Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.mft
File: I08I-kIiU1wK8moNc0fb8XJUcZY.mft (raw, json)
Hash identifier: p0a8B1m8MDwInWnZKk5NA/8pNzRrLuzN84nA60kD2QE=
Subject key identifier: A9:69:08:25:C3:0E:EE:C2:0C:AB:93:61:57:0C:24:21:BE:D3:33:4A
Authority key identifier: 23:4F:08:FA:42:22:53:5C:0A:F2:6A:0D:73:47:DB:F1:72:54:71:96
Certificate issuer: /CN=234f08fa4222535c0af26a0d7347dbf172547196
Certificate serial: 01988B7C769D9B33E99E1A43AD1385FE62CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I08I-kIiU1wK8moNc0fb8XJUcZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.mft
Manifest number: 0111
Signing time: Fri 08 Aug 2025 21:00:46 +0000
Manifest this update: Fri 08 Aug 2025 21:00:46 +0000
Manifest next update: Sat 09 Aug 2025 21:00:46 +0000
Files and hashes: 1: I08I-kIiU1wK8moNc0fb8XJUcZY.crl (hash: um1wcnRkqKHgrc573zqBTUnULMBZgVbPa46vXVv4fos=)
2: PMihf48EDZLf86f7BmXfYmZbV4M.roa (hash: kAi2yEZhpDZ5dFlA+0hzmB2XiAS3L8tb6zCyB/FGwDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I08I-kIiU1wK8moNc0fb8XJUcZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:76:9d:9b:33:e9:9e:1a:43:ad:13:85:fe:62:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234f08fa4222535c0af26a0d7347dbf172547196
Validity
Not Before: Aug 8 21:00:46 2025 GMT
Not After : Aug 9 21:00:46 2025 GMT
Subject: CN=a9690825c30eeec20cab9361570c2421bed3334a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ec:8a:40:00:32:95:2a:de:63:1f:e7:f0:36:
ae:13:cb:74:2c:5e:f3:55:25:d4:9f:93:16:36:63:
04:3f:48:39:81:fc:5c:69:34:24:f3:61:7b:1d:b6:
13:60:f0:60:51:e9:a0:a8:7d:4c:1a:29:7c:c9:15:
33:d9:e4:c4:91:64:cf:b9:85:42:8f:58:2a:12:e0:
97:eb:e8:ec:50:32:f8:77:00:ed:01:e1:5b:eb:fe:
fd:59:4f:5b:82:cb:91:2d:d3:0e:39:b8:9f:78:39:
c1:3b:85:9c:21:de:68:4b:cb:eb:f6:39:ea:2e:5a:
27:bd:74:93:04:35:1a:e1:a0:db:f7:5d:94:eb:cc:
81:91:de:63:53:6b:c9:bd:0c:dd:82:19:2f:f5:af:
b1:e8:c5:dc:73:f3:8f:61:db:d9:e8:a9:65:19:dd:
3f:22:13:bc:41:bb:f3:6a:6c:27:0a:3a:f0:40:14:
c5:0f:c9:40:d4:13:04:7d:4f:cd:d3:9a:fb:51:0b:
5e:2d:85:4d:a8:7b:31:26:06:24:2a:4d:95:7e:e3:
6b:8d:27:16:d4:47:40:bd:94:8d:25:36:19:43:e0:
86:da:86:cb:4c:7b:50:d0:6a:d0:d5:37:34:84:f6:
8a:51:bd:82:ca:c1:93:b9:80:71:ab:0c:01:d8:4c:
2c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:69:08:25:C3:0E:EE:C2:0C:AB:93:61:57:0C:24:21:BE:D3:33:4A
X509v3 Authority Key Identifier:
keyid:23:4F:08:FA:42:22:53:5C:0A:F2:6A:0D:73:47:DB:F1:72:54:71:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I08I-kIiU1wK8moNc0fb8XJUcZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a9:cf:72:22:45:3e:e4:39:9f:ba:82:34:75:3c:ef:eb:4c:
a6:03:04:0a:85:b3:6e:72:f1:cb:e5:a3:0d:d6:19:15:d2:e8:
55:43:05:48:7f:9a:ac:4b:d3:97:7c:61:59:f1:3e:81:d0:b4:
97:1c:ec:f6:1f:1e:58:28:e6:40:5f:d5:25:76:cb:a8:1b:86:
b2:c7:ab:56:00:82:5f:55:0c:db:74:a0:2b:dc:29:2c:d8:07:
80:8c:b8:d7:3a:85:4e:c9:4d:3f:43:05:f7:a8:31:41:df:af:
ba:c5:9f:ef:88:16:a3:c9:ff:d7:dd:c5:d0:e3:d7:dc:8d:6b:
03:09:ed:ce:ed:80:d1:1c:a8:57:c8:c2:67:30:4c:dd:3f:94:
45:69:75:d0:c3:84:6d:54:f5:f5:45:e6:78:98:3e:56:bc:bb:
51:03:91:88:de:09:a6:a4:04:76:ed:86:37:1f:30:b2:1f:c9:
ab:53:f8:cf:a8:ab:89:22:11:2f:27:a9:8e:a0:b7:8c:af:c4:
cf:5e:18:e1:e3:6e:52:7f:f7:50:c2:6d:44:fe:cd:39:4d:bf:
e0:7c:4d:bb:26:a3:bf:a8:2e:fe:c6:bd:5e:8d:7f:40:00:b0:
2b:01:ee:9e:d2:15:1e:9b:68:5b:1a:2e:c0:75:d0:ee:c3:47:
4d:48:29:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:32 2025 by rpki-client