Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
File: i7i2EnIdTUwtB8v-LklemGoPAm0.mft (raw, json)
Hash identifier: wjMLmMJjBcjLbAvbH1b4A4+5VY0UMD9cjC/qhcMHP1U=
Subject key identifier: 69:C9:F3:1C:67:53:E6:93:8D:7C:B6:0E:42:37:C5:B2:96:48:7E:65
Authority key identifier: 8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D
Certificate issuer: /CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d
Certificate serial: 0198744FE7CC25D2D146609B21CC8F29CE9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
Manifest number: 05F8
Signing time: Mon 04 Aug 2025 09:00:50 +0000
Manifest this update: Mon 04 Aug 2025 09:00:50 +0000
Manifest next update: Tue 05 Aug 2025 09:00:50 +0000
Files and hashes: 1: i2xjHboexoRTpg38Qi-okoPsUcQ.roa (hash: x9dOoFm67St5fPryA+wWNLVDwzCG4EBSO5jTeQtPIqE=)
2: i7i2EnIdTUwtB8v-LklemGoPAm0.crl (hash: LrJVJoMMdWkom/QqQEGe3i/s76wrxJ7OQ6kJrMkiisU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:e7:cc:25:d2:d1:46:60:9b:21:cc:8f:29:ce:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d
Validity
Not Before: Aug 4 09:00:50 2025 GMT
Not After : Aug 5 09:00:50 2025 GMT
Subject: CN=69c9f31c6753e6938d7cb60e4237c5b296487e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:66:81:81:19:9a:6b:1c:6b:da:8a:40:de:
20:89:64:08:7d:3e:f6:28:cc:ab:5d:b4:a4:49:9c:
b5:a6:0d:53:03:d4:4d:93:2f:55:c9:5a:b0:d9:55:
63:62:33:db:bf:53:fa:1c:fb:70:ae:e9:f6:1b:6a:
1e:c6:90:4a:6a:03:05:a5:77:6b:ae:9a:0d:b1:1d:
23:49:5b:e4:d2:d6:48:85:3f:65:56:69:96:cf:26:
0e:d2:a8:4c:66:c7:ed:c4:1a:ca:cd:dd:9b:9a:b2:
fd:56:0c:9a:15:2d:d1:99:63:20:30:d9:bb:0f:7a:
de:8e:83:22:a3:91:f6:74:c0:bc:97:02:38:00:60:
6c:c7:a7:bf:c1:40:4f:d8:e0:cd:5e:88:be:2d:21:
a1:73:08:18:10:54:0e:e1:54:05:f9:28:14:ab:9f:
83:6c:e1:48:96:fa:7c:8c:d3:40:f5:83:1f:4e:b0:
cc:49:0c:58:66:3b:07:b3:55:03:4e:9d:0a:02:52:
52:e3:31:32:e1:99:6d:ad:3b:2e:88:f3:70:d2:52:
e8:4b:d2:cb:c4:69:f2:70:e1:95:1f:05:a8:de:50:
a8:87:d8:1d:94:7d:b4:16:82:3d:b7:fc:30:8c:c1:
cb:68:bb:70:e2:bd:c2:a3:99:1a:05:06:54:4e:1e:
77:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C9:F3:1C:67:53:E6:93:8D:7C:B6:0E:42:37:C5:B2:96:48:7E:65
X509v3 Authority Key Identifier:
keyid:8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:c2:02:f4:9d:8e:ce:86:5d:ee:8f:dc:b6:2f:db:b9:e5:31:
68:f6:4c:98:2a:50:ab:28:d9:63:6a:37:9d:6a:1c:5a:2e:90:
57:7b:b9:d8:12:0e:2d:be:63:e0:f3:ae:56:12:28:d7:fd:fd:
09:b4:bc:51:af:de:9a:d8:6e:6b:c9:4f:ab:c9:d4:ab:60:cf:
99:28:7c:77:4c:2b:32:d6:a3:5b:ff:5f:6b:3d:7b:1f:7a:4a:
5f:57:2b:1b:00:56:3c:bb:1e:ff:bf:b7:1d:a2:37:67:9f:68:
58:e8:31:9c:d3:8d:fc:10:64:1b:43:2d:72:8f:03:25:33:9e:
d8:7f:aa:45:83:73:58:c9:99:5c:c1:f8:9a:31:53:7e:2b:22:
92:a7:e6:6e:63:d4:d9:08:9f:c9:00:7c:fc:25:e6:4a:90:87:
21:fa:1d:76:f6:60:5b:af:79:9e:38:3e:be:2f:00:98:48:b2:
72:c5:34:db:e6:fc:c6:23:ed:53:ff:9f:ac:24:ec:65:31:d9:
da:f6:10:a9:34:cc:8a:c6:ee:99:30:ab:c8:2c:55:4b:5b:77:
3b:10:c1:f9:36:d6:b1:e9:78:9a:85:21:94:43:32:d2:34:b4:
38:66:22:e7:21:6e:e9:00:ed:e7:3c:f7:b9:7f:0f:9b:26:a6:
06:6c:05:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:36:55 2025 by rpki-client