Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.mft
File: I6lUuSO6IAjpheuiQdG3AHF_iEM.mft (raw, json)
Hash identifier: +c5z+XVsj96yR2ME5+pFtnlt5jUL/mi1h14lf6fO1qs=
Subject key identifier: 7D:EF:3C:8D:27:5B:FE:4D:AD:70:CE:04:14:C5:70:C2:FA:AD:CB:1F
Authority key identifier: 23:A9:54:B9:23:BA:20:08:E9:85:EB:A2:41:D1:B7:00:71:7F:88:43
Certificate issuer: /CN=23a954b923ba2008e985eba241d1b700717f8843
Certificate serial: 019873E3D3699C5ABDC6C8C89491B8BEA208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6lUuSO6IAjpheuiQdG3AHF_iEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.mft
Manifest number: 145F
Signing time: Mon 04 Aug 2025 07:02:47 +0000
Manifest this update: Mon 04 Aug 2025 07:02:47 +0000
Manifest next update: Tue 05 Aug 2025 07:02:47 +0000
Files and hashes: 1: I6lUuSO6IAjpheuiQdG3AHF_iEM.crl (hash: S27xB7Fo/EW1uqoEBjN7HQgLLtmOgdkr6cD/asRgkWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6lUuSO6IAjpheuiQdG3AHF_iEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:d3:69:9c:5a:bd:c6:c8:c8:94:91:b8:be:a2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a954b923ba2008e985eba241d1b700717f8843
Validity
Not Before: Aug 4 07:02:47 2025 GMT
Not After : Aug 5 07:02:47 2025 GMT
Subject: CN=7def3c8d275bfe4dad70ce0414c570c2faadcb1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3d:69:da:b8:d3:f8:53:cd:ee:1d:23:48:34:
6c:2c:f6:51:12:b3:cb:b8:c5:b7:2b:2d:bc:74:63:
cf:a9:6d:c2:0d:44:5e:4c:a6:3f:fb:f7:d2:91:66:
a9:7a:18:fe:65:03:21:3d:62:ec:11:ab:c0:ef:a3:
55:4d:55:58:ea:05:8b:1d:f0:3b:ad:6b:8c:04:bc:
65:fb:3e:67:3c:1b:ad:a8:9c:33:4c:fb:e3:44:ab:
62:12:ad:83:cf:63:3e:1f:33:6f:35:a8:65:a6:f2:
d5:56:83:35:a9:b3:16:8b:8f:5f:75:d6:07:e6:a6:
48:db:d0:b8:da:f9:e8:bf:b7:be:30:c6:61:da:94:
cb:6d:83:5c:ae:e6:30:12:92:b4:f3:5b:79:f7:42:
f6:dc:e2:ee:e8:ae:ea:e8:2c:6a:a3:ad:cf:00:ba:
e2:ae:e3:dc:18:b5:42:0b:e2:59:2f:bb:18:ae:40:
cd:ec:9c:58:28:7a:36:2b:84:70:fa:3b:c9:2e:9e:
4c:01:85:97:61:89:71:c4:96:e8:cd:a7:aa:48:be:
c0:6a:f5:70:c4:e1:1e:39:b8:88:1f:37:86:3e:2c:
96:51:68:8b:8b:20:fa:23:82:30:c5:4d:94:cc:c8:
bb:4f:e9:db:5d:d6:0e:93:88:46:19:de:29:0e:1a:
b3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EF:3C:8D:27:5B:FE:4D:AD:70:CE:04:14:C5:70:C2:FA:AD:CB:1F
X509v3 Authority Key Identifier:
keyid:23:A9:54:B9:23:BA:20:08:E9:85:EB:A2:41:D1:B7:00:71:7F:88:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6lUuSO6IAjpheuiQdG3AHF_iEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f5:35:4d:f9:c8:56:ff:bd:f9:fa:5f:a8:ca:35:cc:6d:34:
9d:f2:21:ae:80:54:cb:81:0e:9f:ab:23:7e:2d:38:eb:fe:cc:
f2:1c:60:ac:a0:fd:d9:de:2e:26:f4:a6:4f:f1:11:b0:5a:0d:
0f:eb:cc:d0:ad:72:b1:3b:5d:ae:bb:00:30:5f:fc:fa:fd:20:
8b:9f:09:b2:c5:c9:31:8b:ba:44:63:11:c7:93:49:fa:be:fc:
97:05:43:41:85:84:3e:d9:80:9e:28:ec:0b:3a:0c:3d:f0:fb:
59:02:1f:6c:e8:b4:8e:49:ba:dc:85:da:83:ae:a4:9a:91:4c:
df:d4:7e:a3:ca:cb:f6:2f:f1:1b:0a:90:cb:b0:c8:6c:37:aa:
e5:de:dc:1d:d5:d1:a7:f4:77:65:39:2c:84:d1:0e:cb:76:ab:
59:72:d6:d6:34:d5:d7:3c:f8:5a:be:6d:c7:67:15:1f:ef:22:
ac:00:62:b9:3a:05:51:90:4c:4b:c6:ea:9b:b3:8b:2c:f4:d8:
e5:ef:fa:bf:c5:d7:e8:de:47:7e:e4:64:59:74:ba:17:74:b5:
64:10:d8:ea:86:cd:64:77:f2:a8:1a:01:be:d9:1d:de:c6:08:
ab:70:c3:f3:85:98:a4:21:3f:21:54:27:fe:ef:86:4d:75:07:
48:43:5e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:12 2025 by rpki-client