Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft
File: i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft (raw, json)
Hash identifier: nSUmXwARTsdsDu3CUmoSSW4+RyURb4ujZFb50WiujZ4=
Subject key identifier: 9A:50:F0:E4:31:3B:A3:67:53:0B:86:E1:D8:23:17:77:AB:00:DA:BB
Authority key identifier: 8B:51:18:65:93:02:99:76:3E:0E:5F:2D:82:56:7D:C5:A1:D5:3E:79
Certificate issuer: /CN=8b511865930299763e0e5f2d82567dc5a1d53e79
Certificate serial: 019879E3DB97F0D17EB6D6BB6103876E4B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft
Manifest number: 1256
Signing time: Tue 05 Aug 2025 11:00:32 +0000
Manifest this update: Tue 05 Aug 2025 11:00:32 +0000
Manifest next update: Wed 06 Aug 2025 11:00:32 +0000
Files and hashes: 1: i1EYZZMCmXY-Dl8tglZ9xaHVPnk.crl (hash: JxEhbxbOrcDbx+37oT6aVuSCtAl9oqR86VTnL8CnpRg=)
2: vWNF9c9xh0UQ-FU-UmVlKKmFXu0.roa (hash: 6rkEiKqMQhH3x9WDxfo0uMKCtMaKKNiS0hRACYb4UZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:e3:db:97:f0:d1:7e:b6:d6:bb:61:03:87:6e:4b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b511865930299763e0e5f2d82567dc5a1d53e79
Validity
Not Before: Aug 5 11:00:32 2025 GMT
Not After : Aug 6 11:00:32 2025 GMT
Subject: CN=9a50f0e4313ba367530b86e1d8231777ab00dabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:3f:70:07:ba:df:4d:70:12:43:4d:97:d8:
08:63:a2:85:fe:a7:cf:b3:0f:dc:a3:9d:e4:ca:1f:
36:a7:64:bd:2c:94:c7:9f:dc:2f:ca:a2:a6:c0:42:
b0:a3:36:06:dd:ce:a6:75:82:ea:30:cd:c4:e5:ff:
07:4e:ad:2b:bc:45:0a:68:ac:e6:a0:f3:24:75:2a:
cf:43:c1:21:64:1a:71:04:9b:e4:24:74:59:f7:cc:
41:3a:82:71:44:9e:ea:64:08:98:87:d7:b6:40:9f:
2a:4f:09:2b:8c:3a:85:31:dd:6b:90:55:8c:d1:60:
08:aa:47:6e:56:34:b2:1d:58:60:20:56:c9:d1:be:
45:34:46:b9:88:b4:d2:c3:0e:f6:29:f2:7a:74:ae:
cf:dd:32:32:57:26:71:ba:e3:fd:3b:1d:70:a4:8a:
a8:1f:f6:73:99:d4:9a:4c:5c:da:d0:45:bf:8f:9d:
47:ca:9c:52:14:c7:17:9e:f9:fc:42:43:f4:b9:cb:
9d:6f:da:ac:ac:36:0e:f5:a2:b0:ce:c3:39:a9:c7:
52:00:c1:5f:23:44:3b:72:f5:c4:60:c6:f5:df:c8:
ac:a4:05:6d:f1:44:64:4a:3a:0f:95:5d:61:da:d6:
ed:12:0b:82:bd:0a:05:45:2e:16:ca:c9:b2:97:e0:
a6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:50:F0:E4:31:3B:A3:67:53:0B:86:E1:D8:23:17:77:AB:00:DA:BB
X509v3 Authority Key Identifier:
keyid:8B:51:18:65:93:02:99:76:3E:0E:5F:2D:82:56:7D:C5:A1:D5:3E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:74:b1:55:43:d5:45:72:b6:ea:f2:b0:31:48:9e:d2:d8:a3:
e1:56:56:c6:06:24:7d:e3:5d:7e:50:cc:20:ab:c0:42:39:46:
90:ee:41:c3:5d:24:62:1c:72:29:71:c4:d6:80:8b:f4:ad:b5:
a9:da:03:f1:41:a9:64:31:d2:b0:27:bf:3f:d1:56:f1:9c:71:
72:93:18:4e:f4:30:49:d8:2e:84:10:63:cd:cc:68:82:8f:71:
0e:7a:13:26:59:8c:a0:38:af:ec:ac:2d:d7:97:e8:9f:79:bd:
5a:20:fd:d9:b4:d2:b3:bd:c2:1f:c7:70:28:15:29:b7:bd:fd:
8a:73:46:39:aa:70:fd:ac:bc:18:08:b0:43:31:3f:21:a6:4e:
ff:0a:a4:c6:a3:aa:75:5e:c3:2f:ab:54:08:8f:a3:7a:a3:84:
a5:d7:bd:2f:ba:51:5a:84:ed:a4:32:87:4b:c0:70:81:42:6e:
3d:3c:47:98:a3:24:9a:99:74:7e:26:67:ba:2e:a0:65:e8:91:
01:26:2d:91:46:54:43:70:02:0c:e0:a9:0a:1d:54:12:35:68:
e7:04:0c:7f:b7:f4:24:7d:1f:d5:3a:b7:03:ff:6e:61:da:56:
d6:92:c0:42:e2:4c:41:2d:81:db:12:ef:3c:74:c2:d3:95:b9:
78:0e:9b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:23:20 2025 by rpki-client