Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
File: I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft (raw, json)
Hash identifier: qZaUVstA0D0DF1PKfZCtGfxo3fJEFSCmuaz6ErrqnKQ=
Subject key identifier: 15:4F:CA:A3:35:30:8E:05:7F:FB:18:F5:59:A6:45:54:05:F5:73:73
Authority key identifier: 23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
Certificate issuer: /CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Certificate serial: 0198880D79D017131F87154F72F17D8C7732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
Manifest number: 1369
Signing time: Fri 08 Aug 2025 05:00:41 +0000
Manifest this update: Fri 08 Aug 2025 05:00:41 +0000
Manifest next update: Sat 09 Aug 2025 05:00:41 +0000
Files and hashes: 1: I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl (hash: FlnUbtvyMIT5gJQSv5gEKTW2jCpIXPWe9dNfcUecJ44=)
2: i8Q4g4VsliGNNp87vd6oYtqJ_zk.roa (hash: O+cLxQgdSxj9HwSnDkkvV/wDo/+EE05gj69lFrqob6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:0d:79:d0:17:13:1f:87:15:4f:72:f1:7d:8c:77:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a7b593c804a683f0c8fa3eda9335af92a89044
Validity
Not Before: Aug 8 05:00:41 2025 GMT
Not After : Aug 9 05:00:41 2025 GMT
Subject: CN=154fcaa335308e057ffb18f559a6455405f57373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5f:15:ef:9d:b7:41:22:ba:f6:40:91:52:78:
e5:20:c7:d7:c6:c5:90:1f:4a:96:01:4d:72:52:5f:
fc:98:44:07:fd:ec:e5:5c:f6:0c:37:80:f1:ae:0d:
ba:fb:57:af:58:c0:3e:e2:e5:70:76:a5:11:c7:1b:
c8:89:cf:b4:7f:01:6d:26:77:61:a7:e2:6a:28:26:
73:d6:ba:60:b2:c9:f7:39:ab:60:87:2e:03:b0:87:
90:09:a4:a6:ec:0b:5d:cf:bd:ed:75:42:26:5c:a5:
42:60:ef:fa:d6:27:8e:a6:d9:5e:73:38:a6:c5:65:
30:71:a9:b3:ee:44:28:30:92:a5:4a:d4:32:d0:ec:
7d:33:2b:35:b2:f6:e1:96:8c:57:09:c0:9a:dc:1a:
89:df:00:0a:96:be:09:9c:d4:95:0a:55:7b:f9:c6:
e1:cb:fb:f0:4a:e5:0e:79:0f:0e:e3:50:cc:c3:8e:
da:64:32:b3:a6:21:d4:f4:0e:79:1d:c3:3b:b2:44:
42:60:ed:3f:a6:17:46:88:be:fc:88:24:6f:02:0b:
fd:34:97:4d:1f:54:54:df:10:4e:1a:96:dc:8f:8e:
59:b7:f2:71:51:6d:30:4c:15:43:c9:1c:f7:a2:84:
82:a7:2d:22:ad:e9:36:52:05:35:b9:b1:79:b7:55:
83:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4F:CA:A3:35:30:8E:05:7F:FB:18:F5:59:A6:45:54:05:F5:73:73
X509v3 Authority Key Identifier:
keyid:23:A7:B5:93:C8:04:A6:83:F0:C8:FA:3E:DA:93:35:AF:92:A8:90:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6e1k8gEpoPwyPo-2pM1r5KokEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ddf559-433b-408f-a5b2-3fb5adde6040/1/I6e1k8gEpoPwyPo-2pM1r5KokEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b6:f5:56:7a:f0:f4:29:ff:e9:a9:48:da:b5:6c:99:1e:a0:
37:af:37:38:39:a9:2c:a0:50:ad:31:48:ef:b1:39:ad:17:bd:
df:8f:5e:4c:24:a3:b0:d2:13:00:90:bc:d0:60:34:0d:db:04:
7f:41:05:46:a7:e5:2d:5f:88:5f:ba:f3:22:4b:29:bd:b8:ab:
16:0b:23:3c:8f:c1:04:bb:95:c1:dd:48:ff:c1:1b:9a:86:a0:
61:3f:4c:51:49:65:77:ab:39:48:2f:03:2a:c3:fb:2d:40:b0:
12:af:75:22:bd:5a:1c:12:a7:26:f4:ac:f5:4a:ea:88:a2:3f:
8a:7a:ae:9e:2b:1b:4d:44:c7:88:3a:66:93:5f:f0:ff:41:14:
3b:23:a3:51:2f:30:ed:bf:0b:08:b8:c9:7d:06:e6:f4:09:16:
fb:16:32:a9:c7:5c:1a:2b:ed:bd:cc:66:15:ae:18:39:55:85:
29:35:a4:bc:11:9b:9f:c6:d8:a3:5c:77:1e:5d:cc:55:6f:90:
f6:17:6d:9b:ac:21:7e:15:c8:35:b9:69:63:de:fa:a9:18:44:
cd:8a:4c:c3:15:da:42:a4:00:56:b2:4a:87:be:20:5c:50:e8:
43:66:9a:8c:6f:0d:88:ac:b0:30:ff:5b:08:f9:2d:86:8a:ff:
0b:1f:26:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:10:24 2025 by rpki-client