Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
File: I-5ecUCbIf1cgg89OsP9wPznWgs.mft (raw, json)
Hash identifier: 0Ve9LJiOJWivB+8xPJ3GckLc3DlKhT21SrSpkBov9HI=
Subject key identifier: 8C:61:97:66:58:9F:30:58:9E:00:00:46:10:6B:88:5F:E5:9B:92:27
Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Certificate serial: 0198D5160FFE4CE7078443866FA28876F0B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
Manifest number: 134D
Signing time: Sat 23 Aug 2025 04:00:49 +0000
Manifest this update: Sat 23 Aug 2025 04:00:49 +0000
Manifest next update: Sun 24 Aug 2025 04:00:49 +0000
Files and hashes: 1: I-5ecUCbIf1cgg89OsP9wPznWgs.crl (hash: 5jUBwgwBWcUnmeZp3VABQGR1Qph2qAFnBKF3vu+uDv0=)
2: JLTWHRuvioIZeiPuQHITq0nguEU.roa (hash: bk5yHjHsl6C1xvyULuJt1KQ0iqgopaEeKAR0yVznkzo=)
3: plwZ9l0lVtWa8erZq6nE-HfiL5Y.roa (hash: pvnWu+3SngeR8hyMQVNUkiZf5MAZJKgs78KtEduSXvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:0f:fe:4c:e7:07:84:43:86:6f:a2:88:76:f0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Validity
Not Before: Aug 23 04:00:49 2025 GMT
Not After : Aug 24 04:00:49 2025 GMT
Subject: CN=8c619766589f30589e000046106b885fe59b9227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bc:d7:ac:16:ed:9e:eb:6f:f8:5c:57:98:f1:
a8:bc:81:f0:e5:d1:9d:77:84:b2:26:52:10:0c:04:
95:3c:d2:01:9a:dd:b8:2c:d9:c0:82:ac:5f:f5:c7:
c4:90:f3:01:8d:53:2c:d6:50:f2:dc:a5:95:75:e0:
2b:9a:2b:9a:79:f5:d5:59:5d:1c:50:53:c0:0a:eb:
78:28:e7:00:c1:a1:17:1a:93:58:42:f9:25:80:b6:
1b:9f:ca:9a:3b:1c:dd:c5:30:fe:df:ed:c0:c1:f8:
c1:6e:d1:2b:52:20:ce:0a:b4:b6:7c:00:a0:77:44:
f0:da:53:19:11:19:15:48:b3:2e:8e:78:a2:0a:f5:
8d:54:12:14:a9:57:7d:a6:ff:7c:ba:c8:04:ea:03:
9c:87:39:ff:ec:6e:d8:83:76:16:7c:a2:f4:60:a1:
ee:90:01:82:32:60:0a:55:12:af:5c:2f:41:4f:93:
7c:3a:d5:59:0b:32:58:06:8f:b3:d4:bd:3e:5a:15:
a8:d5:6a:8a:5e:4f:c9:7f:d4:25:31:c2:23:6f:e6:
86:a7:fa:dd:05:a2:c5:da:37:aa:06:90:16:92:b0:
65:07:52:67:0e:04:89:7b:8b:48:d7:28:33:c4:a8:
0a:86:35:52:22:cd:06:fc:fa:d9:0f:65:53:97:63:
30:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:61:97:66:58:9F:30:58:9E:00:00:46:10:6B:88:5F:E5:9B:92:27
X509v3 Authority Key Identifier:
keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b5:6b:e7:45:bd:af:45:03:93:69:2b:bf:2e:c4:4b:70:2d:
32:3e:d5:59:98:70:fe:15:18:ba:61:8a:bd:77:d6:c3:e3:55:
dd:59:ff:eb:0b:23:7e:c0:b4:e6:b6:ec:8c:ef:84:01:96:3c:
db:77:73:e0:19:e6:64:e7:7a:5d:ef:d8:df:92:51:f5:92:ba:
1e:a8:3c:e2:f9:19:58:bd:5e:b7:a6:ea:01:5a:79:2c:8c:67:
b3:07:a2:d8:73:58:7f:c8:0d:e5:a3:72:2d:26:45:e8:7a:26:
c6:12:4b:ce:06:1a:53:7b:d2:77:62:79:ea:d5:b8:e5:26:95:
ff:cf:e1:e2:c7:2c:be:1c:39:a8:0f:9a:1e:3d:2b:10:8b:85:
1c:4b:54:59:5e:c7:c8:5f:b8:81:40:8b:bc:a5:d1:0d:a4:0d:
cd:dc:32:93:57:76:da:bb:2c:0c:5b:a8:bf:f7:ed:7f:31:01:
be:cd:6d:c2:c9:cd:66:b0:0f:a7:24:3c:73:3a:67:3d:16:b5:
dd:05:4c:84:f0:0e:88:a6:d9:c4:18:06:98:82:b3:03:36:53:
a2:47:17:b8:ff:8d:3f:4d:c4:f2:f4:6f:6d:6a:f8:a3:b0:fa:
5f:be:44:16:aa:48:4e:ac:d4:62:ab:5a:02:54:6b:6e:4a:73:
60:62:96:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:06 2025 by rpki-client