Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
File: Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft (raw, json)
Hash identifier: V1BWj86EyxexRtLmvT6Nb3E/SgN4JbKHlsQF3P2yhDo=
Subject key identifier: 7F:04:CA:5D:97:F5:F4:41:C8:79:DA:D8:B7:76:D3:5A:24:C5:F2:5E
Authority key identifier: 21:CF:53:48:1D:13:3B:AC:F5:27:86:8D:BA:1B:37:63:E3:D6:DD:A7
Certificate issuer: /CN=21cf53481d133bacf527868dba1b3763e3d6dda7
Certificate serial: 0198D7057720DC1B61E58C4BB6F214671046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
Manifest number: 060D
Signing time: Sat 23 Aug 2025 13:01:56 +0000
Manifest this update: Sat 23 Aug 2025 13:01:56 +0000
Manifest next update: Sun 24 Aug 2025 13:01:56 +0000
Files and hashes: 1: BkDrM4-atcp10Br--qbvg_yK1zg.roa (hash: OQTXLqdYWvwdj8zXSXiFu8x5dJlCSPxgy4/Qhi1Yohc=)
2: Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.crl (hash: 0+adLBh+f+UPASJEWM07WoL04SFjv0etPQh3NgkvRr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:77:20:dc:1b:61:e5:8c:4b:b6:f2:14:67:10:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21cf53481d133bacf527868dba1b3763e3d6dda7
Validity
Not Before: Aug 23 13:01:56 2025 GMT
Not After : Aug 24 13:01:56 2025 GMT
Subject: CN=7f04ca5d97f5f441c879dad8b776d35a24c5f25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d9:53:25:71:4d:24:b1:94:c0:0f:5a:e2:1b:
7c:94:d5:e0:b0:ca:f8:7e:44:2c:a8:13:93:5b:6d:
17:4c:aa:c2:95:a1:d7:d7:ca:20:4d:0b:9f:3a:67:
33:a2:1f:c1:2e:52:26:a7:ab:32:a3:f3:0e:a4:0e:
81:58:50:ae:74:da:49:2b:9a:e6:81:18:cc:84:c0:
4f:02:a7:f2:6c:c3:c5:06:96:1a:86:88:b8:6d:b2:
4f:b2:1a:a8:85:69:8d:e6:18:b7:67:79:e7:e3:ec:
c5:b7:eb:c6:4c:3f:d8:1b:52:90:3d:32:6c:2d:94:
15:a9:25:dc:e1:6c:ec:ba:c7:16:6f:dc:39:aa:07:
05:11:ee:e9:b0:e0:6f:eb:fb:84:38:99:e3:81:b8:
62:e3:34:ac:e5:b3:2f:08:17:91:b8:40:bc:2f:38:
f6:fd:14:01:93:06:e0:f4:07:58:43:42:36:6b:09:
66:17:25:77:01:b0:91:8e:fe:cc:69:98:b9:17:ff:
9a:62:4e:83:43:7c:ef:24:19:8f:fc:ae:63:32:93:
78:d5:b6:92:e5:3f:18:9e:b3:6e:cf:a0:f7:07:62:
f1:b8:af:8d:a0:12:21:e5:91:e6:65:b1:db:35:ca:
0a:aa:67:20:e5:33:e9:85:e5:25:ce:02:29:9b:dd:
bc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:04:CA:5D:97:F5:F4:41:C8:79:DA:D8:B7:76:D3:5A:24:C5:F2:5E
X509v3 Authority Key Identifier:
keyid:21:CF:53:48:1D:13:3B:AC:F5:27:86:8D:BA:1B:37:63:E3:D6:DD:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/725b88-c523-4313-9e30-02c1e19a71d5/1/Ic9TSB0TO6z1J4aNuhs3Y-PW3ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:80:3c:f2:22:bc:0c:6d:cb:82:a9:14:3a:6e:43:87:ad:50:
cb:aa:33:f1:e5:a3:83:8b:30:8b:b0:b8:bb:9d:80:cd:81:a1:
10:e6:ca:15:bf:0a:b3:d2:6d:17:d5:21:63:39:00:8c:42:a2:
cd:47:84:d2:be:8c:e4:6c:9c:18:3b:8d:af:68:54:61:27:ea:
a5:bb:f4:a6:fa:ad:29:4d:f5:c3:0d:32:2a:0f:22:26:8c:dd:
4a:f4:ee:e0:c6:05:4f:7c:43:23:0f:45:14:03:eb:d3:c7:3d:
b4:b0:d6:29:ea:fd:e8:f2:4d:94:50:eb:41:13:88:f2:48:e5:
b5:ff:a0:5b:cc:20:9c:bd:52:31:31:08:5c:7a:c3:a9:a9:4e:
29:a4:8d:55:a9:7b:48:a0:1a:9e:d7:df:2d:a4:27:e5:2a:69:
84:ee:d9:e4:4a:81:84:00:1a:ca:36:65:c5:58:5f:aa:eb:86:
8a:5f:c7:e1:f8:a4:28:de:81:0d:ce:4f:4c:23:5c:f3:89:8a:
33:79:24:9d:88:da:85:a9:f3:41:00:4f:7b:48:0e:7f:08:fb:
fe:5d:a7:75:eb:dc:7a:b9:1e:0d:75:d9:71:13:9d:d8:6a:c0:
aa:1d:8c:ab:e8:b8:af:a6:36:9b:64:d4:fa:02:03:2a:2e:59:
5c:b0:f6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:49:59 2025 by rpki-client