Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
File: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft (raw, json)
Hash identifier: 35hfRujgWeJpblNeoEqnpOz9sDBkL3fve6IvP+vFAQ4=
Subject key identifier: 77:A9:B7:E9:39:2B:95:1E:AC:7D:1C:EA:09:41:1E:C7:94:B6:20:CA
Authority key identifier: 23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
Certificate issuer: /CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Certificate serial: 01988A69FB98CBC6726BA31808CB0BF956BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 16:00:58 +0000
Manifest this update: Fri 08 Aug 2025 16:00:58 +0000
Manifest next update: Sat 09 Aug 2025 16:00:58 +0000
Files and hashes: 1: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl (hash: unYV/wMQrz1ZUF3Pyjdu/g1nzxzljbQ76gWsDsOz+oY=)
2: Tp4BAItGYlXYP71Yl1jvkjdBkns.roa (hash: BUC2R1hzU4lwEDEogKCUTPLUZZa/Hz8pj9j9ce25uwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:69:fb:98:cb:c6:72:6b:a3:18:08:cb:0b:f9:56:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Validity
Not Before: Aug 8 16:00:58 2025 GMT
Not After : Aug 9 16:00:58 2025 GMT
Subject: CN=77a9b7e9392b951eac7d1cea09411ec794b620ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:81:f5:32:c1:0d:eb:c9:d1:e4:fd:63:cc:
76:4b:99:b3:e0:ec:56:0f:5d:04:77:2a:4c:5b:46:
9f:7f:4d:92:bc:a5:09:38:d0:5a:72:3e:47:68:97:
3f:49:1e:ed:55:ef:7a:36:00:56:28:11:f3:07:9a:
28:38:60:a0:7d:af:2c:a0:83:f7:14:96:4c:45:7d:
de:fa:6f:9c:fd:05:ab:3c:75:95:7e:b6:a7:40:70:
b9:a4:5b:22:55:55:8c:3f:2a:cb:bc:ed:ca:12:8f:
f3:88:2b:5d:d5:ea:d5:46:10:87:1c:93:10:f7:20:
07:0a:5d:03:76:0f:08:62:af:25:1a:63:14:8c:4f:
cd:08:e9:ad:4e:c6:9e:e5:5c:70:ff:c5:f0:53:90:
dd:7e:0b:36:2c:05:25:fb:20:37:75:c8:f9:69:d9:
54:02:51:0c:cd:74:8d:b2:dd:69:d4:2e:2a:fa:41:
f7:2a:79:2e:a5:da:4f:ea:0c:5c:c1:ec:c9:94:74:
a3:85:6a:d1:36:6c:ce:83:29:d3:23:fe:03:90:7a:
d1:db:56:0d:af:7c:12:69:38:c5:52:a7:0a:ed:df:
fc:03:6e:98:91:64:be:a8:43:6b:39:64:34:ea:29:
e0:3b:8a:ac:99:14:8c:61:5d:42:bd:1b:b3:14:29:
ad:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A9:B7:E9:39:2B:95:1E:AC:7D:1C:EA:09:41:1E:C7:94:B6:20:CA
X509v3 Authority Key Identifier:
keyid:23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:36:e5:8a:64:a4:ab:b5:06:e0:8e:49:8d:03:e7:03:6b:d5:
17:fd:8f:94:62:c6:ea:3c:2d:d9:36:3e:92:74:ab:1a:53:b6:
62:b7:8c:73:d8:94:85:33:1b:69:b6:c5:90:06:71:5a:d0:da:
56:73:d5:d7:c7:fe:35:e5:24:b1:33:d2:7e:03:c0:5c:aa:be:
71:41:39:f0:d5:1f:57:85:e3:ba:46:00:30:0a:93:3f:02:14:
4e:fa:00:cb:a7:9c:bf:d1:f8:1b:9e:bf:81:44:73:b7:9f:49:
6c:fe:17:8d:bd:23:d1:66:c8:9e:b8:6c:33:43:a9:54:47:22:
5c:17:97:83:aa:4e:a7:8d:77:dd:4d:59:22:84:19:20:c8:a0:
b1:52:0e:8b:88:5e:0e:e1:76:5d:79:9b:10:c7:6f:f2:a2:0b:
6f:79:9f:a1:4a:97:a6:1d:c0:a1:4f:fa:db:31:f4:01:8d:ad:
d0:60:64:d5:b4:23:04:7e:f9:5f:94:57:60:6e:cd:f2:98:0b:
6c:59:34:42:6f:44:e5:a7:d6:ac:6a:86:f5:e3:1e:83:cf:8d:
e7:d0:9e:f4:e8:58:cf:1d:d8:ac:28:07:f7:a7:a9:64:f8:aa:
2c:dc:80:80:03:62:89:35:85:b8:c1:4f:34:54:88:0c:c6:40:
0d:d4:23:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:12:05 2025 by rpki-client