Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
File: I0tEmJRYnRb2dr_ygqvtqlbMe40.mft (raw, json)
Hash identifier: KKxLYvLEQFcBtd3xR9zGA4NMChDb6wx6cEHdGY8lBh8=
Subject key identifier: 4C:51:98:5E:B2:18:18:1F:B6:46:EF:58:1A:50:F6:FC:04:03:58:33
Authority key identifier: 23:4B:44:98:94:58:9D:16:F6:76:BF:F2:82:AB:ED:AA:56:CC:7B:8D
Certificate issuer: /CN=234b449894589d16f676bff282abedaa56cc7b8d
Certificate serial: 0198D4E09C96B7F7AAA8BBEC3D42F3022FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
Manifest number: 0685
Signing time: Sat 23 Aug 2025 03:02:26 +0000
Manifest this update: Sat 23 Aug 2025 03:02:26 +0000
Manifest next update: Sun 24 Aug 2025 03:02:26 +0000
Files and hashes: 1: EBtcNhOJ92IGPVl-KdrFygnNVn4.roa (hash: Ykla49kgLw0fjmlAc5cpzOXx1fYgIVxrEDqc3yCSjAA=)
2: I0tEmJRYnRb2dr_ygqvtqlbMe40.crl (hash: pxMhxUAirMcpoc4KSwE9972dV9MChPM/BcPVXhUWha0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:9c:96:b7:f7:aa:a8:bb:ec:3d:42:f3:02:2f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b449894589d16f676bff282abedaa56cc7b8d
Validity
Not Before: Aug 23 03:02:26 2025 GMT
Not After : Aug 24 03:02:26 2025 GMT
Subject: CN=4c51985eb218181fb646ef581a50f6fc04035833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c0:ce:d3:75:5c:a9:7b:b5:1f:9a:bd:76:b5:
42:43:75:2a:f9:2b:6a:f7:41:82:44:5b:87:d9:b2:
a4:a1:b0:c2:ab:b2:02:33:02:48:15:62:eb:fe:69:
fe:96:fe:02:ea:de:0f:a3:2a:6b:60:10:16:d2:55:
24:e5:ea:66:d3:a2:3b:7e:42:7f:ae:8a:34:1c:40:
5f:af:90:2b:f5:00:d8:a1:90:77:63:6d:1d:64:8e:
6e:97:74:f9:c2:0c:c5:4c:25:23:51:17:23:37:cf:
1f:1b:f5:9a:bd:4e:8d:80:2c:4b:97:4b:be:52:74:
64:b1:42:fa:41:12:21:28:aa:a0:20:62:35:68:4f:
7f:c1:2f:d9:07:ca:cc:a9:67:5b:b6:34:72:2e:c4:
cf:ef:06:4e:80:14:8d:d1:02:46:d9:9a:13:02:70:
2b:e2:81:cf:df:a4:4d:78:6a:a4:99:b0:dd:78:e5:
2c:7c:f2:fd:4f:75:2f:d1:53:94:2b:9a:aa:fa:a7:
f1:3e:e5:22:e7:9d:94:ed:28:a4:4f:18:e6:3a:d8:
f6:6c:27:ae:c1:eb:ee:90:2e:99:47:ba:92:f5:e1:
33:9c:bd:b8:b9:b6:a9:8b:2e:e0:9a:70:d0:ec:7d:
0e:12:75:fc:99:ad:9d:b5:93:70:62:cc:2c:9d:a1:
76:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:51:98:5E:B2:18:18:1F:B6:46:EF:58:1A:50:F6:FC:04:03:58:33
X509v3 Authority Key Identifier:
keyid:23:4B:44:98:94:58:9D:16:F6:76:BF:F2:82:AB:ED:AA:56:CC:7B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:32:95:8e:c7:4d:cf:ad:35:71:e3:69:f5:68:80:12:e1:9d:
b4:67:d2:48:68:15:6f:fc:58:4e:df:96:a0:7b:92:16:f7:7b:
a1:27:0d:6d:0e:15:cf:78:5c:16:01:24:aa:60:9b:6d:dc:52:
86:d3:e1:43:35:c4:04:72:6b:f8:32:bb:68:6e:3f:5e:39:55:
52:da:7e:13:ff:ae:02:b8:c5:34:9e:10:56:be:a2:21:31:93:
81:b9:2a:d4:01:2a:33:16:ba:2d:13:7e:d9:e0:83:e9:ec:1e:
61:a2:94:bc:0c:8d:84:b0:35:e6:d9:8d:f6:eb:f5:ad:14:83:
b5:4c:03:13:ed:3c:6b:7c:6f:e8:82:34:63:eb:0f:d2:d8:10:
47:7e:77:90:14:31:16:1a:29:78:4b:b1:b6:1b:03:ba:ca:1d:
18:b7:5e:92:21:bc:af:fe:10:7e:42:36:2d:03:c8:ae:52:09:
21:0d:39:b5:86:a2:54:06:32:17:c6:10:fe:0e:7e:e4:42:ac:
e7:bd:48:95:60:dd:69:ab:91:15:bb:db:79:96:f1:14:99:3b:
bc:a8:e8:9b:63:70:3a:6f:49:ff:98:63:08:22:d7:dc:d5:4e:
ad:22:f3:e6:8f:e5:0c:96:c2:d2:99:7d:e3:73:55:d6:ee:2a:
97:e1:95:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:35 2025 by rpki-client