Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
File: i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft (raw, json)
Hash identifier: fZnmx42gmxoJ1c4GvQhA03pZDy1girwD30hoR9txKxY=
Subject key identifier: 69:29:3A:44:49:BA:D8:79:29:B7:8F:36:52:51:C7:CE:99:8C:A6:47
Authority key identifier: 8B:92:89:D8:82:59:C3:3C:C7:AD:81:48:2B:77:94:50:AE:4E:AC:03
Certificate issuer: /CN=8b9289d88259c33cc7ad81482b779450ae4eac03
Certificate serial: 0197CB3A26696B0EE8AF3204B579855E8850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
Manifest number: 0875
Signing time: Wed 02 Jul 2025 13:01:14 +0000
Manifest this update: Wed 02 Jul 2025 13:01:14 +0000
Manifest next update: Thu 03 Jul 2025 13:01:14 +0000
Files and hashes: 1: i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl (hash: 7NV7korhQsMcDyz+SAXL8Lot2P7ek4v2ktbx5ZeEwRQ=)
2: i_rrSeZPVtugiJJvEliUK8J1RzA.roa (hash: 1fESgkXEQ9WR5T3026NuI2KYcBFTrF7XO7UpgxQnSpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:3a:26:69:6b:0e:e8:af:32:04:b5:79:85:5e:88:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9289d88259c33cc7ad81482b779450ae4eac03
Validity
Not Before: Jul 2 13:01:14 2025 GMT
Not After : Jul 3 13:01:14 2025 GMT
Subject: CN=69293a4449bad87929b78f365251c7ce998ca647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:31:12:f2:23:17:d0:da:a8:dd:5e:a9:0c:2c:
4e:bc:98:cb:3f:41:ee:b9:32:dc:67:5b:b7:bc:bb:
04:3b:6b:b4:c0:74:3f:a9:ad:cc:ff:18:06:2f:ca:
ef:50:13:4a:b3:55:a8:29:c5:3d:4f:68:2b:5d:fb:
e1:0a:56:ff:1b:cf:3e:72:4c:09:1b:9d:80:0c:9c:
3b:8e:98:d1:bd:5f:be:e9:dc:8a:23:2f:ad:b7:29:
da:3d:49:c7:47:d2:48:d9:d4:ab:fe:ac:de:cd:5e:
09:03:0c:59:5a:de:d5:af:ea:94:5b:65:93:a2:71:
1b:20:9d:85:63:93:25:b7:87:d7:2b:33:27:21:a8:
28:2c:bf:b3:c0:c9:2f:dc:b5:72:7d:a2:c8:ec:00:
c1:2c:40:e5:3b:2b:10:d9:83:7f:38:f8:3a:8a:d5:
15:60:8f:58:24:d6:cb:63:be:34:06:f9:ff:d6:7e:
d3:54:ff:1c:80:7a:bd:c5:4e:2b:c4:24:44:97:58:
1e:3e:e8:a7:45:b3:9d:6b:d5:a7:9a:b0:85:36:76:
0c:36:9c:b0:a1:52:32:6e:1d:db:ca:20:e4:3f:9a:
d6:2c:38:2f:47:61:6d:70:2d:a0:d6:6e:a1:83:9b:
54:13:01:1d:70:9a:d4:a5:87:e6:1a:b3:fc:2e:68:
e4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:29:3A:44:49:BA:D8:79:29:B7:8F:36:52:51:C7:CE:99:8C:A6:47
X509v3 Authority Key Identifier:
keyid:8B:92:89:D8:82:59:C3:3C:C7:AD:81:48:2B:77:94:50:AE:4E:AC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:37:26:13:e2:34:4e:a9:59:ba:4e:63:21:e2:6c:07:1d:c3:
cc:6b:46:cc:8f:d9:9c:f6:85:13:0e:b6:80:aa:d8:2a:af:d7:
29:47:0a:bb:72:66:68:fc:54:e8:b9:b8:20:93:12:e7:db:c9:
0c:e2:aa:8b:03:f3:ff:0c:11:54:b4:b5:00:7d:b7:d8:ed:7d:
73:9c:ee:47:7d:d3:86:d4:df:81:c1:e0:a4:59:02:01:06:cd:
85:d5:d1:f7:44:f5:f0:ea:58:f9:a2:19:6b:56:90:50:ba:e9:
82:94:34:2c:cc:44:91:ba:27:23:23:5c:7e:a6:61:45:e3:14:
db:6a:bc:99:16:83:4b:28:1b:e2:e8:ef:da:76:9c:8f:54:95:
26:9b:1e:e4:23:f7:1c:f1:2d:8f:f8:f2:8a:c0:ce:c3:69:ac:
61:5c:67:83:27:f4:8c:79:7e:d5:ca:6b:82:60:b8:e5:75:14:
28:75:1a:eb:c4:9a:e6:66:b3:80:50:83:2c:1f:f8:61:b9:1c:
59:93:35:5d:da:ac:7a:63:50:6b:3f:08:78:45:77:b9:ea:ee:
59:61:f2:02:fb:a9:78:e0:34:76:40:5d:64:7a:c8:cd:b7:db:
af:bf:54:e8:09:f3:49:14:80:46:30:d0:5f:3a:fa:f7:d4:3e:
d4:fe:21:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:47:59 2025 by rpki-client