
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
File: I5xF5DYlUiCArsU5UpiaE6KKvQA.mft (raw, json)
Hash identifier: RnzC9V0qssKalJkm6NRnGoBA52/dlQkBP3kvWZr4vIk=
Subject key identifier: 7D:2F:AB:B4:18:DC:DF:EE:A1:F8:A3:EA:46:73:41:C2:15:63:F3:98
Authority key identifier: 23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
Certificate issuer: /CN=239c45e43625522080aec53952989a13a28abd00
Certificate serial: 01988B0E43EB591586F46F83FF9AC25A786C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
Manifest number: 1626
Signing time: Fri 08 Aug 2025 19:00:24 +0000
Manifest this update: Fri 08 Aug 2025 19:00:24 +0000
Manifest next update: Sat 09 Aug 2025 19:00:24 +0000
Files and hashes: 1: I5xF5DYlUiCArsU5UpiaE6KKvQA.crl (hash: r/Qv8yLvbT9AoZkJFWnaL3xwrOoM9ax/lU4wlCinT8o=)
2: lw90sey6Y2XkP3Sip6ebzWQtTKU.roa (hash: IdqbojAlXr4XwjmKtJYEU/2zd7cvDplQCfLZ9IO+/d0=)
3: uBZl19XYTdc5SBXaRHXvV0GGF98.roa (hash: 1Ti03xYR3EsLOQdndtqiFtUtuVxyXY66yoLYTtqG1ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:43:eb:59:15:86:f4:6f:83:ff:9a:c2:5a:78:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239c45e43625522080aec53952989a13a28abd00
Validity
Not Before: Aug 8 19:00:24 2025 GMT
Not After : Aug 9 19:00:24 2025 GMT
Subject: CN=7d2fabb418dcdfeea1f8a3ea467341c21563f398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b5:fd:b2:f5:7f:5b:06:02:4b:63:c0:1f:cf:
69:c8:a1:2d:64:51:5f:d4:8a:44:4c:aa:56:2a:6c:
0b:4b:01:dd:64:b9:bb:b3:a0:03:52:34:56:1b:4f:
d3:ce:05:32:f3:d8:1e:72:29:60:7f:52:0b:8e:8c:
ac:46:47:bd:27:f7:34:df:f1:a4:fe:bc:af:02:24:
91:17:45:b2:7e:bf:c2:64:93:3f:97:3a:28:46:3b:
ea:3f:9d:e6:fd:b0:ea:da:d8:f0:a9:b6:8e:df:58:
89:2a:18:87:cc:5b:b3:ee:ce:5f:88:77:16:b4:7f:
b4:c9:3b:1a:c0:45:15:0b:eb:87:cd:5c:62:20:8e:
39:1a:0e:7f:a6:c3:2e:11:6b:0d:cc:4f:f2:09:9e:
6c:8b:da:69:69:03:b1:c8:53:40:8a:ac:dc:f2:3c:
a8:d2:8f:f0:44:c2:b0:30:50:00:95:57:8a:45:95:
44:a6:f3:f4:8a:cd:97:6e:c3:a5:47:b1:0f:43:ce:
43:2c:ef:a2:75:96:5f:7c:a6:fa:a4:75:58:9c:81:
4e:55:71:1a:0a:dc:7f:98:81:de:34:aa:24:c8:20:
9b:04:6c:4f:29:02:e2:c2:eb:3c:fa:2a:80:80:a1:
47:42:f0:8b:aa:86:e6:3f:9c:0f:e7:94:2d:d4:d6:
4f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2F:AB:B4:18:DC:DF:EE:A1:F8:A3:EA:46:73:41:C2:15:63:F3:98
X509v3 Authority Key Identifier:
keyid:23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:1e:69:23:1c:a9:f9:6b:05:be:d0:09:e8:70:de:63:45:9a:
0d:aa:d8:86:c0:c0:99:83:dd:87:24:20:25:fc:6e:5f:ac:4c:
4b:ad:7c:77:c1:4c:c7:a0:74:b3:24:d0:cd:50:ae:8d:6e:ff:
84:d2:c8:93:3c:4b:ea:dd:b5:07:44:1c:5c:cd:7d:4c:67:3f:
da:87:45:cb:08:0b:4f:97:65:6b:ce:b8:e7:9d:8e:c6:1f:6c:
f9:c7:13:8f:e0:69:1f:2e:f7:27:6d:d0:7a:b9:28:14:65:4b:
52:9c:56:7a:d4:34:77:fe:6c:ab:6a:f3:3f:43:dc:80:a8:bf:
2c:e9:b3:de:80:84:a5:3f:06:73:23:e0:54:7e:55:18:03:4e:
97:70:f7:5a:db:e4:23:cf:3a:91:ed:ee:64:25:3f:56:77:e8:
10:87:0a:a5:4d:be:17:69:af:5e:68:7f:9a:d1:b8:69:32:bc:
66:0d:09:da:db:a7:f3:f8:2b:bf:c8:67:7b:1f:a1:46:87:0c:
7c:28:9a:d1:2b:48:1e:8c:24:a1:0c:64:bd:d7:22:11:1a:69:
61:d2:be:83:80:17:7a:f9:12:71:65:da:86:75:eb:ab:6f:8a:
ab:63:f4:cb:14:72:b7:57:e1:7f:b5:d7:31:2b:2a:88:b1:ed:
7b:fe:af:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:52:46 2025 by rpki-client