Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
File: I3ikqcUjJahZIICboaTYniHALxc.mft (raw, json)
Hash identifier: Q5wJN6hH9v0UrElnQfd6XYU6QuLHbG9h7GMckAdUOLc=
Subject key identifier: D2:96:7B:C9:FB:A9:D5:24:DE:D8:1C:D9:F2:B3:69:8D:47:09:C5:38
Authority key identifier: 23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
Certificate issuer: /CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Certificate serial: 01987D89C6E77696CEF38019ED6D464BF058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
Manifest number: 136A
Signing time: Wed 06 Aug 2025 04:00:37 +0000
Manifest this update: Wed 06 Aug 2025 04:00:37 +0000
Manifest next update: Thu 07 Aug 2025 04:00:37 +0000
Files and hashes: 1: I3ikqcUjJahZIICboaTYniHALxc.crl (hash: O/06OZ/EWWsGcBtio0y7vPfILmoqT4HlOKvG3JMmOG8=)
2: LWXmlZUU3ecfqvwZHXpe4N13PwE.roa (hash: 4NYVwWGAs7YF0X626zcPKU0/2BhITxR5hdojEVCb7vQ=)
3: Sb-J4R6jgDy1hu0trOifGY0aUIY.roa (hash: BnRnuIbBZBHwGOy/+XFTLzwpti+5vGhUFRVEfpqfups=)
4: XNLU8qoxsRXpQnmwz4ctSe-cqyE.roa (hash: JQ5L08jadmyYilDYeIqvPylZ8SNDZ1MGMwYpTLmwoLo=)
5: cEBx7aoqU0ILwpLn4WovM_f845U.roa (hash: J2opbMpTZpUpvX4wcx9CCjjTjdIRz3Wc8zKaGaF1BXs=)
6: caXYCCXqjYg5FcmsNZB3ePKReDk.roa (hash: XSzupsyXsQ8GmhQZJGGSHfiNeG8fCN+9mFDFmlJ4Bu4=)
7: gnOWx6TZJqqJDVFgIEMBOXAqJm4.roa (hash: fy9tgSe6kfwMDX9Ibp9s7/6EtOy/O5uDNSQU1PskuXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:89:c6:e7:76:96:ce:f3:80:19:ed:6d:46:4b:f0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2378a4a9c52325a85920809ba1a4d89e21c02f17
Validity
Not Before: Aug 6 04:00:37 2025 GMT
Not After : Aug 7 04:00:37 2025 GMT
Subject: CN=d2967bc9fba9d524ded81cd9f2b3698d4709c538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:3c:3e:b1:d5:6a:21:db:16:e4:96:5d:64:04:
a6:d1:f3:5b:c0:18:1d:b4:8c:4e:c4:75:44:dd:6a:
ba:71:ff:01:4f:ff:46:a4:cd:fd:e0:63:36:2b:7a:
f8:92:02:01:52:cb:e9:51:49:b1:e8:23:6b:6f:da:
74:30:f2:aa:0c:3b:5f:0c:6d:95:3c:62:6b:7d:77:
bd:23:03:a4:6f:b8:01:ae:42:95:85:6c:8c:96:d4:
4e:c6:f0:42:a9:b5:4e:85:3e:43:b9:07:fe:e8:60:
5c:88:dc:c2:f5:fe:12:79:2d:05:0a:0a:51:23:05:
70:9c:2f:6b:51:89:ff:ef:af:0b:ea:b6:4d:57:06:
c0:eb:b9:44:34:ea:10:b7:6a:be:af:7d:b0:b5:72:
da:79:d6:1f:b6:b2:76:ca:4d:eb:f8:79:77:e1:c8:
aa:67:7a:86:a5:c2:39:32:b7:76:12:71:f8:d8:2a:
56:cf:65:3d:03:8c:41:a1:c8:07:b6:ba:10:9b:22:
75:69:2f:fe:b1:80:eb:46:44:e9:f0:40:01:5f:f3:
3f:24:c9:c4:61:d9:80:d1:ef:2d:dc:74:bd:fa:18:
b0:fd:cb:cc:83:79:01:e7:07:2b:dc:8a:f1:9e:d8:
d0:3a:bb:49:f2:5d:7b:e4:8c:a3:36:eb:ac:fa:ec:
5f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:96:7B:C9:FB:A9:D5:24:DE:D8:1C:D9:F2:B3:69:8D:47:09:C5:38
X509v3 Authority Key Identifier:
keyid:23:78:A4:A9:C5:23:25:A8:59:20:80:9B:A1:A4:D8:9E:21:C0:2F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3ikqcUjJahZIICboaTYniHALxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d654be-174e-41f7-9cfb-937e27ee1b5b/1/I3ikqcUjJahZIICboaTYniHALxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:32:25:39:c5:7f:94:78:9f:ba:7c:cd:38:d4:85:8e:5f:68:
54:c9:c7:c6:2e:92:f2:49:1f:ba:db:71:4f:54:af:58:24:ee:
cc:7e:4d:a7:0f:d2:b4:70:ea:25:72:18:f9:7b:91:cc:b8:aa:
7c:69:fe:c7:89:26:15:74:7d:b6:cc:d9:8c:ab:e4:25:b9:f2:
21:81:87:70:f2:fc:23:ce:60:73:f1:84:1c:d3:60:b6:f4:0e:
e6:7b:86:fb:27:0b:ea:2e:4c:08:27:30:1e:6a:c9:25:26:82:
da:14:22:92:02:34:09:4e:36:65:43:ec:01:a1:39:e8:94:e9:
c9:cc:c0:1b:f3:0d:fb:68:7b:e0:b5:99:0b:60:85:18:1f:ac:
96:ba:e5:ee:cf:aa:3a:c4:62:61:23:a8:55:3a:4e:2d:57:c2:
9b:fb:a1:13:8c:47:9c:5e:e6:81:36:d0:fe:31:1d:3b:46:3f:
97:da:fc:d9:08:cb:47:cd:08:b6:67:0b:27:6d:66:6e:9e:cd:
e7:94:9c:02:98:db:7b:11:85:d0:eb:cb:1c:10:7d:a0:93:1a:
26:32:b8:cc:11:ee:37:82:c1:52:31:86:41:e0:d4:64:c9:1f:
aa:a8:7e:e1:6a:f7:71:8a:5a:70:48:e8:5d:b5:af:42:1f:84:
5b:d9:cc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:02:53 2025 by rpki-client