Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
File: I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft (raw, json)
Hash identifier: i2ySbtoDl6SQ8idhlQB48ZiNVFS9bkFhJpWeL5Oq7yA=
Subject key identifier: 73:71:49:2F:43:18:21:B6:EE:6A:07:62:59:19:B7:AF:A4:F0:F6:B0
Authority key identifier: 23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
Certificate issuer: /CN=234cd34911cfce946a22ea84663738cdcc076d45
Certificate serial: 0198744F9CB65B882FAECEA1CCF855909BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
Manifest number: 161B
Signing time: Mon 04 Aug 2025 09:00:31 +0000
Manifest this update: Mon 04 Aug 2025 09:00:31 +0000
Manifest next update: Tue 05 Aug 2025 09:00:31 +0000
Files and hashes: 1: I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl (hash: OSmLvueBOg1c9V6njKJLfXpyfhZxTlIlE2FZodoJqLY=)
2: h4MNBNIqF_ThX6XaH2WdhshuJOA.roa (hash: rTGzgorMfX1eun7k8wcYtv0yi00PmZQby+9ZEZuIh7g=)
3: nJekGUdzLnW-TjQjig7_IehTMxo.roa (hash: 7EP+L4VTl9fIN/VTMWiTcp215tfBsK8IFYr8aaBuzJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:9c:b6:5b:88:2f:ae:ce:a1:cc:f8:55:90:9b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234cd34911cfce946a22ea84663738cdcc076d45
Validity
Not Before: Aug 4 09:00:31 2025 GMT
Not After : Aug 5 09:00:31 2025 GMT
Subject: CN=7371492f431821b6ee6a07625919b7afa4f0f6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4a:13:9a:2f:38:b0:31:2b:0c:03:19:14:d0:
32:f5:7f:ae:0e:0e:ff:2d:25:75:f0:0e:d8:27:a2:
3e:77:8d:0d:fb:84:3b:d4:8c:da:b1:6c:89:36:2c:
00:2e:7a:fa:b3:43:47:e5:80:6e:b2:95:15:fc:b2:
f3:15:02:c6:b3:53:cc:31:67:3b:81:b5:cc:5d:a3:
23:01:46:09:9f:34:71:e1:b9:3a:87:b8:14:e2:20:
45:ef:8c:34:0f:00:72:59:fc:ef:7b:5b:11:d4:0a:
93:5d:5c:c9:7a:c3:ed:6b:6b:a1:e5:79:54:ab:bb:
d2:f0:83:98:2e:23:74:ba:6f:0b:68:5d:4e:42:be:
19:c3:10:b6:ad:7c:ff:2a:a9:6e:9d:d9:85:35:82:
04:48:33:cf:e2:01:03:4c:aa:99:81:64:f9:08:b7:
76:0b:ff:fe:b4:f3:cb:3a:0b:5f:4e:58:53:01:0c:
3b:07:4f:ce:d1:5f:77:c4:69:f2:73:61:f2:13:bd:
a7:c5:e7:02:0c:25:9a:97:c1:d5:32:a7:dd:e3:1d:
67:ae:89:6c:dd:c4:98:c8:23:d3:83:61:da:cc:0a:
4f:a8:0b:24:4e:12:56:0e:b5:db:49:26:27:56:ee:
b2:82:d1:59:31:c6:88:e9:0a:c7:22:a2:03:a8:6e:
83:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:71:49:2F:43:18:21:B6:EE:6A:07:62:59:19:B7:AF:A4:F0:F6:B0
X509v3 Authority Key Identifier:
keyid:23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8d:27:13:04:07:32:63:72:49:9b:58:21:61:aa:2a:20:fb:
72:61:00:ab:60:4b:ab:83:b7:4c:3f:01:12:19:77:2f:88:d9:
c3:f7:ff:71:6f:68:09:8f:4b:7d:04:41:67:75:44:73:36:58:
d9:c6:1d:c9:62:7a:5a:35:16:15:62:3a:22:9b:3e:d1:1c:8d:
39:4b:a2:f1:05:f7:e5:c2:96:94:7f:ea:74:f8:a7:67:00:93:
50:de:4e:9f:d6:9a:52:12:2d:8c:8d:67:92:73:af:4f:8d:61:
28:25:e2:ea:8b:34:56:90:ba:65:9c:0b:d2:3d:8e:b9:0d:fa:
d9:09:95:54:65:a2:f2:4c:7e:83:a2:eb:85:74:d1:6d:a1:f4:
82:5a:17:cc:b9:92:78:e2:45:de:a4:c7:45:a0:e5:71:ea:da:
da:09:c4:da:02:d0:17:c1:76:47:17:01:4e:32:6d:b9:ea:48:
d6:60:48:24:dd:b2:98:59:bf:0d:4b:02:97:45:bc:01:6c:5b:
d0:de:40:2d:63:88:fa:f0:e4:0b:28:a6:2c:9b:ea:f8:13:af:
e8:31:43:4d:70:4a:0a:74:2c:26:ad:be:84:ff:33:45:2d:ef:
b9:66:1e:e5:8c:d7:b0:19:5d:ce:ab:51:ab:85:ed:75:c9:3c:
2c:f0:d9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:39 2025 by rpki-client