Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
File: i4GUQccJMDSp1GVqL202qyQDP-Q.mft (raw, json)
Hash identifier: wzHCo5Do8odRjspoay6ba0ndgpKisKsqqENtIuDVwEA=
Subject key identifier: C7:D8:C8:E6:F2:75:5B:CE:CF:F9:B7:65:75:F2:1C:FA:50:43:38:E4
Authority key identifier: 8B:81:94:41:C7:09:30:34:A9:D4:65:6A:2F:6D:36:AB:24:03:3F:E4
Certificate issuer: /CN=8b819441c7093034a9d4656a2f6d36ab24033fe4
Certificate serial: 0198D73BD830A0E9CD928300575F20430DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
Manifest number: C0
Signing time: Sat 23 Aug 2025 14:01:19 +0000
Manifest this update: Sat 23 Aug 2025 14:01:19 +0000
Manifest next update: Sun 24 Aug 2025 14:01:19 +0000
Files and hashes: 1: Dm667XnaRqtK2i3UfsThVeXTWc4.roa (hash: 8yEFF1MNlsRKs74/fi+3dMb5d+dLJ3drU0IwlTP+fus=)
2: i4GUQccJMDSp1GVqL202qyQDP-Q.crl (hash: Wtx755YW1R4e/aNTwuzCbGFc25QVhenjiiBsO7rK3SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:d8:30:a0:e9:cd:92:83:00:57:5f:20:43:0d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b819441c7093034a9d4656a2f6d36ab24033fe4
Validity
Not Before: Aug 23 14:01:19 2025 GMT
Not After : Aug 24 14:01:19 2025 GMT
Subject: CN=c7d8c8e6f2755bcecff9b76575f21cfa504338e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:38:e8:c5:a3:8b:40:30:5c:22:ac:c6:a1:f7:
b3:c7:9b:7b:25:7b:dc:88:00:be:e7:80:2e:b5:20:
b6:bd:6a:01:ec:00:7d:8d:fe:35:34:6f:d9:c5:3f:
96:f5:66:56:ac:e1:f4:2e:1e:37:32:0a:61:62:46:
2d:cf:2c:67:9b:e3:34:e7:ec:a5:a2:40:eb:6f:08:
ed:ad:23:c5:cb:92:82:41:91:f9:d1:5a:bf:60:08:
e1:6d:0d:8e:03:f8:55:e9:cf:b0:e7:02:fe:49:5b:
e6:cc:8d:d5:db:ef:6b:d0:0e:2a:0b:81:a2:06:93:
19:aa:03:7d:21:bd:17:c9:28:51:fb:9d:c5:74:76:
93:97:df:87:90:1f:27:72:74:b5:93:2a:04:7a:3a:
db:0d:76:a2:a2:a5:50:6c:90:c9:f3:e1:38:88:88:
92:60:18:8d:48:42:2f:f7:11:26:57:37:43:1c:26:
f2:84:d3:67:cf:40:f0:25:1b:3d:c5:14:ee:8f:0d:
2a:97:1e:ea:2f:06:d5:e8:e3:82:9c:3a:d4:5b:34:
61:ea:62:23:ee:d7:b9:a6:39:f2:17:e8:3e:9d:19:
f3:83:30:a4:a0:7a:93:be:21:0e:d9:fd:bf:56:21:
55:b4:db:d0:ca:2b:9b:1f:bc:04:cb:cf:48:ae:71:
cc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D8:C8:E6:F2:75:5B:CE:CF:F9:B7:65:75:F2:1C:FA:50:43:38:E4
X509v3 Authority Key Identifier:
keyid:8B:81:94:41:C7:09:30:34:A9:D4:65:6A:2F:6D:36:AB:24:03:3F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:95:27:67:e5:3d:ec:1a:d9:64:71:b3:1d:00:52:e1:f5:f2:
39:7f:7b:4c:e2:b3:e0:a3:45:f3:09:97:48:e9:1a:66:75:62:
18:40:a1:84:fa:d8:34:c1:5a:d7:dd:e3:db:6d:59:9f:ff:60:
a2:bd:4f:18:64:62:8b:33:23:bb:29:a1:db:dc:45:e8:54:55:
4c:8e:03:1e:3a:c8:90:d1:1d:6f:2d:df:37:1a:65:de:2d:97:
64:36:a9:dc:45:37:ed:e3:26:d2:4f:e7:4c:29:4d:34:53:b1:
2d:fd:4a:4b:e2:08:68:df:5e:85:80:da:b7:95:d4:c6:1e:69:
54:fe:03:64:47:6d:a0:e8:cf:ef:08:25:b6:cc:91:6a:c6:4b:
7e:ed:4e:73:47:95:ec:57:3a:81:ca:4b:df:fc:aa:f8:87:f4:
cf:c9:d5:11:e3:af:e1:52:2d:de:f6:1b:3d:04:14:96:f5:f0:
4f:af:68:a2:be:f6:fd:eb:dd:7c:e1:99:f2:4c:e0:a6:8b:82:
f5:de:3c:78:2a:e9:e3:43:17:01:d1:e3:64:18:ef:f1:b5:86:
3f:86:33:09:cb:15:28:68:ad:0e:60:2b:95:c5:e6:c0:15:22:
85:3f:83:45:fb:a6:b2:fd:54:a8:43:1f:4e:83:6d:b3:b4:67:
fd:cb:a6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:48:41 2025 by rpki-client