Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
File: I3CEcS_euxv8WowCYtkZqKpEBgM.mft (raw, json)
Hash identifier: yUOf/PnCDq5kiCYsp43DRTx3Q1+kDiMmQ934D7obBPc=
Subject key identifier: 28:A7:6E:D2:98:DC:69:E7:CD:51:30:E2:CB:E9:8B:B7:DF:0B:D6:56
Authority key identifier: 23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
Certificate issuer: /CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Certificate serial: 019873AACE80759F91845C69B996BFE42741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
Manifest number: 1621
Signing time: Mon 04 Aug 2025 06:00:30 +0000
Manifest this update: Mon 04 Aug 2025 06:00:30 +0000
Manifest next update: Tue 05 Aug 2025 06:00:30 +0000
Files and hashes: 1: I3CEcS_euxv8WowCYtkZqKpEBgM.crl (hash: VkTi4ATuwbknmpW71R/gjdL1J3kImi1JPduwphv2GPU=)
2: mT8xhfyQsxzNf4D7DsjIj5p3asQ.roa (hash: CJhbpw5zJmfM6+MHuDYLYi6e0TvchsFqHPNRC6uOLYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:aa:ce:80:75:9f:91:84:5c:69:b9:96:bf:e4:27:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Validity
Not Before: Aug 4 06:00:30 2025 GMT
Not After : Aug 5 06:00:30 2025 GMT
Subject: CN=28a76ed298dc69e7cd5130e2cbe98bb7df0bd656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2c:ce:7a:67:7a:81:43:e9:1e:a2:35:8f:87:
da:06:0f:c3:9f:1d:84:d9:1f:bd:86:3b:0d:29:d3:
72:f5:48:67:43:22:0c:dc:27:d5:32:89:d0:38:d5:
23:f4:05:df:8a:83:0c:2b:0a:10:68:59:f1:2a:43:
4b:a5:b4:4a:92:11:8c:51:e3:e5:17:d5:a2:60:ff:
0f:2d:74:48:3b:ef:f4:45:26:42:f9:3c:d7:2d:60:
9a:08:a6:62:b9:c7:d0:8d:6b:46:88:30:57:08:41:
e0:50:4c:a7:3c:44:7a:b7:56:d7:23:05:82:9b:6f:
fa:cd:eb:a1:7d:51:1b:83:8c:a5:77:df:65:e6:f4:
92:c4:fe:c3:86:d8:1f:5f:ac:cb:2d:1a:4f:a4:c5:
43:8a:e1:42:84:8b:25:a7:c6:ed:46:ef:b1:56:f3:
7f:5b:4a:48:47:24:6b:10:08:f2:08:c7:fa:49:6f:
c1:71:6c:e6:36:ab:cf:27:03:c8:be:74:d1:bc:9b:
01:0b:b7:39:c8:cc:31:a0:db:7e:80:e9:cf:b4:0d:
da:4a:1f:33:00:c7:25:62:ed:b7:c3:99:a3:10:3e:
4d:e9:8c:c1:5b:08:ce:7d:3a:a5:29:fd:97:a6:e1:
2c:05:4f:9b:77:d5:c2:97:79:ba:01:4a:f5:98:dc:
45:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A7:6E:D2:98:DC:69:E7:CD:51:30:E2:CB:E9:8B:B7:DF:0B:D6:56
X509v3 Authority Key Identifier:
keyid:23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:cb:fe:53:d7:b7:c1:f8:1a:57:e7:d5:22:ea:b5:48:37:06:
25:69:a6:74:4b:c6:f8:e1:c3:e1:ed:1e:82:57:b2:ce:0b:28:
9d:d7:79:2d:38:a9:aa:27:89:96:89:e7:b3:95:d5:b1:23:38:
26:2d:f5:fe:64:71:7c:dd:f9:9d:7d:1a:85:2a:3b:40:0f:6e:
37:b2:81:3f:0d:bc:a5:2e:48:7a:9a:da:13:cf:d9:a5:25:b4:
43:b6:4d:82:f9:82:85:76:27:31:d5:3c:8f:ce:43:59:33:f9:
41:2d:b0:be:ad:28:4b:dc:a2:a5:59:ba:d6:9e:c9:59:e9:a1:
ec:b1:db:56:e9:2e:e0:b7:a0:b3:56:45:6e:ce:d2:d1:ca:aa:
88:f9:bc:85:45:50:b7:20:50:0b:8b:0b:16:75:e5:88:d7:1a:
50:ab:9d:81:51:d1:f1:9a:21:0a:e3:76:39:9f:41:d8:41:1e:
5b:41:19:5c:d8:59:67:b3:98:d8:37:45:88:dd:30:1f:8b:df:
3a:fe:10:16:72:ea:31:7b:fc:7b:d1:66:b3:98:f4:40:72:2a:
af:08:2b:77:5b:51:64:e1:1e:aa:f5:d1:d1:69:86:01:24:fb:
5a:57:e6:fe:3d:c0:10:8c:48:77:04:81:91:2d:fc:5e:18:d2:
8d:be:ee:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:22:33 2025 by rpki-client