Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
File: I02TlaK6I5y50njrWJty7VyWctE.mft (raw, json)
Hash identifier: BHFa5Vpegs1TnibvYpgVrfdXXKk3qzjQDXAFi53kHYs=
Subject key identifier: 02:98:A7:C5:B2:EF:7B:82:F0:3D:85:B7:45:4D:86:90:23:F6:69:54
Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
Certificate issuer: /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Certificate serial: 0197B77C1AF2544B4EE34CD611244EEB62DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
Manifest number: 0FFE
Signing time: Sat 28 Jun 2025 17:00:53 +0000
Manifest this update: Sat 28 Jun 2025 17:00:53 +0000
Manifest next update: Sun 29 Jun 2025 17:00:53 +0000
Files and hashes: 1: 1rz_9CUxf9DVS-YE4VuUc49q_EU.roa (hash: UNeHGEwryJnNi0oicKcUP2+AX+MdC5294S5To8LCDxA=)
2: I02TlaK6I5y50njrWJty7VyWctE.crl (hash: GRpMExeNNq+rBGJxPnHrXRx8+JkzUnZFLSdUNNaBbBQ=)
3: JuGf7pzc4HCrM3We2--OeQqSX4U.roa (hash: H4A47OUP6tLe0HcSGtfbX99Pdjm0iQtczsTWsqdmMN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:1a:f2:54:4b:4e:e3:4c:d6:11:24:4e:eb:62:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Validity
Not Before: Jun 28 17:00:53 2025 GMT
Not After : Jun 29 17:00:53 2025 GMT
Subject: CN=0298a7c5b2ef7b82f03d85b7454d869023f66954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7a:31:99:09:19:44:44:ea:e1:04:7b:78:12:
18:85:7a:54:e1:45:73:b2:3a:c5:3a:f2:a2:31:c8:
d1:e8:e3:fe:5b:ff:8f:13:42:9f:23:c8:4c:c5:aa:
0a:5f:23:59:2f:16:e7:f3:1c:95:eb:c4:d1:92:24:
7d:f5:0a:e4:e3:b5:db:7d:f8:27:17:bb:90:4d:d9:
66:05:49:fd:4f:02:a0:d6:83:02:34:69:40:e7:1c:
cc:80:d8:4c:f8:6a:3e:cb:ea:cc:15:6a:d5:87:99:
14:58:6f:b9:c0:14:7d:2c:2d:d3:b0:5a:f7:30:c4:
de:f3:75:60:63:7b:9e:c2:6e:9c:d7:3a:21:b6:77:
37:3a:5e:ee:35:c4:86:c2:6e:8a:87:1f:d6:35:d5:
05:53:36:05:d7:88:b6:06:47:cc:31:f8:f4:d7:4d:
e6:03:21:76:f1:56:31:01:5a:07:9e:15:87:de:87:
8d:e3:cf:ea:27:2a:f8:64:04:a5:81:32:46:87:01:
d8:56:fa:59:97:22:28:57:15:ef:b6:44:d6:40:98:
d3:b9:5a:f3:94:0c:3a:ac:95:c2:00:73:d1:8a:e6:
2d:cb:af:90:22:bf:c7:32:dd:78:3c:0b:7a:9c:f5:
a7:42:eb:1a:78:69:59:a2:a9:d5:2d:59:11:59:80:
14:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:98:A7:C5:B2:EF:7B:82:F0:3D:85:B7:45:4D:86:90:23:F6:69:54
X509v3 Authority Key Identifier:
keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b2:e5:c4:71:85:85:a0:7d:2a:d6:71:e4:b8:42:18:bf:b5:
c7:70:f3:92:00:3a:59:06:a2:e2:61:56:7c:50:90:50:6a:7f:
77:26:49:21:23:71:8f:f6:35:de:59:21:6c:0f:d8:5f:65:14:
b0:10:3f:8f:3d:b3:27:3f:53:0a:45:b5:cd:04:4e:8d:ec:8a:
d5:be:35:df:3e:72:64:f8:af:b7:30:44:03:e6:61:57:82:b9:
da:ea:9d:05:a3:ac:fd:61:3b:a0:76:83:b9:b1:25:51:49:8f:
08:a2:c2:42:9d:70:99:83:f9:88:e7:c1:93:df:42:62:2e:ac:
03:ff:e2:34:5b:5a:d7:ec:8d:58:43:9b:09:a6:b5:7e:7c:29:
0d:f3:a4:23:6b:ee:c7:a0:6e:da:45:f9:ca:81:de:60:2f:7f:
0b:79:08:fa:36:77:ec:d8:61:b3:f6:c5:25:64:ef:42:39:62:
3d:48:da:a7:20:bd:84:69:53:91:ce:19:c2:ff:2d:e9:74:e2:
c2:38:af:bb:c6:5b:9b:13:80:d3:18:ff:db:25:4c:b1:a0:1f:
37:95:ae:55:92:28:01:0a:28:71:b9:62:cd:98:0b:07:33:9f:
4a:f6:07:2a:5d:c1:e3:a3:10:66:08:cd:d6:35:98:21:f6:ea:
a3:ef:bf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:58 2025 by rpki-client