Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
File: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft (raw, json)
Hash identifier: LWXGnicWbNVqmos6FIWDHhrYlzShCRSJOnCa1qVUTNY=
Subject key identifier: 64:90:7E:76:54:78:09:1A:C1:9B:72:0B:BD:D1:A1:AA:F3:1F:84:68
Authority key identifier: D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
Certificate issuer: /CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Certificate serial: 01988B0FA948E54B7AA28BAEB3CF606FEC27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 19:01:56 +0000
Manifest this update: Fri 08 Aug 2025 19:01:56 +0000
Manifest next update: Sat 09 Aug 2025 19:01:56 +0000
Files and hashes: 1: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl (hash: mdHH1r1OHIs6rNYlNJXkBzEc55XknUYCYdvKxq+09ps=)
2: lsGbzxHmmLCraaV9m6GpjO-iIBA.roa (hash: Z6I8DbUnNuqgSWO6SRPbYw4EfdxPDhEpV2EFYvnSy8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:a9:48:e5:4b:7a:a2:8b:ae:b3:cf:60:6f:ec:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Validity
Not Before: Aug 8 19:01:56 2025 GMT
Not After : Aug 9 19:01:56 2025 GMT
Subject: CN=64907e765478091ac19b720bbdd1a1aaf31f8468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:aa:7d:bb:fa:6b:8b:11:3e:0f:bc:e9:2d:71:
94:aa:2b:4e:65:bd:4a:53:65:82:59:0b:e1:f9:6a:
0e:62:db:a6:c8:e2:b6:72:ab:e4:6d:62:5b:09:17:
38:81:0e:6e:1e:3a:85:ad:f7:03:36:69:6c:ff:30:
08:b8:dc:57:f0:64:3d:ea:fc:79:35:a3:16:3e:77:
0c:6e:4d:69:1a:16:ae:62:3b:34:bf:db:d0:72:b2:
a0:87:58:41:e4:08:e8:e6:a0:97:84:68:bf:e1:4e:
79:31:00:9f:1c:9e:6c:a0:3f:4d:4f:53:1e:6d:e1:
81:73:3d:77:94:d2:a5:a8:c4:93:5f:44:85:f8:96:
d1:ad:df:7a:59:67:05:c6:15:8a:95:ce:8f:fc:ba:
a6:de:66:81:84:9c:d9:a0:cf:a9:1e:43:c9:c6:93:
d0:64:40:80:7a:39:f6:6d:16:d5:9b:0a:57:ba:e0:
ae:57:56:7c:f1:5e:33:dd:09:cc:97:cd:b0:ed:80:
30:d3:b6:9f:ba:e2:e8:30:1b:d7:89:6a:fd:d5:4a:
5e:10:57:0d:c6:f5:dc:6a:f8:20:80:fa:e9:db:7d:
a2:9c:0e:8b:2e:51:5f:51:55:f6:6b:95:c1:6b:0d:
a2:82:91:4a:1e:d3:80:6e:51:d1:06:29:81:f8:4e:
c0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:90:7E:76:54:78:09:1A:C1:9B:72:0B:BD:D1:A1:AA:F3:1F:84:68
X509v3 Authority Key Identifier:
keyid:D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:48:87:fd:55:77:5a:0b:dc:07:7d:72:4b:5b:c9:72:2d:a3:
80:58:12:40:de:29:9a:b2:7d:d4:3c:41:89:86:25:eb:4e:05:
12:6b:89:a8:f0:8c:12:b6:a1:a7:9b:5c:74:7c:b6:b0:19:50:
ff:08:73:42:45:76:2f:1d:1a:b5:e0:0f:8e:f0:19:7e:9e:4c:
f1:c4:42:ed:cc:b5:9c:b6:5d:d6:29:5a:09:cd:53:26:15:a0:
20:ba:29:83:bd:69:e0:22:1b:c7:c6:7d:64:ad:0f:f1:d5:78:
80:52:4b:ad:20:1a:99:f8:8b:bb:d4:a6:56:8c:61:63:9f:10:
52:38:37:f1:30:06:57:0e:ae:d6:7a:32:fe:7c:31:e4:11:49:
d2:23:46:f6:87:54:0e:88:8a:ad:d4:4f:5c:ea:03:b8:4e:12:
97:03:51:f4:f1:80:38:43:5d:1b:0b:59:8b:b5:a8:81:00:13:
72:df:2b:9e:73:0f:b9:94:63:0f:8b:c8:0f:55:fd:83:1d:b6:
7b:f2:0c:39:67:60:8b:45:97:b5:0d:e6:e7:97:f6:c5:96:ca:
0f:a8:29:84:d3:1f:ff:44:93:42:47:a0:69:f5:b0:2d:84:95:
95:06:6d:84:5f:f1:6e:c2:f5:6f:56:ca:07:5c:8f:8e:70:7f:
f0:04:d0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:41:08 2025 by rpki-client