Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
File: I50GV-qu8Ja-yUsR9NadDT7QTOY.mft (raw, json)
Hash identifier: YZc52qzelHYzDcqzGVxz/MF86zE71B+uyUCS6kGPibc=
Subject key identifier: 38:E0:67:F3:94:F6:7E:92:7E:90:B4:6E:40:F2:CC:6B:38:0F:D0:A0
Authority key identifier: 23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
Certificate issuer: /CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Certificate serial: 0198D515A265FB2EA6C49088E327039E18B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
Manifest number: 138E
Signing time: Sat 23 Aug 2025 04:00:21 +0000
Manifest this update: Sat 23 Aug 2025 04:00:21 +0000
Manifest next update: Sun 24 Aug 2025 04:00:21 +0000
Files and hashes: 1: FciKzBJuJmXxMHbhg7vtxvJaFpg.roa (hash: LJXoq9acQBnheF7twxm9ozyA/I0gm87jr1W8PivL0eA=)
2: I50GV-qu8Ja-yUsR9NadDT7QTOY.crl (hash: wLteHVoHLtxd2A8vg9b/GgiwHWhqQ7W9/bvjgcN9CRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:a2:65:fb:2e:a6:c4:90:88:e3:27:03:9e:18:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239d0657eaaef096bec94b11f4d69d0d3ed04ce6
Validity
Not Before: Aug 23 04:00:21 2025 GMT
Not After : Aug 24 04:00:21 2025 GMT
Subject: CN=38e067f394f67e927e90b46e40f2cc6b380fd0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2a:5f:c5:95:1a:b1:ff:1a:13:94:fb:14:24:
56:52:f5:35:d2:37:13:7c:07:6b:93:31:c4:0f:72:
cf:2c:df:69:27:17:d1:c8:dc:da:95:b5:2d:86:4e:
59:df:d2:04:9d:b4:87:de:17:14:b4:92:6d:57:d7:
af:4c:54:6a:48:69:ae:fc:29:1d:f4:23:7b:29:1f:
1a:b9:14:7b:d0:92:e9:ca:4a:1a:1f:49:2c:11:83:
1d:ed:2b:44:c1:e2:f6:a4:b7:f4:ee:8a:93:d6:2f:
c8:76:1d:b0:1e:d5:97:0d:98:78:3c:cf:c1:1a:db:
af:bb:0e:c5:f4:39:d6:28:a1:a2:84:ac:0a:f5:3c:
cb:6f:2b:18:69:cc:c7:b9:86:84:84:e9:72:6d:fd:
c3:71:9a:7a:7d:7b:de:e3:a3:f4:dc:f2:a0:89:85:
bb:0c:40:65:91:28:a3:25:9c:5e:2e:38:c6:f3:e5:
08:d6:dd:72:7f:98:c1:5f:ce:7e:00:52:15:43:cc:
b6:7a:80:ee:32:f7:36:84:84:98:31:61:6a:c4:ab:
3f:e9:7c:d0:04:c8:57:f6:a9:94:9e:2b:2d:c2:6c:
85:cc:2e:c2:c6:ae:5c:f1:b4:03:e4:d7:27:71:11:
e3:b6:50:a6:6e:5f:f3:a8:26:2e:8c:35:e3:7c:82:
f1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E0:67:F3:94:F6:7E:92:7E:90:B4:6E:40:F2:CC:6B:38:0F:D0:A0
X509v3 Authority Key Identifier:
keyid:23:9D:06:57:EA:AE:F0:96:BE:C9:4B:11:F4:D6:9D:0D:3E:D0:4C:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I50GV-qu8Ja-yUsR9NadDT7QTOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1f1d43-43db-4f4a-b494-7df9ae53d484/1/I50GV-qu8Ja-yUsR9NadDT7QTOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:30:f9:50:b5:42:27:f1:2a:2a:4b:41:d7:9f:a6:6a:63:88:
bd:b9:8a:d6:56:ed:10:93:3a:63:74:99:a6:55:c0:08:30:05:
31:ad:24:b6:8a:b8:b0:66:7a:d5:ca:f2:24:5a:b6:cc:0b:a6:
de:f1:a3:09:83:b6:cb:ca:11:db:d3:68:16:be:32:d8:47:b4:
af:b4:75:27:b1:84:9b:a8:fe:cc:c6:4f:6a:84:82:68:98:cd:
98:ab:80:b6:24:4c:6c:b2:c9:83:9a:bf:b7:2b:ec:1c:a1:06:
72:5b:76:5f:df:8f:c2:67:f4:b5:ae:88:7f:d6:a5:c6:25:d4:
89:06:1a:9e:52:36:5d:24:f1:ef:f4:ff:5c:0f:81:7e:2e:6d:
ba:63:99:d3:cc:b1:84:21:88:4d:a8:79:b0:86:ae:30:82:ff:
b7:5b:d2:77:61:24:3b:a1:99:b6:74:da:8f:38:27:16:03:3f:
af:a1:3d:0a:92:e4:c2:33:cc:5e:5a:db:2e:4c:38:26:5d:3c:
f3:a7:17:cd:90:67:18:74:db:2e:bd:4d:be:2f:a9:2b:f6:86:
99:45:cb:0f:b7:a9:02:ba:02:2e:01:dc:9c:91:15:19:fc:a5:
67:08:c9:60:0c:a6:c6:cd:3a:47:73:40:56:35:29:db:e6:ed:
50:4b:19:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:45 2025 by rpki-client