Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
File: I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft (raw, json)
Hash identifier: A+UnESVGdfwoyMpZjaA4yHSLspAI6M65EME8x0zI1FE=
Subject key identifier: EA:CC:43:C2:46:8D:10:B3:DE:28:F4:10:3F:5F:A9:4A:C0:EC:E5:69
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 01987450B6421C265B1BED9066FAB29A7779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
Manifest number: 09DD
Signing time: Mon 04 Aug 2025 09:01:43 +0000
Manifest this update: Mon 04 Aug 2025 09:01:43 +0000
Manifest next update: Tue 05 Aug 2025 09:01:43 +0000
Files and hashes: 1: FSsZO7tf2uyGI_GTm9rqM0qzwyo.roa (hash: +N02NDT8cxwi6khKovC14z/AE2KwVw5IVFU5XCAAiJs=)
2: I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl (hash: P7P8zV8mivIRpV2cVbd0O/tCruRgBMBe0jYMO3H2PmI=)
3: pGnzHT17oa6cGFgaKh_Mb1gg4HU.roa (hash: tnbr1e3XQydvlzjAP3o8eDkS1HDgrVPM/kErIEuP+f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:b6:42:1c:26:5b:1b:ed:90:66:fa:b2:9a:77:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Aug 4 09:01:43 2025 GMT
Not After : Aug 5 09:01:43 2025 GMT
Subject: CN=eacc43c2468d10b3de28f4103f5fa94ac0ece569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:99:82:16:40:1c:1a:71:20:b3:a2:4d:a4:70:
5a:10:21:b3:34:77:94:b0:ee:31:c6:bb:5b:64:c4:
e6:ee:ea:ba:69:1d:c7:f3:1a:2d:dc:f8:bd:e8:bb:
2a:dd:b2:c3:b2:e4:a7:be:45:09:c8:f4:83:a6:53:
41:e4:e1:5f:2e:6a:21:a0:7b:6c:91:ab:67:34:13:
ed:8a:50:86:f3:1f:91:c7:2c:d5:0e:5f:97:0e:f3:
12:7b:5f:44:3d:37:c3:f9:a8:95:2d:d2:32:ab:63:
32:7d:e3:9a:55:73:d9:83:fb:0d:91:ef:7a:20:e1:
c3:dd:0e:59:ef:08:56:e5:aa:7a:f2:07:8d:b9:3d:
d3:b4:36:6e:a6:67:aa:85:bd:41:f7:3e:8b:8c:9d:
4e:7d:d2:fb:0b:a3:61:c2:13:2f:8c:29:2f:e8:25:
64:6c:4b:41:67:de:97:ed:71:6f:9c:5b:bd:33:84:
71:10:db:d9:a7:ae:f1:8e:75:e5:b8:a3:40:84:d1:
d9:fc:cc:8b:6d:e8:d3:76:2d:4e:2a:01:8a:3b:74:
d9:70:dd:e0:ae:b4:50:6b:29:21:4b:93:78:82:62:
98:d6:ef:7e:7b:0b:db:10:66:bf:34:da:7c:ba:07:
a9:b2:6b:71:45:c7:4c:e3:6f:e9:bb:eb:ed:c4:2f:
08:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CC:43:C2:46:8D:10:B3:DE:28:F4:10:3F:5F:A9:4A:C0:EC:E5:69
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:d0:21:ff:ef:16:02:d0:4e:e4:81:1c:54:b9:9f:ce:3b:d2:
5c:97:46:3d:21:4b:28:ae:04:73:f7:59:4d:a7:3b:dd:38:77:
3a:45:60:d5:4b:12:e8:71:fc:b8:8f:5e:8a:4c:b8:c8:a1:df:
88:06:a1:ad:63:af:e9:bc:76:0a:46:8b:39:97:62:3e:dc:8a:
51:30:c1:eb:4a:ad:87:c2:1f:7d:d2:d0:01:8d:d4:1a:0f:50:
0a:f3:a7:a5:1c:ed:2d:32:7e:20:bf:3b:3e:0d:10:3a:f8:d7:
56:c9:c2:2a:51:5c:ae:1b:9f:7c:05:1b:37:9c:ef:ed:5e:0d:
2f:0a:61:c1:60:9d:55:13:62:21:ba:58:d6:c5:27:f3:43:06:
81:36:2e:2c:91:fb:1f:bd:11:3f:52:67:d1:9d:6e:85:8d:3d:
0d:a8:f5:b7:82:06:5c:0d:e2:9c:8a:68:2b:d6:3b:b7:3c:44:
71:24:40:c9:66:26:15:8b:fb:95:72:65:fc:67:7f:49:a6:bb:
9f:3e:33:6c:37:8a:c7:21:f2:ed:0f:6f:5f:da:9b:9a:17:2e:
2b:cb:77:bd:f3:17:67:86:97:a4:6e:22:8f:8f:f9:34:2a:f4:
73:66:2a:c1:32:af:88:ce:d3:46:9b:d2:29:40:3a:3b:bf:ff:
f8:6e:b3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:53 2025 by rpki-client