Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
File: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft (raw, json)
Hash identifier: SFb/qtAdKxr4HlXzOhnl1+RKXiXkKtmYiUPxe2BvemY=
Subject key identifier: BD:78:59:5D:11:A4:C1:06:39:C7:87:67:0C:B6:B2:DA:97:ED:51:E3
Authority key identifier: D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
Certificate issuer: /CN=d422367433765b541a37390a998997b737c46472
Certificate serial: 01988FFE9D176ED561ACC201CAE14B1E889D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
Manifest number: 15B8
Signing time: Sat 09 Aug 2025 18:01:24 +0000
Manifest this update: Sat 09 Aug 2025 18:01:24 +0000
Manifest next update: Sun 10 Aug 2025 18:01:24 +0000
Files and hashes: 1: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl (hash: amx8smlmNpconyfArNg/OkcGMOvuhlo//OLXddzNkyE=)
2: dO1sDlUm4GNT1NLwZmfUYJ1pPqA.roa (hash: JWs3QU5N8u442ANJ16//ujHqSWgzP2/558mG+17RvNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fe:9d:17:6e:d5:61:ac:c2:01:ca:e1:4b:1e:88:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d422367433765b541a37390a998997b737c46472
Validity
Not Before: Aug 9 18:01:24 2025 GMT
Not After : Aug 10 18:01:24 2025 GMT
Subject: CN=bd78595d11a4c10639c787670cb6b2da97ed51e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c5:b5:e8:c7:77:ad:9f:1f:71:c7:d4:be:3f:
d9:e0:b9:f3:32:ed:27:5a:d1:9f:48:07:82:e6:77:
e9:1a:d7:0f:ea:83:91:7a:0f:21:ed:8d:70:81:0d:
80:b9:47:26:c0:3a:62:7a:d6:b4:bf:28:f3:ea:06:
de:30:56:91:b1:4a:ff:ad:2a:27:0e:76:b0:8d:a1:
bd:d3:41:6c:26:98:d2:6d:ed:ac:81:7f:d4:96:ce:
c3:12:31:df:11:9a:a4:9d:68:ae:c1:d0:c9:ee:8c:
77:57:0f:60:5a:20:3d:8b:57:43:10:95:59:d8:9e:
b2:a1:ad:22:f2:38:33:bd:3f:1f:fc:cf:78:d6:ac:
ea:74:2b:c3:17:6e:25:7b:bd:80:2e:b4:b5:1c:c3:
b0:85:f5:21:99:4f:78:d8:dc:65:cc:8e:b0:11:c0:
34:86:45:93:96:d4:53:40:c0:5d:6d:d5:67:80:e7:
84:3f:77:6e:8e:04:35:58:ae:89:fc:49:dc:26:b4:
31:fa:71:b9:f6:16:9a:30:e1:a2:e6:85:75:5a:89:
46:4e:b0:71:6f:b0:5e:43:43:12:14:dc:17:7b:a9:
f4:aa:ae:99:69:69:df:0e:d5:9e:47:ce:75:64:2f:
59:c5:e4:91:0b:3a:cd:fc:fa:d2:a3:67:f0:5e:69:
24:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:78:59:5D:11:A4:C1:06:39:C7:87:67:0C:B6:B2:DA:97:ED:51:E3
X509v3 Authority Key Identifier:
keyid:D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a9:16:34:d6:a2:ca:7d:e1:73:42:51:9a:01:39:3e:3e:c9:
8a:c1:21:af:7e:92:11:e2:9d:41:49:4e:35:98:7a:ad:1e:21:
fa:b4:aa:7d:05:27:64:97:b8:ec:dd:59:b9:c4:1b:3f:84:4b:
5b:78:e7:27:b1:f6:0d:77:a3:d1:76:d5:12:fe:8e:3d:a5:85:
96:60:09:b9:6d:14:dd:d5:34:c8:9c:c7:69:f5:a8:da:59:fc:
ba:dc:b5:5b:10:34:93:cf:b0:da:26:ba:f4:40:bf:30:ee:7e:
a4:bc:ea:36:8b:49:c3:0f:b6:c9:40:7f:28:03:88:44:0d:95:
b5:3c:41:f8:d2:d8:9b:48:9a:9e:93:e9:04:2a:14:b7:49:93:
cd:cb:8b:fd:64:cb:81:e5:5b:95:2c:ba:4b:43:ca:4f:35:74:
44:f5:29:d6:64:e5:d9:15:8e:60:cd:77:77:76:ff:93:37:af:
f2:e9:42:29:15:b6:71:c3:60:83:e7:71:61:c1:57:9e:3b:43:
72:3e:1d:46:1c:19:c8:35:03:d7:6e:5b:f6:e7:94:61:81:62:
15:d3:97:64:09:e3:1e:57:59:c8:f7:b9:6d:c9:d8:cf:a9:d4:
1b:8c:2c:46:dc:97:ee:5b:d9:9f:58:62:e6:06:bd:8c:53:5e:
e6:d8:35:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:44:45 2025 by rpki-client