Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
File: i0I-HXKxAwcL7VecQFl-0guEwW4.mft (raw, json)
Hash identifier: ldb9I//u+nCJInnpL1Qq8kXsPnlGV4WinCc6m2aUsME=
Subject key identifier: 24:67:03:4B:69:C2:6F:BE:EB:1E:2A:2E:99:B1:E0:F7:DF:C3:9B:CC
Authority key identifier: 8B:42:3E:1D:72:B1:03:07:0B:ED:57:9C:40:59:7E:D2:0B:84:C1:6E
Certificate issuer: /CN=8b423e1d72b103070bed579c40597ed20b84c16e
Certificate serial: 0198D65F050F408FF760A4363BCFA71E0E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
Manifest number: 04CC
Signing time: Sat 23 Aug 2025 10:00:08 +0000
Manifest this update: Sat 23 Aug 2025 10:00:08 +0000
Manifest next update: Sun 24 Aug 2025 10:00:08 +0000
Files and hashes: 1: i0I-HXKxAwcL7VecQFl-0guEwW4.crl (hash: KTEC4XhbUZIingc7zVcXsQxF2/OzfkKfNffTQnY9eaQ=)
2: r5RExikwh9VTxHZbndQhO_XU-vQ.roa (hash: 9NeQ0bAnfg+NNUQ9+vUOpq7EYWJaPxwQiPdu/Cupofw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:05:0f:40:8f:f7:60:a4:36:3b:cf:a7:1e:0e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b423e1d72b103070bed579c40597ed20b84c16e
Validity
Not Before: Aug 23 10:00:08 2025 GMT
Not After : Aug 24 10:00:08 2025 GMT
Subject: CN=2467034b69c26fbeeb1e2a2e99b1e0f7dfc39bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:61:74:d3:92:fa:65:78:fc:b8:cf:e5:7e:7d:
4d:6c:4c:50:cb:4d:e6:9a:41:7f:31:6a:49:80:cf:
1c:f8:99:19:1b:73:d4:b1:1d:d8:87:7b:e5:51:86:
ea:2e:47:26:04:bc:87:73:9c:92:d3:9e:cf:56:08:
c4:3f:2a:e9:ee:15:63:82:51:2e:de:01:7d:2c:78:
f0:b3:01:64:ee:41:64:c5:a9:1f:36:3d:ef:3b:16:
8e:3f:5d:fa:d1:cd:c4:dd:f9:45:86:ba:5f:ec:56:
b2:0b:41:22:ad:f8:83:c5:a6:c2:bc:92:55:9b:3f:
63:38:04:8a:0f:c4:67:f1:9e:27:b3:51:3a:88:6a:
a2:d0:00:59:66:98:ee:a9:6c:76:d8:f0:05:41:07:
73:4e:76:87:c7:c2:aa:b1:0b:82:25:96:78:99:a4:
f5:fb:fc:7a:48:2b:4b:6c:4f:47:d8:0d:a2:2b:01:
84:11:ff:55:78:18:d4:d8:08:3a:a7:ab:ce:b7:e0:
4f:0c:10:65:8a:f5:1c:6f:eb:e1:a5:23:1a:c3:a9:
33:4c:27:f6:15:de:e2:01:8f:94:15:74:50:0b:cf:
f9:71:55:f5:3a:f6:ed:42:75:3b:32:f9:4c:a9:53:
fe:64:1a:ce:bd:78:80:be:92:57:cf:c4:6c:6b:ef:
65:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:67:03:4B:69:C2:6F:BE:EB:1E:2A:2E:99:B1:E0:F7:DF:C3:9B:CC
X509v3 Authority Key Identifier:
keyid:8B:42:3E:1D:72:B1:03:07:0B:ED:57:9C:40:59:7E:D2:0B:84:C1:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:43:c8:c4:66:a0:1d:b5:c7:52:93:32:e8:c7:d4:b0:4e:3e:
09:e8:fa:c7:ef:37:ec:18:d4:1b:0b:d9:0d:af:a7:d9:2f:83:
82:f3:66:a5:2a:68:36:95:22:d6:e9:b5:a6:a1:99:eb:8f:e4:
dc:8b:70:db:af:5a:66:3b:52:51:6c:d1:de:4b:0a:fc:e9:4e:
c8:eb:af:ab:af:f4:98:ea:9f:04:e9:ed:fb:c7:e3:75:90:51:
d0:6a:e3:fb:46:4f:2f:02:e8:67:26:ee:d5:41:28:1a:04:d5:
76:6a:a8:1e:cf:9d:e9:a3:db:d6:25:96:18:5f:0c:47:4e:85:
85:bd:18:9e:ca:20:5e:15:c3:d7:db:52:c1:e1:75:2d:4e:76:
1a:fa:f7:0d:91:d5:07:ef:0d:0a:d7:19:37:53:7f:4c:9b:5b:
72:0b:9e:df:46:c5:10:03:fd:46:0e:87:fe:92:50:e5:f1:f9:
78:f6:5e:4d:3e:4d:87:21:9b:5f:0a:4f:9a:c1:8c:87:fb:5e:
db:b9:55:dd:ba:34:ae:d2:c5:07:14:06:fe:be:bc:0e:98:54:
52:52:4c:fe:95:c9:8a:b1:10:b9:b0:67:8b:80:8f:18:b6:93:
cb:fa:78:d2:c5:55:33:16:41:c9:b1:75:d1:0f:64:cc:06:aa:
4b:19:5b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:11:30 2025 by rpki-client