Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
File: I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft (raw, json)
Hash identifier: Dp+GJxzCDDfMs6lC8lPlRMSzO7xEOdeiuCEQ9mrRDBI=
Subject key identifier: 3A:21:49:05:A7:8F:1B:FB:F4:E1:D0:F9:01:8F:5C:75:B6:8C:79:14
Authority key identifier: 23:7B:2B:50:BF:0C:18:A5:31:E6:DB:15:66:7B:E7:ED:76:BB:28:21
Certificate issuer: /CN=237b2b50bf0c18a531e6db15667be7ed76bb2821
Certificate serial: 0198D54EB91F2BFE34350BBEF6D539428D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
Manifest number: 159E
Signing time: Sat 23 Aug 2025 05:02:42 +0000
Manifest this update: Sat 23 Aug 2025 05:02:42 +0000
Manifest next update: Sun 24 Aug 2025 05:02:42 +0000
Files and hashes: 1: I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl (hash: Rr+Rrmja8EM/b6g/RxjeWeMuHRDP6w1eC39jMto+DsI=)
2: ytASscQl-jcvF2Td7QzFghuuoNE.roa (hash: H19QKz9GlVTgCFc+7rr/9vdcrrvYDR0hpeCGpVF7EE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:b9:1f:2b:fe:34:35:0b:be:f6:d5:39:42:8d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237b2b50bf0c18a531e6db15667be7ed76bb2821
Validity
Not Before: Aug 23 05:02:42 2025 GMT
Not After : Aug 24 05:02:42 2025 GMT
Subject: CN=3a214905a78f1bfbf4e1d0f9018f5c75b68c7914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:15:d0:17:97:aa:4f:81:ad:20:50:ca:60:6f:
c8:3d:fd:ce:95:e7:56:f7:8c:b3:ad:3a:ee:a5:ba:
42:fb:67:b8:32:ce:f3:8b:1a:9a:96:5c:37:56:45:
fb:a0:ce:0e:b5:f7:f8:e6:a2:14:de:aa:64:49:7e:
71:1e:c3:53:6a:17:e4:92:cc:c1:fe:bb:7c:56:15:
4d:67:91:f0:03:9e:2f:53:33:0b:81:db:8b:6a:c4:
80:fa:a1:bf:3e:d0:41:4d:86:f5:1e:64:96:9e:ff:
48:a6:bc:cf:af:79:1e:2e:3b:6c:e2:80:c9:47:52:
3b:a6:ef:38:23:dd:e6:e9:3f:ee:6d:75:d4:1e:cb:
19:fb:52:85:e7:2b:04:d7:84:6b:50:2d:8c:40:e3:
dd:0c:6f:88:2d:ee:f4:71:02:0c:b1:df:52:b6:ea:
6e:7b:64:27:8b:dc:1e:f7:a0:ef:8d:d1:e2:aa:3f:
18:09:af:56:6c:20:c9:2b:33:b2:ba:d3:3f:f2:70:
62:73:6b:4c:c9:16:9f:62:4f:04:49:67:a1:a5:dd:
8f:52:3b:b1:01:5d:04:e0:01:f7:3a:52:88:28:b8:
83:cd:f7:8a:f0:da:2f:7e:3a:35:09:c5:25:1e:07:
dd:c6:e5:49:2e:39:78:65:9a:9e:fe:fa:77:9c:02:
55:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:21:49:05:A7:8F:1B:FB:F4:E1:D0:F9:01:8F:5C:75:B6:8C:79:14
X509v3 Authority Key Identifier:
keyid:23:7B:2B:50:BF:0C:18:A5:31:E6:DB:15:66:7B:E7:ED:76:BB:28:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:48:bd:d7:d3:8e:24:81:ad:cb:cf:74:52:08:6f:3a:4a:c9:
53:3c:ea:a4:17:70:a7:55:27:88:60:e8:36:12:19:28:7f:c8:
bc:b1:d3:89:e6:83:4f:0a:e0:37:fc:34:38:32:ec:79:6a:8d:
ba:98:7c:6b:db:60:0e:a1:1b:d3:63:6e:2a:5c:18:b0:4f:61:
1a:8d:03:62:f0:ad:62:b9:87:e4:90:6b:74:20:cf:01:b7:ff:
44:af:ff:e7:0e:d4:9f:d8:3c:b8:69:ce:d2:64:18:6c:0c:27:
d5:3f:06:e8:d9:e4:ec:ca:30:27:58:df:37:79:bd:46:2c:54:
83:cd:6f:f2:b1:ef:7e:00:d7:84:9d:9e:a3:2b:66:91:fc:fc:
9d:92:15:05:91:de:96:5c:70:fe:50:d6:76:70:9c:c1:c4:b8:
19:e9:29:3b:52:2f:e6:91:be:30:de:5c:e2:2d:cc:db:39:e6:
ec:d0:d0:cc:8c:0f:be:37:b1:6c:38:02:8a:12:1b:9c:b1:e9:
f0:ba:b2:65:6b:5a:24:e5:fd:4b:58:70:1e:15:04:99:cc:72:
b0:b7:e2:8e:e6:3a:bb:06:0d:df:31:36:ae:d4:12:a0:2b:81:
54:e9:68:ba:9d:aa:81:a5:58:65:c5:b6:22:b3:a8:7f:a1:34:
e9:6f:46:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:13 2025 by rpki-client