Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
File: i0I-HXKxAwcL7VecQFl-0guEwW4.mft (raw, json)
Hash identifier: f6UU1Af8qN6yMkKbxVnrfo7MbxkT5mF3b810NzSbzwU=
Subject key identifier: 74:BD:15:2D:29:F5:4E:A4:63:C6:BE:11:E2:C3:7A:B6:86:5D:9C:CB
Authority key identifier: 8B:42:3E:1D:72:B1:03:07:0B:ED:57:9C:40:59:7E:D2:0B:84:C1:6E
Certificate issuer: /CN=8b423e1d72b103070bed579c40597ed20b84c16e
Certificate serial: 0197BA7EC90FFFEFD28BCDCF2BC38DDDD783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
Manifest number: 0439
Signing time: Sun 29 Jun 2025 07:02:40 +0000
Manifest this update: Sun 29 Jun 2025 07:02:40 +0000
Manifest next update: Mon 30 Jun 2025 07:02:40 +0000
Files and hashes: 1: i0I-HXKxAwcL7VecQFl-0guEwW4.crl (hash: jG4NE57s6vCNkIEwqh3356BMm0519RMn/FVMa5VR778=)
2: r5RExikwh9VTxHZbndQhO_XU-vQ.roa (hash: 9NeQ0bAnfg+NNUQ9+vUOpq7EYWJaPxwQiPdu/Cupofw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:c9:0f:ff:ef:d2:8b:cd:cf:2b:c3:8d:dd:d7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b423e1d72b103070bed579c40597ed20b84c16e
Validity
Not Before: Jun 29 07:02:40 2025 GMT
Not After : Jun 30 07:02:40 2025 GMT
Subject: CN=74bd152d29f54ea463c6be11e2c37ab6865d9ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:eb:fe:2e:e0:73:c8:fb:b6:75:1d:76:c5:c8:
5d:31:ce:69:b7:ae:15:a3:16:a8:da:8c:c9:15:22:
74:16:4c:61:b6:d3:c3:57:97:af:ae:18:7f:fc:10:
40:95:fe:2b:73:13:48:10:4d:b9:5a:24:30:ab:fd:
69:08:39:c3:25:ca:c6:eb:ac:82:99:17:8d:a4:78:
94:84:ba:0d:86:e1:fd:e2:2b:5f:dd:7f:b6:7c:73:
53:f5:fb:66:c9:31:54:44:de:38:46:5d:7d:b4:d3:
c3:77:39:30:04:73:40:20:20:3f:df:f9:65:6f:15:
1c:66:a9:48:ba:4f:8c:f1:cf:52:d5:df:99:a7:d4:
23:b1:89:7d:bb:ee:e3:37:33:95:83:27:7f:b7:db:
c0:f6:5f:3a:8f:65:7c:84:1e:92:c9:4d:8c:20:5f:
af:85:4f:39:59:44:e0:66:7f:c3:25:0a:94:40:da:
09:3a:07:3e:09:7c:45:47:23:96:fd:9c:94:77:09:
ba:c7:1c:66:4b:9f:92:70:c3:9b:6b:ac:5a:df:dc:
f6:41:4e:4e:02:78:c1:af:14:3f:c6:01:76:56:f4:
63:34:70:c2:7f:fc:c3:96:52:27:f7:f8:ca:ed:ac:
2b:2a:07:e1:a6:3c:24:ba:69:fa:88:5c:07:79:e5:
92:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BD:15:2D:29:F5:4E:A4:63:C6:BE:11:E2:C3:7A:B6:86:5D:9C:CB
X509v3 Authority Key Identifier:
keyid:8B:42:3E:1D:72:B1:03:07:0B:ED:57:9C:40:59:7E:D2:0B:84:C1:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0I-HXKxAwcL7VecQFl-0guEwW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/6758a0-3bb2-475e-a9b8-b909ed202b64/1/i0I-HXKxAwcL7VecQFl-0guEwW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:9e:73:46:18:9d:17:fb:30:9f:d9:f6:79:b2:ff:b2:4d:54:
b1:29:1d:65:1f:76:2d:8b:87:27:aa:09:fc:0a:69:70:5b:be:
76:86:d4:ae:4f:3b:64:44:95:aa:05:c3:a6:d6:ad:a8:12:8f:
d4:2d:19:97:12:dc:8a:63:c9:2b:eb:32:0d:44:9c:70:f7:80:
d3:e3:b4:9c:61:82:2a:32:50:6c:77:f3:bf:83:69:be:04:50:
1e:fb:f0:16:8c:24:ad:81:75:19:9b:12:4a:85:dd:05:ec:31:
7d:8a:1a:63:c2:b3:59:52:32:5b:08:b9:d8:f9:e0:b7:0b:65:
1a:66:03:bb:cd:b7:a4:a4:ef:5d:5d:9e:8a:36:39:0f:8d:25:
09:bd:d3:9d:1a:9c:51:f5:aa:6b:df:51:fe:ef:00:3d:23:4a:
79:d2:d6:49:2b:1f:f0:47:10:d5:1c:0c:05:32:92:d7:02:d4:
15:d7:66:56:4a:06:e2:30:37:0d:b3:b1:bd:cc:13:e9:d9:31:
72:8f:c1:0a:42:cc:50:a9:f0:90:8e:43:48:c8:ca:b4:7a:44:
ed:94:f3:ce:f2:7f:f7:77:c3:0f:8b:01:c2:be:9d:f9:53:dd:
b3:fa:6c:a1:09:66:e4:d6:57:23:9b:0f:63:da:0f:51:65:9b:
0f:7f:77:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:21:36 2025 by rpki-client