Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
File: I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft (raw, json)
Hash identifier: Rga6gJE8lcDboiKg/IP+GVBiuUWRt9ecIUlzfRm9S14=
Subject key identifier: 75:1D:FD:B9:C8:87:62:AA:18:8F:29:69:36:F5:A7:99:D7:11:F4:86
Authority key identifier: 23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
Certificate issuer: /CN=23607105955c764a813fd9524a7e41b940c56832
Certificate serial: 01987298C5E65DDFB9459BF50E5B63006FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
Manifest number: 0219
Signing time: Mon 04 Aug 2025 01:01:11 +0000
Manifest this update: Mon 04 Aug 2025 01:01:11 +0000
Manifest next update: Tue 05 Aug 2025 01:01:11 +0000
Files and hashes: 1: I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl (hash: T+EA/bPa6mXPZv4KtvoCglUBHt1kqH+VAFYiqzTPSRE=)
2: pL8DPUuY6V_LTawy1OdUwrIg01c.roa (hash: yxyfBx5vs5Lhayo07nTfHgtEaPhrWIe0WeuncjCeyYo=)
3: rPtueqwAgjU2IUHv5A02J4kLlys.roa (hash: vDBPmEjKrFXU2lnK2ZWnREJRhpJ1uOnxEsPQx6QBwFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:c5:e6:5d:df:b9:45:9b:f5:0e:5b:63:00:6f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23607105955c764a813fd9524a7e41b940c56832
Validity
Not Before: Aug 4 01:01:11 2025 GMT
Not After : Aug 5 01:01:11 2025 GMT
Subject: CN=751dfdb9c88762aa188f296936f5a799d711f486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:27:89:25:f7:c3:9c:59:72:d6:86:b6:fd:99:
eb:00:8b:37:ec:b5:2e:0c:52:90:c0:4c:87:8e:ec:
4f:e2:3b:5b:3f:2b:da:c1:0b:bd:86:c3:54:b8:0a:
d8:8e:ab:d8:e0:aa:ba:63:13:b6:7e:23:06:f8:dd:
e8:e7:8b:44:fb:80:41:aa:09:e6:86:cb:30:fd:30:
fc:4b:65:39:ae:59:b3:bb:86:23:90:0f:90:b5:11:
59:24:7a:7a:9e:c1:07:19:44:21:e6:b0:86:c1:8b:
e8:db:af:12:36:cf:b3:31:2e:68:b9:0c:15:80:3a:
45:e9:a0:37:f2:5c:de:c2:1f:aa:1c:b0:2d:d0:d5:
a9:93:14:5a:5f:21:bd:90:b1:0f:36:d0:ea:ea:d7:
42:37:a2:b1:6e:ee:bc:37:d1:6d:25:36:be:58:c6:
bd:c7:51:2c:6c:a9:df:90:51:aa:be:2d:65:74:89:
6d:99:a3:9f:19:6f:d2:e9:c2:38:f7:3f:64:0b:f5:
66:98:91:37:96:83:78:31:94:11:85:6a:3e:46:e2:
db:55:5a:13:29:6a:7c:d8:91:ac:6b:1a:85:53:31:
5b:36:6b:f6:fc:b0:29:d8:02:6f:40:9e:68:2c:84:
12:f0:f3:cc:43:16:17:36:a1:b1:3d:82:57:16:46:
55:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1D:FD:B9:C8:87:62:AA:18:8F:29:69:36:F5:A7:99:D7:11:F4:86
X509v3 Authority Key Identifier:
keyid:23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1f:aa:85:05:72:b3:8e:25:bf:81:07:40:6c:ff:81:0f:5d:
ae:94:68:94:b1:a1:68:52:9c:50:a5:99:67:42:9a:9c:15:9e:
cf:48:83:49:37:cb:bd:aa:22:b4:55:e4:6f:bf:ae:b7:ba:a8:
ea:5e:0a:9c:91:0c:b4:d8:58:87:6d:e9:18:0a:c5:a6:db:52:
8f:82:11:ca:a4:ab:f1:c0:57:5e:d3:1a:97:bb:c9:80:06:8f:
e6:bd:8e:8d:3e:74:08:f4:46:fa:61:fc:50:6c:fb:27:67:e1:
de:53:a9:e3:ed:af:e9:f6:7e:3f:fa:c0:c4:ff:e5:4f:a2:dc:
44:1f:80:ea:28:5f:f7:4c:1b:0f:f6:04:de:03:a6:4b:db:1e:
85:90:58:46:83:b6:9d:4c:87:a2:f3:23:30:c1:93:47:cd:3d:
13:fc:12:13:a5:fd:10:36:35:4a:ac:c0:e1:bc:83:e7:79:38:
fd:7f:a4:c5:d5:1f:93:f2:10:bb:a5:f5:f6:4c:66:14:4d:f6:
21:8c:2d:a5:b8:d6:e3:0d:01:35:f8:79:2b:6b:15:d1:4b:30:
f3:3d:7c:7f:46:de:dc:c5:f1:20:e9:08:a8:f9:41:73:8c:da:
8b:ef:b0:ff:ba:ec:d0:18:c4:31:2c:9f:0f:0c:4e:1b:60:e2:
cd:4d:4e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:35 2025 by rpki-client