Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
File: I50GV-qu8Ja-yUsR9NadDT7QTOY.mft (raw, json)
Hash identifier: oR+jOj0HIteOBvQ57WAezSBHcfyB4n1ir0PfkkqRWDg=
Subject key identifier: 4C:FE:BF:03:45:75:BE:30:35:2F:E7:8D:CD:75:EB:06:AB:FE:BD:7E
Authority key identifier: 23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
Certificate issuer: /CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Certificate serial: 0198917E828B86D5B992C3148A89F04B3FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
Manifest number: 136B
Signing time: Sun 10 Aug 2025 01:00:43 +0000
Manifest this update: Sun 10 Aug 2025 01:00:43 +0000
Manifest next update: Mon 11 Aug 2025 01:00:43 +0000
Files and hashes: 1: FciKzBJuJmXxMHbhg7vtxvJaFpg.roa (hash: LJXoq9acQBnheF7twxm9ozyA/I0gm87jr1W8PivL0eA=)
2: I50GV-qu8Ja-yUsR9NadDT7QTOY.crl (hash: knJOm0RkIU68oeHTNpSH1uoriUfFfXu9X2RrY7/IoI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:7e:82:8b:86:d5:b9:92:c3:14:8a:89:f0:4b:3f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Validity
Not Before: Aug 10 01:00:43 2025 GMT
Not After : Aug 11 01:00:43 2025 GMT
Subject: CN=4cfebf034575be30352fe78dcd75eb06abfebd7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3e:5c:60:f5:f9:78:52:f8:24:5c:24:76:ba:
8b:ed:16:d2:35:26:9a:bf:3d:8d:75:87:68:2e:0e:
ba:c5:28:62:4e:4d:32:95:dc:59:4a:10:65:73:e7:
76:2e:a5:f4:e3:24:78:d0:fd:6f:aa:fc:73:ca:1a:
03:49:d2:5d:2a:6c:5c:ec:b8:9e:08:f8:d3:62:d0:
30:a6:14:fc:05:0d:cf:7f:a5:4c:ef:3d:70:77:d2:
32:c6:38:98:df:7d:4e:2d:b6:57:4e:0e:ed:13:d1:
72:10:92:90:f5:55:36:6f:09:10:91:c2:73:74:d4:
0a:4a:0f:88:e9:91:c2:b9:09:e6:74:7a:6e:97:d4:
60:e6:30:bf:9e:9d:f4:1e:91:02:40:1b:70:0a:86:
26:af:00:71:02:4b:c4:cb:6f:73:23:99:ef:e6:9e:
e2:1c:03:3f:e5:d5:0d:c6:26:8b:e4:da:a8:0c:6d:
ce:be:81:53:2b:ad:24:5e:e7:d2:60:fe:0e:4d:4a:
33:97:45:cd:fb:0b:92:cc:dd:89:73:2d:3d:6c:78:
2c:78:8b:9c:b6:fa:5f:7a:eb:d6:18:3c:16:7b:cf:
c1:d6:b7:ea:0f:e8:07:3b:4f:1b:63:0d:fe:e9:c6:
42:3f:9d:3d:c3:c8:ef:0f:14:08:56:da:54:7f:f2:
2a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FE:BF:03:45:75:BE:30:35:2F:E7:8D:CD:75:EB:06:AB:FE:BD:7E
X509v3 Authority Key Identifier:
keyid:23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:9c:9c:eb:f3:05:64:e3:b4:4a:e2:85:82:23:3a:ac:7b:06:
31:34:a1:dc:b8:d1:bd:3d:80:d4:22:d2:4e:d9:e3:00:81:0b:
92:29:54:fb:df:10:8f:0c:72:3f:1f:f3:b7:a8:11:ff:c5:58:
4e:7c:0b:81:65:49:b9:e3:0f:fe:94:70:7c:30:3a:07:e9:e7:
94:90:df:b5:f4:4a:1f:e1:6f:fa:87:99:01:a2:5f:b8:f0:26:
4a:64:01:04:2f:cd:ad:d1:e0:31:ba:7f:1c:34:42:ac:b8:47:
44:3e:51:29:d4:1c:9e:c4:12:cf:90:e1:0c:8d:f5:79:f3:87:
9c:71:29:53:3a:62:13:20:be:1f:f3:02:47:62:89:60:36:e2:
d8:04:27:5b:2e:8c:83:35:b9:8c:20:a5:b1:95:0d:fa:28:f8:
9e:b5:12:d5:46:28:56:d3:26:87:b1:9d:f2:ca:b9:74:f8:1d:
58:d6:7b:61:71:96:56:86:de:34:90:8b:a5:4f:ad:40:aa:84:
82:12:e2:67:6c:3d:ae:b8:f1:0c:75:b3:bf:5a:6f:47:f5:d5:
62:0d:70:45:94:6f:a6:83:6b:f8:0d:2e:fd:df:97:12:d6:b9:
ec:7c:5d:37:1a:39:87:c4:1f:8c:c5:97:42:e8:2e:d4:ae:e0:
30:dc:e0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:34:21 2025 by rpki-client