Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
File: I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json)
Hash identifier: dKmJyQa0wdL33oWFhzDQrEOuUj0QfJboSCzwTX7j4VM=
Subject key identifier: B8:0E:D6:A8:5C:A6:44:4F:93:BD:02:AC:EB:23:0F:22:89:33:87:AF
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial: 0198D404BB9D69214D18F0F46FD68CBA7E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
Manifest number: 1235
Signing time: Fri 22 Aug 2025 23:02:16 +0000
Manifest this update: Fri 22 Aug 2025 23:02:16 +0000
Manifest next update: Sat 23 Aug 2025 23:02:16 +0000
Files and hashes: 1: Ai_jhfn0i9Wvxs1dcGNuIQFRbQw.roa (hash: Gw+sAwziSiWdDJ9jEjQB+Xypl/VPbgg3IFN9iDAN1Ok=)
2: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: 9YDgSUWbq/e492VTWU5xVgm7tSJFnw8nqxYdw4dcFRc=)
3: U3XsaJj-IFBktG-dXYEuz5kV62s.roa (hash: kenyyNekJ/vibROkcjE9SyGPN68bhSkOSO66LaGuIH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:bb:9d:69:21:4d:18:f0:f4:6f:d6:8c:ba:7e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
Validity
Not Before: Aug 22 23:02:16 2025 GMT
Not After : Aug 23 23:02:16 2025 GMT
Subject: CN=b80ed6a85ca6444f93bd02aceb230f22893387af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b8:05:28:fc:97:09:c5:bb:7f:a0:24:7c:f2:
87:25:bb:65:84:8e:17:8d:b3:e4:73:69:9d:0b:b4:
cf:02:85:79:08:2f:56:56:73:11:9d:d6:70:14:73:
95:a4:b5:87:e9:30:a4:21:5d:5f:1f:6a:77:d6:3f:
9b:74:21:53:c6:1d:f3:a9:f0:c8:a8:27:c1:98:b3:
7d:75:d6:90:31:9c:55:ee:b1:f3:d3:0f:77:50:6b:
e1:0f:2c:69:3d:58:51:5c:d0:f4:40:98:c0:33:e4:
82:a6:9d:25:e0:34:be:3e:8e:90:57:9f:56:4c:d4:
99:f2:6c:48:ee:e1:0b:9a:f8:8b:bb:bb:f7:e7:3b:
22:5d:59:c5:15:73:55:1a:de:98:52:d2:7d:de:be:
64:7b:93:67:76:d7:d2:27:1a:71:8d:af:22:78:6b:
ee:9e:91:c7:ac:ac:e4:b6:80:e2:89:7e:a1:dc:55:
60:76:e8:2c:75:bf:3d:32:35:5d:4e:b1:55:8b:ad:
33:4f:b6:ee:6d:8f:17:21:3e:d2:96:a8:bf:55:8c:
64:1b:3f:b1:1a:fc:29:23:e1:db:50:b4:ad:ac:c8:
d1:0d:31:3b:9d:22:67:36:01:ac:87:bd:63:3f:e0:
07:fb:a6:71:3c:89:c8:11:b8:49:fb:ce:de:65:83:
29:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0E:D6:A8:5C:A6:44:4F:93:BD:02:AC:EB:23:0F:22:89:33:87:AF
X509v3 Authority Key Identifier:
keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:66:3a:dd:98:1a:80:8d:9b:bc:a8:39:f4:f3:04:4f:fb:db:
14:c2:15:4e:f7:9d:d7:fc:c2:26:b2:e5:9b:63:62:5e:e0:0a:
fd:fe:e2:b8:16:f0:30:62:d6:e7:03:90:fe:6a:75:7b:7d:48:
59:92:5c:47:fb:3f:2a:16:ed:80:61:81:a1:b6:bc:13:2c:79:
b1:d9:8d:24:38:8c:7a:ee:55:e3:69:bc:5d:19:00:ea:e7:a7:
0c:41:61:b3:ea:f9:3d:96:1c:2d:bf:9c:e5:bd:90:19:de:88:
cb:c7:33:ac:31:2b:05:11:3d:c5:83:20:44:39:27:ee:24:7a:
76:7f:56:21:4a:15:03:85:db:a6:e2:2c:f9:e6:0e:fd:68:1c:
d7:ce:90:25:9e:fa:c2:c4:e9:2b:57:21:ce:83:bb:02:7d:21:
33:10:fa:fa:f1:5c:f4:fd:11:35:65:d3:5c:66:2f:10:69:62:
f3:8f:ec:ed:1c:94:e7:2f:9c:31:af:75:1b:48:3a:81:23:c2:
b4:25:1b:4b:b4:60:65:fb:78:3c:63:c2:1c:33:3b:ab:01:51:
9f:e7:c1:a9:87:7c:26:9f:bd:2c:d9:28:c4:10:78:4a:72:5b:
14:b5:69:1e:f7:4f:cc:fe:ae:53:9c:4b:f8:a7:86:4b:a4:89:
8e:04:83:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:21 2025 by rpki-client