Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
File: I32X8VCOekR4mfWaVfuKpiQe9RA.mft (raw, json)
Hash identifier: SQ+kXh7x5AMZtrYGF0wu40hK0e+aKY0DDjFnd9Gm5Uk=
Subject key identifier: B2:B6:09:B5:FE:74:9D:A5:DC:F8:F8:67:F3:0A:B6:46:90:6B:C7:10
Authority key identifier: 23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
Certificate issuer: /CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Certificate serial: 01988B7CCC619C1E1AFBE551743563A8FF9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
Manifest number: 04AF
Signing time: Fri 08 Aug 2025 21:01:08 +0000
Manifest this update: Fri 08 Aug 2025 21:01:08 +0000
Manifest next update: Sat 09 Aug 2025 21:01:08 +0000
Files and hashes: 1: AgvVH_Z5ZikBFIUyEGB_f4ftLfg.roa (hash: Ii6l1o1UjR6zsFk/Ik5xPFxEIQrzvV/YcOC6UeUTh7g=)
2: I32X8VCOekR4mfWaVfuKpiQe9RA.crl (hash: WKpQWslR3dZnlGL5dfCW8gW3ZFxfzIcVZYNhKBxn3v4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:cc:61:9c:1e:1a:fb:e5:51:74:35:63:a8:ff:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Validity
Not Before: Aug 8 21:01:08 2025 GMT
Not After : Aug 9 21:01:08 2025 GMT
Subject: CN=b2b609b5fe749da5dcf8f867f30ab646906bc710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f9:e8:c7:1c:98:3e:38:de:85:cf:c8:60:7a:
f9:2f:70:73:2c:9b:d8:02:39:50:59:65:3c:a2:cd:
c8:5b:38:09:c6:11:86:5d:64:97:34:99:00:42:8b:
6f:88:3d:b1:cc:dd:30:62:1c:d7:05:1c:57:b5:73:
ab:85:fd:39:5a:5b:ad:3a:17:e1:bb:77:f1:95:46:
1d:0a:4f:db:94:4d:98:d6:93:28:89:d7:94:53:80:
c7:83:de:8e:7c:26:d2:c5:9e:de:d6:44:a9:1e:bb:
16:5e:db:27:56:10:55:43:06:0b:2e:9e:5f:10:42:
4d:1f:49:54:02:09:94:4f:e5:49:d5:5c:32:da:ad:
37:ba:80:42:e8:75:6f:bb:69:9a:78:1c:29:aa:8c:
df:84:8d:54:1e:0c:80:78:13:17:09:a2:da:c1:05:
3b:4e:67:e8:6f:83:e4:26:5a:07:74:e3:f9:52:75:
98:44:f4:28:5a:f4:e7:52:98:be:a6:81:b6:fb:5e:
91:d9:eb:f8:02:19:2e:4b:75:56:c0:d8:7a:38:cb:
7d:f5:07:4b:cf:6b:14:2d:6f:3f:71:b6:ad:fc:68:
a5:66:9f:6d:95:c3:63:29:e3:63:98:3a:f3:33:92:
9a:65:63:be:66:d5:0f:79:65:18:84:41:65:08:e8:
78:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B6:09:B5:FE:74:9D:A5:DC:F8:F8:67:F3:0A:B6:46:90:6B:C7:10
X509v3 Authority Key Identifier:
keyid:23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c6:71:17:c8:2a:21:a5:58:9c:e1:8d:49:4e:69:03:d9:30:
b9:82:0f:61:46:9c:8c:af:25:ff:96:24:c0:ea:e9:ea:dd:04:
a5:1f:fb:39:fa:c4:5f:f8:4c:f7:17:55:47:89:f7:98:8b:32:
d7:00:6e:6d:78:6e:69:b3:7c:2d:06:c5:b3:45:c8:b3:ad:69:
36:96:e2:22:e7:33:49:31:2a:2b:b3:1f:8e:3d:d4:b0:b1:91:
4b:97:e6:14:01:c5:2e:09:0a:0f:15:af:9b:9f:6d:56:7b:d1:
be:8d:22:d1:84:a6:d7:68:e0:db:28:c3:b1:e0:94:3e:ff:e7:
e2:78:95:da:7a:66:d8:50:63:ab:0b:94:c3:7e:1d:c7:dd:e9:
5c:66:b6:1d:4e:3d:0d:1a:d6:7a:2e:be:bd:86:a5:80:e6:61:
c0:5b:a2:fa:bb:bf:3d:17:ef:a9:e7:e0:a1:87:08:76:01:3f:
e3:e7:a6:d5:4d:a5:af:7e:ea:fc:ea:d5:6a:da:cf:cd:36:b3:
0c:92:f3:55:10:87:91:db:ad:57:52:a6:f8:33:87:b5:75:52:
39:06:e7:77:8d:36:67:92:03:40:3e:17:71:9d:2f:60:99:c1:
e2:28:f7:55:44:97:6e:c8:91:5f:ac:fe:a6:72:d4:f1:25:8b:
69:9b:01:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:01:06 2025 by rpki-client