Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
File: I7GUMIfOaWI-drIUWzR5rCBLock.mft (raw, json)
Hash identifier: 5Jm4mYP45u0XXzfEbTraIse2aqKeR1vsRkXMl0nBA8M=
Subject key identifier: 3A:A1:12:F0:FA:11:B7:2C:84:36:EE:9E:AE:88:E8:DA:FE:CC:FC:1B
Authority key identifier: 23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
Certificate issuer: /CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Certificate serial: 0198733D2D1599B4C916AE5B08AB576098F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
Manifest number: 1555
Signing time: Mon 04 Aug 2025 04:00:45 +0000
Manifest this update: Mon 04 Aug 2025 04:00:45 +0000
Manifest next update: Tue 05 Aug 2025 04:00:45 +0000
Files and hashes: 1: I7GUMIfOaWI-drIUWzR5rCBLock.crl (hash: 5txtmgSJX+GDX113ygGvE6GIPFESiqlhED7P4a2GD+Q=)
2: IGzDnKyfU3XrsCi1kVIq3v9WjnM.roa (hash: BCjdpahib4P29wEhEZ+5HfDxKnWj0l2OSsP7lZ3IOHg=)
3: fngY7vAjtnIa6khyzBr6ohfARXc.roa (hash: 8j7K0AdGmWd/+RMVsdDrX0khITQq1MTMhTuPXkbPnqc=)
4: xgdlAL2WKr_Js4V_ZLjPaz6bev8.roa (hash: CfOyHBtQR8zjYYv9qA3Dd8n5he3YeIT+MsIzoT30dKc=)
5: z5Ucz1kkGg56QZyAblN2WefSoGM.roa (hash: 5hK/qHn0csimMvRktmqCqsq2To8mi7zen0Vo1KFJGyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:2d:15:99:b4:c9:16:ae:5b:08:ab:57:60:98:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Validity
Not Before: Aug 4 04:00:45 2025 GMT
Not After : Aug 5 04:00:45 2025 GMT
Subject: CN=3aa112f0fa11b72c8436ee9eae88e8dafeccfc1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:76:3c:07:6d:85:6f:7c:4c:a9:92:2b:ae:df:
23:7a:88:22:52:95:01:d6:f7:1a:7d:51:54:5b:f6:
1c:a3:2b:bc:a2:50:1c:e1:5d:65:4e:d4:ed:d4:37:
38:f7:38:96:3f:b7:18:b0:00:17:de:5f:8e:1f:4e:
63:0d:4f:c0:50:48:6b:e0:49:bc:36:00:de:3c:2e:
c7:15:53:c4:1b:40:1c:d6:07:c3:47:c9:88:ce:8a:
29:12:74:72:76:36:98:28:14:84:6a:df:12:40:9b:
12:8d:7f:4f:cc:68:11:10:e7:ad:a3:8d:7f:e3:1a:
fe:ac:b7:b8:dd:8e:8e:fd:95:60:01:e0:ce:9f:43:
36:3d:6f:9d:2d:0e:bd:56:77:62:02:68:69:67:77:
e0:ab:81:6c:1f:51:74:74:f3:1f:dc:e2:b0:ba:77:
b5:34:8a:ff:f5:7d:a2:d7:78:4e:62:91:cb:16:4c:
52:b6:4e:19:92:52:22:49:20:2b:48:e9:6e:7e:39:
44:39:ee:a1:2f:d3:a8:b6:18:42:b2:69:f6:4d:7f:
e3:e9:6a:5e:97:a5:7f:55:51:f5:5a:43:92:8a:4a:
39:db:b0:f2:c8:32:f2:30:43:12:49:d7:85:34:e6:
4d:3e:31:7e:33:02:7d:a2:4d:1a:b9:eb:41:99:57:
76:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A1:12:F0:FA:11:B7:2C:84:36:EE:9E:AE:88:E8:DA:FE:CC:FC:1B
X509v3 Authority Key Identifier:
keyid:23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:50:ac:df:40:22:9f:03:9f:74:4d:87:92:35:6b:a8:3f:32:
ea:5e:94:95:bd:22:a9:2e:81:1d:e2:3a:35:62:04:e5:1f:b3:
b0:26:9a:da:bc:9d:86:a4:0b:5f:7d:3a:c0:4e:a2:00:3e:6d:
b6:08:3a:d0:f6:0e:9a:bf:89:d1:9f:bc:e3:36:4c:09:61:14:
58:cc:ad:65:aa:b2:a3:43:89:75:22:35:a4:1b:e3:4a:ca:25:
16:03:ff:4f:c4:4e:45:18:f9:0e:1e:ab:a7:47:c2:57:7a:9a:
5a:c6:f7:d9:2a:a2:bc:5c:9e:ff:8f:6c:b2:c3:74:71:5f:45:
15:37:4a:2c:e1:98:3e:a9:35:b1:85:5c:04:a2:26:36:c7:92:
71:32:d8:2e:f5:ca:45:9c:26:c1:76:21:a1:ca:fa:0f:63:d3:
ec:71:f5:7f:4f:6a:54:3f:07:8a:47:69:6a:92:d9:5a:3a:d9:
c4:13:b6:bd:ea:23:37:5a:0b:ca:1e:22:27:c9:af:46:34:31:
92:28:b9:88:5f:2d:13:35:2b:f2:3e:11:ff:a1:9b:34:b9:55:
b9:25:81:34:79:50:16:1f:85:a2:29:4b:96:ea:f1:bc:a9:79:
d8:5f:0a:94:26:be:c7:35:8e:04:24:08:88:1b:8c:1a:f6:c6:
d0:d5:e7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:44 2025 by rpki-client