Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
File: i1_lDykN2eQeX0pl2rsjlyqCytM.mft (raw, json)
Hash identifier: fkgEMIbMMic/yt6yWQbeiHa85XGcxz42U4Vk5sNo2KU=
Subject key identifier: 66:AD:FF:A2:27:DA:78:2C:44:6E:4F:D0:A9:AE:4B:BC:43:E1:2C:F2
Authority key identifier: 8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3
Certificate issuer: /CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
Certificate serial: 0197CB034E16056AE5A255AA91B331CF80E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
Manifest number: 09CD
Signing time: Wed 02 Jul 2025 12:01:20 +0000
Manifest this update: Wed 02 Jul 2025 12:01:20 +0000
Manifest next update: Thu 03 Jul 2025 12:01:20 +0000
Files and hashes: 1: VyXgHHFFQ2oH5mDTe8acLrMgUes.roa (hash: LW13jFriZ57WfbtFccojs/LokeY+i7PgigFeLOhpQuY=)
2: i1_lDykN2eQeX0pl2rsjlyqCytM.crl (hash: 9nFVTd3acRqeowc78dujcNA/zxb9rqQAWj+Re/wm0/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:03:4e:16:05:6a:e5:a2:55:aa:91:b3:31:cf:80:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b5fe50f290dd9e41e5f4a65dabb23972a82cad3
Validity
Not Before: Jul 2 12:01:20 2025 GMT
Not After : Jul 3 12:01:20 2025 GMT
Subject: CN=66adffa227da782c446e4fd0a9ae4bbc43e12cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:23:21:50:5f:a1:24:5c:df:55:9e:a9:2b:
03:cc:81:ae:b5:c3:d1:c2:d0:83:af:70:c5:af:0e:
31:b2:9b:dc:a8:e4:40:89:d5:ba:59:fe:ce:5a:2a:
05:8b:f3:b8:63:cc:f6:88:ae:eb:88:4f:96:63:2c:
9a:dc:84:4d:9e:47:dc:70:e7:12:66:47:cf:ba:5d:
19:c2:9f:b1:93:44:7d:dd:e2:ef:d7:93:fb:20:7e:
60:e9:cf:ea:b1:7d:fb:2a:41:6e:e8:3b:48:90:6b:
f7:de:23:0f:2f:88:db:20:fb:a8:ff:54:cb:f3:e7:
6e:32:45:15:ef:80:eb:05:47:c8:31:1c:c9:bb:27:
05:96:ac:89:55:c3:f1:97:21:3d:0e:63:68:eb:b3:
66:02:99:42:e1:9f:04:e8:6b:34:ba:2b:36:4f:5e:
7b:89:ae:ff:79:2a:7e:55:e7:1a:98:33:04:ab:97:
13:07:bf:e4:80:e9:cf:26:a9:f0:ca:62:34:47:8d:
70:d5:96:60:d9:a0:05:11:0f:9c:ff:58:81:b2:fc:
44:5e:95:c5:87:56:a5:41:4b:74:31:f2:3e:52:99:
d4:b7:80:96:c8:4e:cf:67:68:46:53:40:3d:2f:8b:
eb:26:2f:df:ff:27:37:14:dd:22:ae:ea:fd:a8:4e:
83:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AD:FF:A2:27:DA:78:2C:44:6E:4F:D0:A9:AE:4B:BC:43:E1:2C:F2
X509v3 Authority Key Identifier:
keyid:8B:5F:E5:0F:29:0D:D9:E4:1E:5F:4A:65:DA:BB:23:97:2A:82:CA:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1_lDykN2eQeX0pl2rsjlyqCytM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2574cb-b5fd-47d5-9a3b-910ae3bec631/1/i1_lDykN2eQeX0pl2rsjlyqCytM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c4:c5:cb:7b:fd:d6:e7:39:61:c4:e6:11:e2:01:96:d8:be:
05:68:69:79:ce:94:01:72:c6:0b:75:71:99:bb:c8:17:14:ad:
24:01:5c:90:ed:38:01:d2:ed:68:63:09:43:61:29:49:34:6f:
f1:79:e7:30:85:39:6e:00:26:85:7c:03:64:97:ee:c1:0f:8a:
6f:ea:6f:2d:85:67:4b:cd:e8:ff:ee:b9:d8:9c:bd:35:16:ae:
9c:6c:b8:bf:b1:b0:c3:79:da:cd:2d:c4:6f:14:ef:c0:6b:28:
04:61:33:00:bc:4e:ad:75:81:17:8b:08:21:0f:88:50:2e:00:
3a:70:c8:a4:17:89:3a:f5:03:27:10:f5:c6:c3:ea:99:c7:46:
b9:34:85:f9:c4:fd:aa:66:40:16:99:35:ee:7c:92:d4:4a:ea:
21:35:bc:c7:8b:54:30:e1:a1:85:1a:c9:36:95:27:88:10:cd:
83:c0:01:14:bb:b2:01:1f:7c:4c:84:c5:c8:13:e4:fc:f1:fb:
2d:ef:2f:6f:ad:42:2d:45:d1:92:52:e1:e6:61:33:09:c4:35:
24:d9:99:2e:34:f4:de:6c:4a:a6:e8:0c:43:5a:5e:41:43:81:
d8:28:65:d8:d1:c7:56:fc:5c:4c:56:eb:06:40:ef:05:09:3e:
ce:84:f7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:55:35 2025 by rpki-client