
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
File: I7oexPA1py36OekwrY7FQ2jrevQ.mft (raw, json)
Hash identifier: n/KEA857+tcbqHBSv7V6sHr+IeDmSr81VGQEZBue8Fo=
Subject key identifier: E3:BA:6A:71:E2:E5:2C:6C:6B:3B:8F:9F:FC:B6:60:C6:C2:02:C9:C9
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Certificate issuer: /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial: 01987D8A1FB3B2E39BE1B8AFF7924BFE5622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
Manifest number: 1622
Signing time: Wed 06 Aug 2025 04:01:00 +0000
Manifest this update: Wed 06 Aug 2025 04:01:00 +0000
Manifest next update: Thu 07 Aug 2025 04:01:00 +0000
Files and hashes: 1: I7oexPA1py36OekwrY7FQ2jrevQ.crl (hash: QZz+l7bKC+6eTgFW3zZZMtsE7vgpCZ+C69nIO2EjduY=)
2: LrVwKiIfML7mAYKSwQjrFc9mp0A.roa (hash: pqGsuXC48BK/nJrmWeripHJL6964Try+bgZKQC5cMuM=)
3: bKwA7ygctFGfYxj37Ulrjy4h7wc.roa (hash: wDr01UuqGpYUgCW7TRCxOE6weB2OEkQge2nt3Tah0ms=)
4: b_MmvUZfA5ZZF4bFCypyK1p5UMI.roa (hash: 9E4PGJ6w5hYLiKvYcuEqwE8eKmB9cOnevFWIyVMZhgE=)
5: wmfmaFsDhu27cNgPElAJRkA9d2A.roa (hash: jsS53vdJzXk5aLl615moQFBVWf7IQgXR2RroQvAW/zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:1f:b3:b2:e3:9b:e1:b8:af:f7:92:4b:fe:56:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Validity
Not Before: Aug 6 04:01:00 2025 GMT
Not After : Aug 7 04:01:00 2025 GMT
Subject: CN=e3ba6a71e2e52c6c6b3b8f9ffcb660c6c202c9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b4:11:89:ad:4d:91:ba:8c:ef:d6:0a:f7:56:
f9:e2:b1:8e:52:0f:25:f3:ac:c1:f9:75:95:6d:2a:
ee:8e:22:05:2c:40:c4:7d:3e:d5:da:31:0f:60:3c:
17:a1:d8:ed:7d:72:8d:37:4c:2a:19:28:c5:b5:2b:
97:01:bd:f7:54:3c:00:8f:89:9f:35:e2:d0:a0:52:
39:6d:a8:71:35:d6:d4:05:5e:4e:13:df:80:19:5b:
0f:b2:a5:bd:13:82:f4:a4:a0:0a:87:6b:c0:3a:c5:
ca:1d:98:89:0b:75:4d:67:a5:5b:17:95:d5:24:9f:
95:05:34:06:6c:16:71:a5:fd:df:9b:e5:a7:15:8d:
2c:7c:79:f4:af:2c:68:44:af:29:d6:ee:cc:c5:23:
3a:2a:ec:19:7a:00:d1:8e:b8:99:f3:43:f4:3a:82:
cf:f9:60:4e:09:23:d4:d2:c1:eb:d6:9b:02:09:e6:
0a:c8:bb:53:c3:0e:e3:4d:de:72:ab:fc:89:9e:de:
db:eb:39:8a:10:ca:32:9b:06:65:7b:78:7b:9c:70:
3a:a9:26:66:82:08:73:c9:1b:af:36:ed:31:c7:54:
fe:be:ae:e1:ac:57:0e:d2:28:86:90:04:9c:a7:e9:
ba:51:b2:85:bf:6d:cf:1d:e8:2c:43:0b:0c:a8:a8:
fa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BA:6A:71:E2:E5:2C:6C:6B:3B:8F:9F:FC:B6:60:C6:C2:02:C9:C9
X509v3 Authority Key Identifier:
keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f8:36:f7:ff:0c:66:c9:7f:0d:2c:1c:34:d5:83:49:bd:6e:
20:8a:bc:98:d8:60:e0:0a:b0:72:04:f5:9a:16:41:86:d3:89:
63:e6:55:ce:e3:9e:94:65:0e:4b:dc:36:84:b3:7f:48:84:c5:
26:7e:2b:35:f2:b6:8f:05:a3:3f:3d:d1:69:a5:6f:5e:a5:c1:
f0:00:41:7f:54:ae:a2:80:98:c2:7c:5f:34:16:9a:0b:53:37:
16:a6:8b:e0:cf:7d:ea:e9:ff:d3:1a:b6:42:7b:f5:5a:cc:72:
a6:83:46:6b:22:14:b4:e5:74:d9:54:d0:a7:54:6b:13:01:de:
38:12:c8:ec:64:96:34:a1:64:70:59:7f:73:94:e5:65:22:89:
fb:2a:de:6a:78:73:b6:ae:f7:cc:e9:53:cb:2e:fd:f0:6b:d0:
ff:f5:20:46:44:e5:00:85:8b:21:1b:85:0a:6c:92:b8:98:20:
14:b6:f4:57:c7:8d:85:b3:79:9c:ff:e6:4f:90:97:5f:64:07:
21:1a:e6:fe:29:26:3a:f0:c2:6d:0c:30:56:3c:77:2d:de:84:
95:89:47:17:31:4f:ed:37:b7:be:9d:8f:42:26:d8:c4:1a:ff:
e7:ff:33:30:8e:c1:9d:54:f0:45:47:ed:26:94:9e:41:52:2b:
8c:f7:b9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:47:33 2025 by rpki-client