Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
File: I8cVVBujctWQ1odn14zmmEABMFk.mft (raw, json)
Hash identifier: icbIMdZ7c9KMDDPtRZMhOfZOiuS+U+cOThAzSPx9S1U=
Subject key identifier: 16:DA:CC:56:C4:FF:3E:CE:41:47:84:AC:E5:BC:86:58:1A:A2:43:51
Authority key identifier: 23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59
Certificate issuer: /CN=23c715541ba372d590d68767d78ce69840013059
Certificate serial: 019873E1D5CAFE34A36C4196403E2263461A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
Manifest number: 1613
Signing time: Mon 04 Aug 2025 07:00:36 +0000
Manifest this update: Mon 04 Aug 2025 07:00:36 +0000
Manifest next update: Tue 05 Aug 2025 07:00:36 +0000
Files and hashes: 1: I8cVVBujctWQ1odn14zmmEABMFk.crl (hash: ZJKzdJB/w1PYN83Z3qLk4/VEHS9Cyf/on5jyhiy9csM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:d5:ca:fe:34:a3:6c:41:96:40:3e:22:63:46:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23c715541ba372d590d68767d78ce69840013059
Validity
Not Before: Aug 4 07:00:36 2025 GMT
Not After : Aug 5 07:00:36 2025 GMT
Subject: CN=16dacc56c4ff3ece414784ace5bc86581aa24351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6d:37:9e:fd:22:cf:6f:95:47:c0:c5:ec:19:
bb:27:c3:e5:48:ab:c7:88:b2:09:fb:a7:66:1a:95:
25:51:5d:3d:0c:83:06:ed:2a:4d:a7:4e:79:a1:29:
85:25:12:55:28:de:1e:f8:e6:e6:df:2c:0f:cc:54:
69:d1:7e:c1:72:09:df:93:72:1e:34:aa:fe:e2:d9:
a5:da:af:af:e6:a4:2a:83:98:d4:44:10:b5:b5:5d:
b1:3e:b0:70:c8:e6:44:e6:dc:e2:ca:8a:c0:8b:3f:
d8:ff:35:90:2f:55:7d:33:a8:3e:94:c8:34:2d:5c:
d6:20:28:4a:e5:87:a9:03:90:b2:d1:02:db:ea:80:
87:8d:f3:3e:d7:9a:5e:44:18:52:c7:5b:36:25:74:
95:f7:94:9b:cc:9f:0c:6e:8d:87:1d:50:84:c5:69:
46:b9:fb:1a:1e:39:f1:9e:86:d1:02:2a:71:27:55:
46:e7:f1:ee:0c:c1:1d:78:76:c0:ac:56:28:53:f2:
a5:51:a6:61:16:18:b7:5d:13:c2:82:5c:dd:2a:42:
60:3a:ed:fd:eb:1d:2d:6d:48:1e:5e:a9:12:89:e7:
d5:c5:d7:df:4b:90:7e:05:69:f3:6d:9d:6b:8b:87:
e2:1a:06:5f:66:5f:dc:dd:c5:74:db:07:c9:55:40:
ee:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DA:CC:56:C4:FF:3E:CE:41:47:84:AC:E5:BC:86:58:1A:A2:43:51
X509v3 Authority Key Identifier:
keyid:23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:6f:e0:2c:ad:7d:14:cf:1e:45:44:10:06:94:2d:7b:86:92:
7b:0e:4c:05:80:41:3d:0a:24:73:e0:55:db:0d:17:bd:7a:bd:
e4:ef:04:9b:2f:a6:9c:43:0d:53:0a:13:77:c5:53:f8:9a:b5:
1c:6e:11:4c:84:80:5f:1d:fe:95:8c:29:0c:61:47:01:76:42:
0f:bd:da:75:ba:e6:2f:86:d0:4c:d4:1a:8d:fb:7a:2f:a5:66:
58:b4:48:e8:cb:f2:15:2a:e3:77:5f:2c:be:7a:86:07:a2:d4:
4f:0e:a5:c3:d8:38:c1:2c:6e:3c:41:e1:4d:60:39:b9:c7:de:
49:a2:91:41:92:da:95:ba:92:6a:d5:44:4a:c8:9a:fb:0c:d8:
2e:13:b0:8e:21:12:6e:8f:ab:a3:61:22:a9:14:31:cc:0f:54:
a8:4e:7d:d0:86:fd:47:91:8d:f8:a4:3e:44:a5:f0:c7:4d:68:
11:4c:52:5b:f4:93:e2:6e:11:2e:1e:91:98:e9:01:96:7f:e1:
e1:dc:68:65:51:68:2c:96:9b:ed:6a:07:ca:8a:64:53:50:d4:
b7:cc:ff:42:f2:6a:f8:e4:36:35:8d:59:4b:b4:a2:e2:5a:1c:
d7:44:b6:66:b8:bf:3f:44:fb:a0:b7:9a:71:b8:de:08:35:04:
85:ce:fd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:40 2025 by rpki-client