17:cf:c9:e7:88:78:cb:0b:73:be:19:0c:6a:52:07:
82:60:54:99:49:12:26:62:fb:50:f2:7c:25:7e:3d:
fc:c9:99:ad:56:fb:9f:5f:2d:8e:ca:03:5c:b6:fc:
2d:37:90:68:d2:31:3d:a2:56:fe:21:cb:1e:7a:c2:
39:cc:2c:79:36:62:c7:4c:07:9b:9e:db:6a:c4:9e:
34:fd:4d:a8:2f:bf:f1:cc:c3:7a:22:be:65:70:3c:
7e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4C:8E:45:86:CD:09:27:7B:5B:CE:3A:7A:FA:91:23:A8:81:2F:E6
X509v3 Authority Key Identifier:
keyid:8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:23:00:e3:7a:3a:e0:d3:e4:1d:d7:7f:7d:85:26:e8:ed:e8:
6f:15:c8:02:e5:8f:0a:b8:27:72:c5:1a:43:b5:75:7d:76:e8:
46:5c:9a:c0:b7:3b:ae:bb:11:ae:f4:8e:b2:df:0b:84:d9:2c:
a4:b4:f3:08:dd:1f:41:60:84:71:bb:f3:8f:76:c0:fd:cd:0a:
72:d3:20:db:40:1e:21:b4:96:f1:8c:99:bb:20:aa:fd:0c:35:
0c:08:f6:f0:ff:fd:7e:d0:df:0b:90:bb:3e:aa:db:8c:67:a8:
69:82:e8:84:39:51:82:65:f1:ed:09:05:9d:63:86:0b:7e:49:
9c:fd:84:40:d2:b7:b7:8b:b6:0c:f9:8c:e6:e7:bd:cf:39:8e:
a2:37:39:b3:20:ac:28:f5:f7:1c:17:82:4a:27:04:17:c6:48:
2e:bd:3a:49:a0:76:7a:47:64:0f:1f:56:c7:38:1a:6b:75:49:
48:9b:42:82:44:6f:3c:fa:9e:09:a4:1a:8c:29:ea:ab:f8:20:
44:d3:9d:ec:df:8f:69:1f:e0:93:07:be:52:5e:bb:1c:13:10:
04:2e:6a:d5:3f:35:8d:62:27:c0:87:8f:57:93:b4:5b:0b:a1:
a7:32:d5:76:33:7b:49:91:6e:b8:fa:30:84:69:60:32:a2:f3:
21:1a:f1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:43 2025 by rpki-client