Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
File: I2YsmpgK11hGUKuqNUW56pHT414.mft (raw, json)
Hash identifier: Zibm24Bkm72an7HOh8yUa420kVlbdyqZjQwPSQtpnJs=
Subject key identifier: 94:9B:3E:BB:4F:70:67:14:53:3D:76:CC:E0:05:03:84:14:BE:E9:1E
Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
Certificate issuer: /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Certificate serial: 01987373DAC6F530D526C7683DD0C5EE3B62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 05:00:29 +0000
Manifest this update: Mon 04 Aug 2025 05:00:29 +0000
Manifest next update: Tue 05 Aug 2025 05:00:29 +0000
Files and hashes: 1: C3a8w3EA0yZf6c0xKrOAJTxFR18.roa (hash: LNpEHJw7nSfysWTvnjy399UaYBj+VVtM2qrA/gSp1Ss=)
2: I2YsmpgK11hGUKuqNUW56pHT414.crl (hash: x+Gatu+BkO+s0KoIG+IiqtA61v5jSXYlKUrWOvVVz2w=)
3: ODeZnWNl5WX6QJG7docdS6N0Lh0.roa (hash: /UPoSxqJgEbJd9A+t+po1hpjOf0Zwwvb5Sbep9uGpqM=)
4: sWPuB2_JaQ5IbfWV6TRjwzAEtmo.roa (hash: 2MwXerlOGNKciqFr23+HmocPZA4iLoGvibtwd5TaAxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:73:da:c6:f5:30:d5:26:c7:68:3d:d0:c5:ee:3b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Validity
Not Before: Aug 4 05:00:29 2025 GMT
Not After : Aug 5 05:00:29 2025 GMT
Subject: CN=949b3ebb4f706714533d76cce005038414bee91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:08:ce:ca:a9:ae:57:84:ff:84:a0:97:5b:24:
ee:2c:44:85:bf:0e:2f:0b:ff:52:15:a9:95:ba:03:
0d:c9:a7:ee:e7:32:44:74:39:6b:22:25:43:3d:f1:
8a:59:df:aa:79:42:b6:32:30:43:88:30:d0:1f:ff:
d4:16:95:16:a9:54:74:63:67:da:e0:b1:d0:af:38:
be:78:a1:93:e4:ab:64:68:58:2e:14:0c:a8:33:21:
84:a7:be:0b:4a:1d:bf:c0:21:05:4c:2d:03:51:8d:
0e:53:61:03:03:de:6f:1d:d2:a0:fa:a9:e4:d8:52:
70:19:da:50:97:7d:ac:a7:5e:c2:48:c7:c0:77:08:
df:52:ac:a2:a0:61:30:2d:f4:94:f0:af:5b:21:a7:
3e:b1:8a:d8:f5:7a:d9:f8:95:24:4b:ce:70:bd:86:
d1:c8:f9:36:fe:df:8e:bc:4c:a1:61:78:71:b7:4f:
c0:ec:d4:fa:9b:f8:73:48:5a:bd:e0:dd:7c:d5:07:
80:2f:eb:70:97:d2:bd:92:a6:0d:66:3d:8a:5f:9a:
7e:ad:e9:05:9e:90:c8:75:3c:43:d4:70:dd:aa:e5:
f1:42:45:e7:69:18:8b:30:35:fb:03:96:45:03:01:
f8:47:3b:5f:94:31:1b:de:43:07:64:4c:00:8b:ec:
94:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9B:3E:BB:4F:70:67:14:53:3D:76:CC:E0:05:03:84:14:BE:E9:1E
X509v3 Authority Key Identifier:
keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:21:4b:ff:74:8d:4e:d1:40:a3:a4:78:f7:45:20:bc:2f:f7:
12:91:a4:89:ca:5d:53:20:42:91:00:3b:91:f1:93:ed:f5:16:
97:ac:53:3c:d5:21:65:e1:8e:3b:d7:f0:bf:2f:29:4f:07:7d:
10:d5:ad:8d:c4:d5:35:1a:8f:88:91:d8:8e:3d:b5:32:43:68:
f2:aa:2d:32:09:15:74:c0:7e:23:19:74:6e:4b:c9:b2:d4:7a:
a5:46:4f:e1:a7:92:47:97:e0:3f:a6:7f:6a:65:a0:8c:6e:2a:
5e:4c:37:78:26:b1:7c:d4:a7:09:5c:0d:98:52:72:49:cd:4b:
7e:2b:42:1c:6f:07:46:33:bd:b1:51:50:2a:dd:2a:e8:5c:52:
dd:86:ec:7a:b0:e9:03:a4:e0:8b:ad:49:79:25:3c:46:3b:61:
ed:b4:e2:66:d9:bc:39:88:84:71:b3:6e:6b:9a:06:f7:6b:0c:
5e:ab:5f:60:1b:d6:46:d4:2c:6b:3d:3f:60:ec:7a:d0:3b:27:
24:8a:e2:74:2b:e0:ec:00:8d:35:08:d9:04:27:ec:11:4b:6a:
25:3c:d3:23:9b:f1:2e:38:63:33:ff:ef:b4:b8:e8:1c:f5:c5:
25:7d:4e:9e:84:fc:ef:a2:8d:a4:1f:f7:68:ca:92:80:bf:c5:
e3:41:dc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:34 2025 by rpki-client