Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
File: i2E3lJJwULIlJatwCRg1QI7uTHk.mft (raw, json)
Hash identifier: Namj+E7u5C95EmPE7R3i6eJZcbs+dyKArQK82fYoZII=
Subject key identifier: B1:6C:76:04:2F:54:58:60:AF:A7:3D:83:5A:68:07:90:74:EB:A7:23
Authority key identifier: 8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
Certificate issuer: /CN=8b613794927050b22525ab70091835408eee4c79
Certificate serial: 0197C56EBBFDEB1F74C797942114A903385D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
Manifest number: 15BD
Signing time: Tue 01 Jul 2025 10:00:58 +0000
Manifest this update: Tue 01 Jul 2025 10:00:58 +0000
Manifest next update: Wed 02 Jul 2025 10:00:58 +0000
Files and hashes: 1: 8d7VpoBO27aN3dak4lAaxGgmHlY.roa (hash: nh1zP1FVrxhSUv/TNCc0ZubqPf+syGRj5kTxf6jPWNk=)
2: i2E3lJJwULIlJatwCRg1QI7uTHk.crl (hash: IJh3SdgT5xS+gu94smFh1sDENpTk0MrLiSVR/NzHg4k=)
3: jr93hN4EhKSWYqIbECyoZXKfIBk.roa (hash: 73KNAqHLsWX0NkD2n0f2jQTbbkk8jmsVt6nVH9n8jm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6e:bb:fd:eb:1f:74:c7:97:94:21:14:a9:03:38:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b613794927050b22525ab70091835408eee4c79
Validity
Not Before: Jul 1 10:00:58 2025 GMT
Not After : Jul 2 10:00:58 2025 GMT
Subject: CN=b16c76042f545860afa73d835a68079074eba723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:52:d2:67:2b:a6:56:7c:67:3a:b6:b8:46:47:
b3:e0:f0:82:aa:fe:f6:cc:80:bf:a3:dd:22:95:65:
d3:73:c9:2e:4d:de:a3:e6:70:db:a2:64:77:a8:16:
7c:7b:91:a5:49:92:db:58:2c:c4:e6:fd:cc:de:89:
ed:37:09:35:ba:3b:a2:1b:02:ca:08:38:9a:43:51:
12:84:71:16:7b:0b:bc:15:04:55:f1:ca:56:a5:47:
b0:f0:91:92:61:e3:c1:94:21:ae:29:80:88:ba:92:
e6:3d:15:e9:eb:c7:b9:7d:28:fa:0c:70:01:12:56:
41:b1:7e:35:c2:a0:5e:c1:4e:5a:df:43:30:4a:88:
48:0b:30:45:04:c7:e3:11:3f:73:66:14:ca:39:41:
eb:6a:67:ed:2f:9b:d4:4a:50:bb:9d:f8:9f:2c:6e:
e8:9f:42:7f:1f:1d:e4:14:c4:de:f2:04:2f:4c:ee:
dd:58:e0:2c:4b:16:bc:5a:69:a1:f1:c3:94:87:74:
e5:dc:ad:8b:91:da:66:4f:fc:f2:b6:33:a9:62:c7:
92:16:4c:01:be:c6:ce:86:9a:1d:4e:93:47:6c:65:
a9:31:d8:18:25:90:7a:9f:70:7a:4d:86:24:23:92:
c3:10:0b:fe:21:8d:df:fa:e6:9c:9d:52:32:71:f0:
d5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6C:76:04:2F:54:58:60:AF:A7:3D:83:5A:68:07:90:74:EB:A7:23
X509v3 Authority Key Identifier:
keyid:8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:62:1d:7b:13:4c:dd:19:de:86:d9:69:6e:27:30:c9:c9:08:
94:68:dd:4d:cb:14:d3:54:a3:0f:85:ad:5a:63:6c:59:cb:3a:
03:5e:56:d7:d5:b4:62:66:71:ed:c8:09:01:7e:b0:48:b9:c2:
ba:57:69:30:ff:ec:ad:d3:5e:23:0d:f2:fc:93:47:bc:5f:e6:
82:01:ef:8d:0e:a3:ff:55:c7:6d:6b:6d:5a:fb:a9:e1:d5:4d:
3f:35:2e:da:d0:88:a8:e6:87:eb:2b:e8:c2:9b:96:08:9e:c7:
a1:12:09:1b:4b:99:49:15:36:d0:32:90:a6:6a:f7:70:af:70:
90:d2:f3:90:06:3b:6c:c6:33:b6:a4:93:31:7f:b2:6a:f6:17:
03:86:c6:13:7b:2b:8b:90:3a:db:05:28:21:1b:d7:bf:71:01:
3b:3c:b6:74:07:83:83:36:b3:4f:c6:6f:70:fe:7c:56:97:d1:
9f:99:f5:3b:29:3e:63:3b:d3:4f:d8:46:d0:50:fb:1d:64:d3:
d5:9b:b0:31:da:b1:0c:f2:c5:fc:2a:d7:b8:8d:ff:d5:86:6c:
9b:6b:93:c9:84:f3:51:c6:e1:44:ed:a3:22:0c:a7:77:58:d8:
4f:a1:5a:91:66:26:0e:e1:dc:c0:1d:22:f7:bc:90:d4:95:35:
b8:20:ec:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 12:31:57 2025 by rpki-client