Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
File: I90F63vZRcZd8Yc1UtzJDLLhdyM.mft (raw, json)
Hash identifier: 9egfdBv46ki9UEoiEXe35cOxywbyWLXCc0dLIIywIHM=
Subject key identifier: 92:61:B3:3F:2A:17:C2:D0:91:8E:88:46:86:60:2E:EC:FD:8B:12:B9
Authority key identifier: 23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
Certificate issuer: /CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Certificate serial: 01987373EF9DAE18888C885D6957A51CF4D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
Manifest number: ED
Signing time: Mon 04 Aug 2025 05:00:34 +0000
Manifest this update: Mon 04 Aug 2025 05:00:34 +0000
Manifest next update: Tue 05 Aug 2025 05:00:34 +0000
Files and hashes: 1: I90F63vZRcZd8Yc1UtzJDLLhdyM.crl (hash: XnPKTbiz33AaGQpyIfI5rxKb9XFGvG0OnxRVvrV0Riw=)
2: jS5n1QIkV5a4mMLNQcvKPtlrQ-M.roa (hash: lelwm9WsLrqz4fINUrusZCHF/wAouDsWxQ/qaZbxy6o=)
3: kt9kY-16BQ4necIVFRgAtvjd9vU.roa (hash: 66gMsyaOtysX+kjpi4hM+Oe5TYeIKMy84VcIEuNL1pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:73:ef:9d:ae:18:88:8c:88:5d:69:57:a5:1c:f4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Validity
Not Before: Aug 4 05:00:34 2025 GMT
Not After : Aug 5 05:00:34 2025 GMT
Subject: CN=9261b33f2a17c2d0918e884686602eecfd8b12b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6c:7a:f0:7e:45:d4:af:c2:06:89:63:f5:e4:
12:54:61:7c:fc:29:20:de:a6:db:97:6c:d4:07:43:
fa:d3:19:4f:50:eb:74:10:7d:0a:07:50:af:ef:7c:
d6:c6:fd:2a:c9:38:8b:2c:2f:74:a9:55:53:92:a5:
0a:5b:d5:51:63:fd:a8:a8:ed:f3:39:9c:19:5b:c7:
c8:e5:14:42:d1:53:ae:40:bb:19:26:8c:84:cc:70:
c8:1f:f4:08:53:02:9e:6f:fe:1d:4a:24:c7:15:71:
2e:74:55:66:5f:79:70:94:b0:45:7a:82:c0:6a:51:
65:a8:d8:81:3d:e2:43:2b:fa:62:c7:1e:e8:ac:e5:
ec:84:15:6c:0e:5c:3e:26:87:19:24:23:41:0d:c0:
39:56:b7:8f:33:03:9a:6e:ed:fe:53:93:4d:9c:86:
0b:04:e1:3b:95:9c:ab:77:8b:dc:6e:e0:ee:c1:4a:
7d:46:ec:8c:08:40:ec:20:90:c9:72:54:77:7a:37:
1a:5c:ac:62:af:ed:aa:4f:d1:65:60:a6:f0:63:e3:
1a:90:e7:1b:53:1d:f3:23:fb:d3:ba:af:f4:01:fa:
68:88:ae:8f:66:45:c2:c4:0a:2f:2f:a2:6c:a6:1b:
39:c1:af:6f:b3:f9:1a:5a:06:69:53:fe:ed:d3:b4:
cc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:61:B3:3F:2A:17:C2:D0:91:8E:88:46:86:60:2E:EC:FD:8B:12:B9
X509v3 Authority Key Identifier:
keyid:23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:7c:f9:91:94:32:f7:ac:df:ac:cf:f2:3a:57:c7:29:9e:f0:
e2:be:cd:63:6c:ba:4d:c3:b7:af:c7:e0:50:0e:9f:62:7b:ab:
67:7b:64:d6:f9:30:0f:4c:ce:dd:cb:48:c5:f7:3d:2a:e9:8b:
b2:8d:af:b6:40:21:79:be:25:4a:33:22:71:8c:3d:ab:7f:26:
2d:ad:71:6e:42:6f:b4:ad:5a:ba:96:f7:73:29:73:50:8a:0c:
47:10:05:cb:07:f0:e7:c2:c1:87:e7:54:98:74:2d:6f:ea:aa:
ac:81:dd:08:7d:0b:52:0c:73:d9:39:43:74:62:16:d8:94:e0:
c8:3a:3f:b9:43:b4:d1:c6:c9:2f:56:95:22:bf:d3:f3:62:d6:
e9:08:db:94:fb:f2:d0:62:db:cb:cb:8c:05:bf:62:84:44:7a:
83:79:e3:04:70:36:b4:4f:cb:31:52:6b:1f:63:de:63:4d:89:
c9:4d:81:70:77:f5:7e:c4:64:17:28:2a:11:06:16:87:0d:4c:
40:4b:d0:f9:a8:31:66:09:39:5c:a3:ed:6a:e7:78:fa:d6:40:
7b:e8:7e:c2:fc:df:97:b3:19:0a:42:d4:c1:b8:e9:b6:24:7a:
27:10:81:21:df:d9:c4:67:4c:62:e3:f3:cb:5f:da:43:7a:b4:
80:de:11:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:04 2025 by rpki-client