Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
File: I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft (raw, json)
Hash identifier: EIFKihmKEOCGPxLkGMc3uSGnbGVTOdxR+rFhxfdFa9I=
Subject key identifier: 03:51:DD:A6:79:88:43:77:0E:1E:C9:C6:DC:85:E4:53:4C:96:9C:7D
Authority key identifier: 23:DC:D6:F1:71:26:D4:E9:51:D9:2B:C5:F4:C0:6B:A9:45:0F:C8:D4
Certificate issuer: /CN=23dcd6f17126d4e951d92bc5f4c06ba9450fc8d4
Certificate serial: 01987E667F6228ABD4FE590F729F1DD886CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 08:01:43 +0000
Manifest this update: Wed 06 Aug 2025 08:01:43 +0000
Manifest next update: Thu 07 Aug 2025 08:01:43 +0000
Files and hashes: 1: HLzZYAURdW7ECuJc4fBvkEOMPUU.roa (hash: HLSzvw8EJ6C84Lk+YNRBmj8BE3yMR8wKB5nstwpxKJ8=)
2: I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl (hash: YsU7SydLBpYrtSYHRBHGk4i6c9TBwEa+z2iZG22X2ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:7f:62:28:ab:d4:fe:59:0f:72:9f:1d:d8:86:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dcd6f17126d4e951d92bc5f4c06ba9450fc8d4
Validity
Not Before: Aug 6 08:01:43 2025 GMT
Not After : Aug 7 08:01:43 2025 GMT
Subject: CN=0351dda6798843770e1ec9c6dc85e4534c969c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:89:a1:94:1b:5e:ba:9f:fc:a8:2c:65:43:e7:
3c:3d:37:e3:5a:8a:c4:8e:b1:40:23:fd:18:6c:a9:
e3:e9:80:53:b7:4d:24:dc:ec:3e:65:90:da:93:7b:
fa:e7:01:15:44:d0:7d:c4:7e:f5:d3:2b:e7:ed:c3:
5c:e4:bb:a9:78:2a:97:11:e2:6b:0d:cb:a6:ea:14:
0d:a9:d9:48:34:98:93:8b:12:a8:e6:87:b7:7e:ae:
dd:64:1c:0d:ca:d8:4e:f5:c4:d1:3c:6f:4d:1a:87:
f5:ec:ec:e8:97:12:13:db:e8:56:37:cb:db:fb:fb:
59:2d:99:59:1a:4a:d6:d3:17:bc:87:56:f7:f2:01:
08:22:22:ac:55:5f:4b:78:56:3a:b4:98:38:c3:a2:
51:6f:73:16:a4:95:0e:14:40:b9:95:ab:44:3c:9d:
29:96:4c:86:c6:30:52:db:51:66:4a:00:1c:9d:3d:
7d:19:9b:c4:73:cb:ed:3c:f5:79:5b:dd:9b:28:41:
7e:e7:83:9f:c9:18:20:f7:02:9b:f3:e6:47:7a:46:
7c:8a:20:ec:90:92:9d:32:ee:56:19:09:45:a0:6f:
41:2e:91:60:88:24:4b:5c:3e:7f:9c:38:f8:40:fe:
f4:08:b3:49:6d:4e:ca:10:4f:c8:75:d3:12:fb:0b:
12:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:51:DD:A6:79:88:43:77:0E:1E:C9:C6:DC:85:E4:53:4C:96:9C:7D
X509v3 Authority Key Identifier:
keyid:23:DC:D6:F1:71:26:D4:E9:51:D9:2B:C5:F4:C0:6B:A9:45:0F:C8:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:15:42:a0:b8:c3:c3:bb:bf:1e:c6:88:b6:36:00:e3:c2:21:
e3:30:c1:68:0a:49:00:f5:a8:64:7e:30:83:c5:88:4b:56:78:
9f:d6:bf:a1:b7:9b:fa:3c:03:8d:e9:0d:b7:ae:96:a8:e3:65:
fc:7a:b0:61:b0:cd:dc:e8:ec:ed:54:3a:73:74:cf:54:61:b5:
d8:61:61:02:b2:55:37:24:be:14:06:47:c6:03:53:35:58:8c:
11:85:ac:6d:3d:5c:58:be:b6:94:86:af:33:f6:fc:eb:97:04:
bd:2f:bc:68:c1:26:2a:64:f1:8f:eb:11:97:49:e4:c0:81:4c:
a6:a4:4a:77:85:85:29:8b:44:c6:f3:b6:07:4a:44:ed:7b:b0:
39:d3:bf:b2:bb:93:92:7d:38:45:a6:22:5a:94:a4:75:99:fc:
24:5a:cc:28:82:0b:7b:05:06:ba:3f:1c:d5:32:83:d5:fd:73:
2e:13:e3:21:25:99:33:20:fc:bc:65:32:f3:06:fe:c0:69:e4:
87:07:6b:e0:c3:22:67:78:a0:2e:6f:74:e6:60:a9:2a:b3:85:
7c:62:d7:23:27:f6:28:82:00:c2:cf:5d:8c:88:f9:14:21:45:
e8:7a:0a:5a:e6:76:f8:a9:d4:e9:44:aa:70:79:2e:f5:b1:c0:
34:27:50:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:15:08 2025 by rpki-client