Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
File: I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft (raw, json)
Hash identifier: dyHadWPKOnb9iMt47JJDxDB8JOsaWuOGW/yFQOse01o=
Subject key identifier: 17:05:06:89:E0:46:3F:86:9A:F2:96:31:20:5E:D2:72:4A:F8:74:AF
Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d
Certificate serial: 019874BE15C625C41D736DB016A436477199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
Manifest number: 132E
Signing time: Mon 04 Aug 2025 11:01:11 +0000
Manifest this update: Mon 04 Aug 2025 11:01:11 +0000
Manifest next update: Tue 05 Aug 2025 11:01:11 +0000
Files and hashes: 1: I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl (hash: TNc2GDhKNnIpw6iAq4SgkmJcmPAl/jP0zbZavu06NjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:15:c6:25:c4:1d:73:6d:b0:16:a4:36:47:71:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d
Validity
Not Before: Aug 4 11:01:11 2025 GMT
Not After : Aug 5 11:01:11 2025 GMT
Subject: CN=17050689e0463f869af29631205ed2724af874af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:14:2f:0f:ad:19:94:4f:34:e6:ce:c2:0b:
1f:76:c2:fa:5e:31:f0:d0:30:89:99:db:95:46:01:
45:7f:2a:db:43:6a:85:51:43:22:4e:e7:ac:10:81:
d1:6c:2b:fe:76:a5:0e:47:e8:35:82:19:a7:ad:67:
7d:bc:b2:3d:28:30:8e:dd:8e:45:1c:31:64:08:ba:
3e:06:a4:91:25:5c:23:d5:6b:00:5c:ae:97:e0:ff:
26:b1:6c:4a:4d:6a:1f:e7:e0:67:06:fa:3b:e7:8b:
1d:ef:40:55:21:95:f7:26:b5:d2:26:6d:e6:5b:4a:
76:70:bc:d5:6b:3a:1c:58:15:53:d8:76:0b:1f:24:
9d:9f:23:65:56:ea:c1:6f:6f:37:b6:58:6a:d3:1f:
a7:ce:7b:c6:74:6e:9c:cc:a4:8d:a8:98:59:40:fa:
17:82:36:6d:a0:90:1a:fe:74:db:37:e4:a0:96:e8:
86:10:9d:1e:12:d2:14:94:e4:5c:c6:4c:34:04:fb:
15:79:2e:c1:32:d6:59:2b:0c:ba:86:ad:8e:dd:89:
64:b3:12:95:87:b2:77:a2:83:dc:58:87:15:b3:56:
06:9a:49:bf:b7:39:b0:73:2b:ff:c1:c9:51:9e:4f:
d9:ba:a2:39:82:73:3e:22:a7:d7:7b:a0:0b:38:82:
94:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:05:06:89:E0:46:3F:86:9A:F2:96:31:20:5E:D2:72:4A:F8:74:AF
X509v3 Authority Key Identifier:
keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:14:32:4a:2a:1f:71:83:0e:12:02:dd:ba:a2:f8:c5:b4:d8:
26:cd:62:a1:d4:7a:20:f3:22:08:14:ac:a0:1b:88:22:70:68:
9f:2c:e0:f7:70:eb:e5:31:3c:8a:72:f0:58:d0:b3:9b:ca:b1:
12:7c:fd:9b:81:3f:7b:ed:0c:6a:a1:7c:2a:4e:af:48:62:d3:
10:e5:de:0c:67:83:9b:88:c0:3b:bc:9f:20:c1:5b:83:7d:e3:
b9:ac:c2:f2:c1:91:39:6f:7f:d7:6c:81:43:02:ae:3d:ec:36:
cd:71:58:c3:89:b8:a8:62:2a:c6:bf:4e:9e:c3:1f:07:af:fa:
f5:6f:5c:74:03:2e:cc:bf:f2:08:5d:d7:79:0d:95:6a:61:2e:
51:d6:a5:64:d2:bd:77:76:a3:95:b2:ea:44:4b:12:9c:ca:6d:
69:39:cc:8a:85:13:bd:38:94:2a:be:75:ee:7d:b8:48:33:8d:
05:07:c4:18:7f:73:7a:59:ee:25:0a:9b:8a:5e:56:59:fa:60:
9b:fd:db:49:9b:94:e4:8a:22:93:d8:ac:c4:18:bb:e2:58:71:
4a:e6:13:ea:c2:42:8d:67:74:d8:e1:d6:5f:12:61:28:35:0e:
d7:1c:a1:bc:d2:fe:07:5a:30:dc:fc:c8:42:92:81:85:1b:34:
54:ad:52:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:48:37 2025 by rpki-client