Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
File: i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft (raw, json)
Hash identifier: vaKOPwAuvzjJCXDa9iwf9Id/Ih9eALVlP+6bOjwsji8=
Subject key identifier: 7F:5C:CD:DF:9E:58:BD:22:08:2E:3E:6F:7F:CB:DD:22:D9:A0:69:77
Authority key identifier: 8B:92:89:D8:82:59:C3:3C:C7:AD:81:48:2B:77:94:50:AE:4E:AC:03
Certificate issuer: /CN=8b9289d88259c33cc7ad81482b779450ae4eac03
Certificate serial: 0198D5BBFBF54F85B1EECB95378AA3E27672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
Manifest number: 08FF
Signing time: Sat 23 Aug 2025 07:02:03 +0000
Manifest this update: Sat 23 Aug 2025 07:02:03 +0000
Manifest next update: Sun 24 Aug 2025 07:02:03 +0000
Files and hashes: 1: i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl (hash: HBXabQIzYslW77SUpaLabqaEPw1iiKkh1Q7axhRBSTg=)
2: i_rrSeZPVtugiJJvEliUK8J1RzA.roa (hash: 1fESgkXEQ9WR5T3026NuI2KYcBFTrF7XO7UpgxQnSpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:fb:f5:4f:85:b1:ee:cb:95:37:8a:a3:e2:76:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9289d88259c33cc7ad81482b779450ae4eac03
Validity
Not Before: Aug 23 07:02:03 2025 GMT
Not After : Aug 24 07:02:03 2025 GMT
Subject: CN=7f5ccddf9e58bd22082e3e6f7fcbdd22d9a06977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:61:95:97:b0:2d:16:d9:8f:62:78:68:33:
b9:fc:69:e5:61:60:63:8e:16:be:f2:a8:1f:fa:8d:
39:c7:86:9f:8b:5d:97:93:bc:a6:b6:73:f1:07:cf:
e5:15:a6:5b:e7:aa:04:83:bc:04:98:73:07:b2:0d:
78:81:26:21:6e:64:e8:93:8f:d0:d0:f7:91:75:7d:
28:64:78:ca:a8:88:77:ad:65:47:9d:16:6d:26:86:
65:e1:e5:0f:4b:01:08:9a:ee:ea:b6:db:eb:be:59:
6f:6e:6e:3b:6b:0f:48:79:c4:c4:d9:c1:a3:d9:27:
b5:c6:90:ef:07:24:30:77:aa:78:0a:66:aa:d5:7d:
b2:57:ac:a5:7b:44:fd:b8:1b:b6:4a:27:48:fe:29:
4b:b7:e8:00:42:c8:a3:50:e6:cf:ba:39:b1:4f:4c:
14:b9:56:63:d1:5f:1e:8e:b7:61:db:07:3c:12:d7:
bb:35:a1:02:a1:82:79:88:de:d5:d0:cc:9b:82:f5:
6e:e8:33:45:c0:8b:70:bc:5d:1a:6c:3a:5f:7b:0a:
9e:f5:a3:ee:06:66:c7:77:bf:bd:3f:38:7f:fe:47:
18:82:e7:96:ba:1d:b7:87:0a:e2:a4:e0:83:8e:22:
ff:ea:dc:ef:95:2e:2c:d9:e5:b0:f9:0f:75:89:85:
39:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5C:CD:DF:9E:58:BD:22:08:2E:3E:6F:7F:CB:DD:22:D9:A0:69:77
X509v3 Authority Key Identifier:
keyid:8B:92:89:D8:82:59:C3:3C:C7:AD:81:48:2B:77:94:50:AE:4E:AC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d3:6a:a9:d8:26:24:52:75:b7:77:30:9b:7e:fd:33:0f:e8:
1b:ce:d2:5e:6d:d1:0b:c7:f4:f8:6b:b4:21:de:e3:ff:f1:8b:
7c:f8:6e:ae:6a:1c:9e:7e:54:5d:a0:89:15:67:df:72:c1:9b:
7a:7b:14:4b:77:04:45:7c:c5:05:62:1d:f5:0f:6b:43:90:b3:
15:7d:32:79:ff:ac:83:31:b9:99:09:57:47:9e:f6:72:46:b3:
c0:ec:2c:cf:83:97:f0:7b:97:45:69:b1:7a:5d:6c:4c:67:88:
20:52:30:89:58:7b:97:8b:e1:09:bc:64:c2:ec:55:e2:2d:c6:
21:62:20:6c:7d:a8:63:ac:1d:c3:c1:3d:c2:b4:c0:0f:bb:1e:
bc:57:f2:c5:ab:17:cc:5e:ee:11:fd:58:6b:09:47:70:b8:b8:
32:0a:15:f3:21:73:1a:78:a3:52:19:88:d9:1c:ac:8d:ae:5d:
a8:0e:f7:19:c4:a4:f1:27:26:75:ba:e1:b0:cc:3e:6e:f5:8b:
8a:10:a2:c1:c2:a5:fc:26:15:c7:c5:10:b8:ad:aa:5d:42:43:
46:a7:51:4c:0d:2c:b1:30:48:d1:c5:26:46:b1:e3:95:12:f9:
30:bb:da:1e:1f:0d:42:2e:2c:03:74:37:f8:b5:1e:46:59:ad:
a1:0d:40:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:14 2025 by rpki-client