Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
File: i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft (raw, json)
Hash identifier: s1CN8LKstnxNX8/x8kRj6cxTtida5A2skcSFdqo7zNk=
Subject key identifier: 24:91:E3:5E:A5:5A:84:30:E4:12:10:58:50:2D:76:1C:2F:B7:CB:6C
Authority key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Certificate issuer: /CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Certificate serial: 0198D73B1EDE9427BAB88DAABA98C12C6235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
Manifest number: 1658
Signing time: Sat 23 Aug 2025 14:00:32 +0000
Manifest this update: Sat 23 Aug 2025 14:00:32 +0000
Manifest next update: Sun 24 Aug 2025 14:00:32 +0000
Files and hashes: 1: Z9hqFRirUe4P1_J6cnVrlFkJUwM.roa (hash: 1rB513D+oaDkVMZd5WQl+V38WfLdjvRgbt7ShIhiM3k=)
2: eldr0Gd72QMDJnfB5g3XkvXB5MA.roa (hash: TtEGiXJhnS9J3b71Jc1YsSME+mGa0e8iTuBkAI+Nugs=)
3: i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl (hash: huOQvriZWRJOfXi6GDcRrnyXuf/i0scjXurqkW2GErE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:1e:de:94:27:ba:b8:8d:aa:ba:98:c1:2c:62:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Validity
Not Before: Aug 23 14:00:32 2025 GMT
Not After : Aug 24 14:00:32 2025 GMT
Subject: CN=2491e35ea55a8430e4121058502d761c2fb7cb6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1f:47:37:a0:87:ef:e6:2a:a8:5a:a6:f2:a4:
eb:a8:6c:29:3b:5f:06:00:d7:ba:b7:5c:ce:69:0b:
d3:77:43:0b:62:46:c9:30:48:1e:ec:10:cc:84:05:
79:a7:91:39:b2:20:ad:55:25:3b:46:7e:18:89:1f:
ae:3a:f4:a4:7a:e0:04:f9:e1:ff:71:72:72:18:e6:
a6:5b:4c:c9:ed:f3:92:38:72:82:8e:aa:3b:c0:42:
5d:30:af:2a:7a:23:32:3d:45:cd:27:86:a3:21:94:
94:e9:d0:65:b6:33:14:0e:e8:07:42:c8:67:83:fe:
5b:58:c7:69:8e:06:5e:1f:46:28:39:80:4d:69:8a:
f0:15:62:07:b2:10:67:b1:45:8f:62:41:26:23:e1:
19:e8:df:a1:f0:3a:af:bc:11:f5:2c:19:27:d6:ef:
5d:58:f8:12:82:ba:f2:55:12:ca:05:e7:7f:c7:08:
19:fc:bd:96:42:ca:9a:7b:31:39:68:f2:72:ca:8c:
cf:ae:92:ec:4f:38:15:c9:3d:62:a6:1c:86:f9:73:
81:8d:1e:3f:7b:40:11:a3:96:82:f4:48:ad:6f:e7:
af:d7:93:ea:51:e0:ca:ff:39:a5:0f:3d:55:bf:fd:
0d:25:7d:0f:b0:95:ab:b6:69:24:71:f6:a5:f4:74:
7b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:91:E3:5E:A5:5A:84:30:E4:12:10:58:50:2D:76:1C:2F:B7:CB:6C
X509v3 Authority Key Identifier:
keyid:8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a9:f7:ad:0c:1d:d7:66:af:df:64:80:08:46:e3:71:bb:6d:
cb:fd:52:6a:f0:e0:c3:98:f6:2e:f3:0f:9d:07:7c:d5:03:02:
69:f0:a4:17:85:10:db:a4:18:22:9e:e9:76:cd:14:22:1e:18:
9e:aa:f4:2d:f2:42:24:b7:fd:59:f9:a0:dc:21:a5:3c:6e:ff:
91:b1:8f:c2:56:f6:c2:8b:85:c8:80:1b:f3:85:e0:e3:8b:2c:
df:4a:99:bc:10:31:2e:f3:e2:dd:fb:0c:59:2d:15:68:ce:51:
de:e9:da:08:8b:02:b4:fd:2e:80:cb:3a:37:1b:9e:18:31:5f:
46:79:70:7d:09:08:e8:d8:8c:32:61:8f:7e:fc:35:c3:2d:03:
87:d6:72:27:2b:33:08:1a:8a:18:85:f0:21:79:a7:b5:75:69:
6b:fa:38:dd:e8:2a:1b:2d:16:69:1a:ca:d2:16:fe:d5:1d:c2:
f1:fe:d1:98:75:00:fb:f7:02:2c:5a:d1:22:f4:8e:ff:81:a6:
1e:c0:af:6c:05:20:54:c4:d7:4d:f9:a7:e5:13:8f:3a:af:29:
83:5a:ae:78:45:84:32:2f:89:d4:d3:92:0f:1b:3c:2d:62:a0:
83:a3:1d:37:bc:5e:d4:c4:53:03:c9:9b:40:17:d1:ac:7b:85:
8d:e5:a3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:57:20 2025 by rpki-client