Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.mft
File: I7KazNTA1fX4N36n9GNDt2Brq3w.mft (raw, json)
Hash identifier: CTZ14j2mTM24dQxGeSFvnOhP1Mg8aXmxXIhGI8uPyX8=
Subject key identifier: 1E:DD:F5:E5:CB:29:A5:14:F2:86:80:9F:AF:44:D0:DD:53:F3:6A:8A
Authority key identifier: 23:B2:9A:CC:D4:C0:D5:F5:F8:37:7E:A7:F4:63:43:B7:60:6B:AB:7C
Certificate issuer: /CN=23b29accd4c0d5f5f8377ea7f46343b7606bab7c
Certificate serial: 01989336095A83EC0DBA909752A03055894C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7KazNTA1fX4N36n9GNDt2Brq3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.mft
Manifest number: 0CA2
Signing time: Sun 10 Aug 2025 09:00:48 +0000
Manifest this update: Sun 10 Aug 2025 09:00:48 +0000
Manifest next update: Mon 11 Aug 2025 09:00:48 +0000
Files and hashes: 1: BY3gmYE2jAUAzVYgNkSF1kzgx38.roa (hash: o+T/NGOLnxz7Wv8sLagAUwobjqcsqFCif9O5RgNrbi4=)
2: I7KazNTA1fX4N36n9GNDt2Brq3w.crl (hash: R6Uk345FWPUQ+4DODD7hM93V8R2ZNwoIEGnLzqDKlWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/I7KazNTA1fX4N36n9GNDt2Brq3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:09:5a:83:ec:0d:ba:90:97:52:a0:30:55:89:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b29accd4c0d5f5f8377ea7f46343b7606bab7c
Validity
Not Before: Aug 10 09:00:48 2025 GMT
Not After : Aug 11 09:00:48 2025 GMT
Subject: CN=1eddf5e5cb29a514f286809faf44d0dd53f36a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a9:aa:8d:0a:68:27:f3:26:0a:b7:a0:96:28:
fb:4c:87:6e:fa:6e:36:49:e9:27:57:ba:1d:b0:48:
b2:02:cf:4c:67:36:a4:89:02:bb:29:10:64:e2:ea:
4e:7d:55:88:98:9a:cd:98:35:a7:ee:81:6e:ae:35:
be:82:3d:46:5a:7e:cf:b0:d4:a1:3a:44:a7:43:ae:
4c:f3:46:16:f9:63:09:10:08:f9:dd:8c:24:f1:06:
cb:18:72:b3:20:68:37:47:57:95:aa:f2:7e:1d:c7:
b1:8e:ed:60:37:ac:ac:96:36:3c:c8:30:5d:10:bf:
54:83:74:a0:0f:ba:ec:85:f7:fe:0b:81:72:e3:f4:
30:a9:a0:dc:78:f8:7e:5b:80:27:11:f0:ab:f1:ea:
9c:ec:7b:4d:d6:94:f0:01:58:41:31:1d:16:4e:03:
33:8c:53:00:a5:ee:1f:68:dc:6b:56:77:04:ac:9a:
ab:97:35:4f:3d:86:e0:44:02:d5:65:5b:9f:ca:0e:
02:d7:42:15:7d:e3:bc:d8:80:9b:42:3c:61:30:c7:
5b:92:11:f4:49:a6:73:d2:12:56:91:3f:65:68:a1:
b1:67:a0:37:63:20:6a:96:a8:6f:50:1b:b5:e9:c2:
c0:c4:6c:a8:be:87:8d:42:59:1b:bf:97:19:f2:42:
01:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DD:F5:E5:CB:29:A5:14:F2:86:80:9F:AF:44:D0:DD:53:F3:6A:8A
X509v3 Authority Key Identifier:
keyid:23:B2:9A:CC:D4:C0:D5:F5:F8:37:7E:A7:F4:63:43:B7:60:6B:AB:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7KazNTA1fX4N36n9GNDt2Brq3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:56:5a:47:ab:5b:2a:f1:e0:10:96:9c:34:d9:af:5f:d0:02:
66:77:5d:d1:6f:8e:b0:20:6c:41:01:bb:1c:26:7d:d1:2e:e3:
40:25:22:67:74:a0:13:d5:de:3f:d2:b6:7e:15:07:aa:51:e2:
35:4d:90:86:af:dc:88:16:6d:1e:28:95:83:18:c0:56:88:da:
0e:68:5b:b6:89:a9:99:aa:72:b8:fb:7f:0e:75:0a:49:b0:bb:
54:57:48:55:65:44:6e:7e:3e:ba:85:e7:49:ea:c7:93:8a:6c:
be:2a:a3:08:7d:09:de:18:e3:fc:14:16:ca:ea:c3:64:c6:81:
d6:15:0e:23:d9:e1:f1:5d:fd:a0:f9:c7:55:fb:fd:2f:e9:f3:
c4:4d:13:98:79:a9:a7:d4:8a:11:e7:c8:2d:96:49:97:9b:fe:
ae:13:a1:a5:ab:39:9e:40:f4:35:ec:3b:20:d1:9c:1a:73:2e:
66:c0:92:56:a3:6e:d0:43:18:bc:51:2c:ec:dd:62:42:0d:23:
53:a5:07:ee:e9:8c:87:96:0d:b1:c7:18:ac:3c:a6:cc:85:71:
b6:e1:7c:fc:6d:55:85:6b:cd:17:91:f2:00:41:d0:0f:84:00:
68:4e:34:2e:c2:e1:90:27:40:f2:a9:58:b0:29:72:e2:47:0f:
3a:db:4f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:50:44 2025 by rpki-client