Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
File: I5xF5DYlUiCArsU5UpiaE6KKvQA.mft (raw, json)
Hash identifier: C3KBPk3uO7uG7RA32BBsXzTI0sK8RmHKHpVOOSKINI8=
Subject key identifier: A0:D7:E9:7C:6C:7E:C5:CB:9C:2E:FC:96:DC:6B:44:60:58:09:5A:F0
Authority key identifier: 23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
Certificate issuer: /CN=239c45e43625522080aec53952989a13a28abd00
Certificate serial: 0198D65F02AB4D69417BA33CAE8DF5866400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 10:00:07 +0000
Manifest this update: Sat 23 Aug 2025 10:00:07 +0000
Manifest next update: Sun 24 Aug 2025 10:00:07 +0000
Files and hashes: 1: I5xF5DYlUiCArsU5UpiaE6KKvQA.crl (hash: vqyxXZpqVAjVcujMqGoXOoZY1jjFPFvvURGg0Glw2Dc=)
2: lw90sey6Y2XkP3Sip6ebzWQtTKU.roa (hash: IdqbojAlXr4XwjmKtJYEU/2zd7cvDplQCfLZ9IO+/d0=)
3: uBZl19XYTdc5SBXaRHXvV0GGF98.roa (hash: 1Ti03xYR3EsLOQdndtqiFtUtuVxyXY66yoLYTtqG1ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:02:ab:4d:69:41:7b:a3:3c:ae:8d:f5:86:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239c45e43625522080aec53952989a13a28abd00
Validity
Not Before: Aug 23 10:00:07 2025 GMT
Not After : Aug 24 10:00:07 2025 GMT
Subject: CN=a0d7e97c6c7ec5cb9c2efc96dc6b446058095af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f9:8a:f1:d2:f5:7d:06:a4:a1:42:76:c1:92:
cd:51:1f:e7:77:63:d3:ab:7f:8e:cb:8a:0c:bb:38:
e8:6b:5d:19:e7:cf:f2:6b:b5:3c:eb:ac:0e:7d:18:
49:16:e2:59:53:41:6d:e9:7b:8d:8d:46:88:ad:5e:
4d:77:14:7d:c7:60:77:16:9a:cc:8f:54:57:d5:ad:
61:00:f8:b0:92:92:5d:c4:06:93:20:f0:84:86:4f:
78:29:48:74:90:fb:f6:93:47:bc:6b:0c:90:bf:a6:
8a:cb:0e:24:22:fa:14:d4:4d:b6:fa:56:00:c3:ae:
bf:f0:80:86:cf:41:3f:0c:7c:d5:d8:17:ce:6d:52:
8d:7a:d7:4c:60:f5:10:32:0b:b9:e3:0f:0d:78:b3:
68:80:e7:d0:0f:6c:f4:9b:86:9e:49:47:c7:0e:3c:
ff:61:cb:9b:04:12:4f:cf:b3:eb:3b:8f:89:f2:ec:
fd:e8:a5:3c:1c:35:34:14:3e:d0:a0:e0:3e:76:59:
cd:7a:3d:a4:e0:2f:d6:60:11:2d:e5:8d:9e:b2:97:
d6:0c:1b:9c:dc:69:97:0f:fd:b6:b0:08:e1:88:b5:
ea:0b:f2:c0:b9:4b:5d:2a:4f:81:1f:3a:bf:0e:e2:
a5:87:27:62:78:45:66:d4:29:e2:ca:f9:96:9b:05:
84:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D7:E9:7C:6C:7E:C5:CB:9C:2E:FC:96:DC:6B:44:60:58:09:5A:F0
X509v3 Authority Key Identifier:
keyid:23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:bc:d1:6b:77:42:85:2c:e8:f6:a8:5d:91:ba:7a:0e:6b:1f:
1e:09:e1:44:bf:87:2e:92:06:7d:50:71:17:75:15:92:60:5f:
22:c4:86:d3:d8:05:c2:cb:7a:fa:84:40:e1:e7:cb:54:72:72:
f8:e0:a4:92:d0:da:cb:a5:ab:a7:11:e0:c2:11:c5:d2:10:d5:
4d:7d:cb:a7:13:9c:a8:aa:d7:7d:86:c4:8e:3c:a7:02:20:fc:
41:79:5e:c5:41:b6:4f:df:80:f1:6d:1d:6d:83:91:b6:e4:34:
6f:f3:5b:57:2f:09:3f:cd:bf:77:ad:35:c1:38:5e:b3:61:67:
30:e1:fe:4c:2b:3f:ee:a5:07:94:b6:81:f1:9f:84:eb:84:7f:
94:7a:1a:22:ad:61:bb:3d:ce:7d:b5:7f:84:20:dc:55:95:48:
8c:87:8c:09:ae:6d:dc:57:25:95:b6:3d:f5:4a:67:ed:68:fd:
af:2e:19:93:c9:2a:70:ad:12:9e:70:ed:bd:bc:d6:6a:2f:53:
38:2e:34:c5:41:9e:a1:19:fb:1f:e9:1f:d6:b5:db:fb:e2:af:
69:54:ac:39:b6:84:b1:b8:7c:cf:6c:97:9d:06:57:84:97:86:
5b:e4:d6:22:c7:2d:21:52:09:28:ad:87:27:38:93:24:df:e0:
c4:b2:f0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:00 2025 by rpki-client