Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
File: I6YR9Nqh1JrPstsip4DM57Cb3-k.mft (raw, json)
Hash identifier: dl5fGYsh0U915X3DsIUXZ6OjL0DPvUonXN+zVSpz15I=
Subject key identifier: 32:75:75:84:9A:A4:0C:86:DA:4D:F7:BE:7E:E9:16:26:69:BF:BC:27
Authority key identifier: 23:A6:11:F4:DA:A1:D4:9A:CF:B2:DB:22:A7:80:CC:E7:B0:9B:DF:E9
Certificate issuer: /CN=23a611f4daa1d49acfb2db22a780cce7b09bdfe9
Certificate serial: 0198D65F01A2983B3DBBBA2F8BC9D9067280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
Manifest number: 0A35
Signing time: Sat 23 Aug 2025 10:00:07 +0000
Manifest this update: Sat 23 Aug 2025 10:00:07 +0000
Manifest next update: Sun 24 Aug 2025 10:00:07 +0000
Files and hashes: 1: I6YR9Nqh1JrPstsip4DM57Cb3-k.crl (hash: 1alGeny3/DCWQOezK9ccZ9jh+3EHngd6KpsoQBpJpns=)
2: b73ddOLLjPYnTz9o7yYL4kMMo3U.roa (hash: Vc85I6rYToAbWM15WR5pMloHamrCwTA2NvWFqIsFGlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:01:a2:98:3b:3d:bb:ba:2f:8b:c9:d9:06:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a611f4daa1d49acfb2db22a780cce7b09bdfe9
Validity
Not Before: Aug 23 10:00:07 2025 GMT
Not After : Aug 24 10:00:07 2025 GMT
Subject: CN=327575849aa40c86da4df7be7ee9162669bfbc27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:14:95:a8:94:46:f4:7e:a3:e6:a0:42:a7:da:
64:03:52:df:40:ba:d2:06:62:31:20:f9:f2:ed:1f:
5d:61:52:d0:cb:90:af:ac:23:4e:f9:32:5e:3c:7b:
4e:06:ec:26:3d:67:d5:8e:f8:8a:27:75:e5:b5:de:
08:a7:62:0d:28:22:c1:e8:3d:5b:01:32:b8:6e:14:
75:ba:85:31:a2:df:93:69:6b:fb:6c:4a:8f:52:c7:
18:bb:8a:a8:53:18:ed:fa:dd:72:52:39:3e:b7:5d:
1e:55:0e:d2:7e:97:7a:14:42:a6:a6:3b:0c:5b:15:
a5:c1:55:11:1a:80:cd:d7:7b:20:e4:8b:e6:0a:57:
d5:95:2d:d5:cf:30:6b:ac:9e:28:7c:91:11:fd:98:
56:dd:e9:a9:4e:46:ae:28:81:63:2f:db:15:c4:26:
da:d6:10:8c:0b:cb:38:6a:0a:57:89:3e:b2:b2:db:
85:95:8d:04:cc:7f:58:a7:18:62:c2:cb:73:6d:ac:
9b:da:f1:a6:75:06:45:99:db:25:3a:c3:f5:c7:88:
f4:42:18:cf:19:c0:0a:8b:9b:8e:53:db:24:e5:44:
24:dc:7b:5c:10:8a:9d:eb:e4:e7:f5:bd:c0:ae:21:
61:c5:1f:5c:d0:e4:89:4f:50:26:20:49:e2:9b:ef:
d6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:75:75:84:9A:A4:0C:86:DA:4D:F7:BE:7E:E9:16:26:69:BF:BC:27
X509v3 Authority Key Identifier:
keyid:23:A6:11:F4:DA:A1:D4:9A:CF:B2:DB:22:A7:80:CC:E7:B0:9B:DF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a2:6b:77:6c:3a:36:e7:00:62:a0:1c:97:45:50:ed:a7:86:
88:07:60:44:18:a3:bd:bb:dd:be:4f:d1:50:02:be:04:35:92:
a8:52:93:0e:50:20:ff:5a:77:1c:8b:ad:9c:c0:62:0a:c6:94:
ab:a0:15:81:18:80:99:e1:81:08:22:6b:32:95:92:3f:c5:ca:
3d:7c:d9:89:88:bc:4d:19:bf:d9:16:ed:81:ff:a7:87:6f:37:
8a:44:32:f6:2f:3b:c2:22:77:d4:6a:03:25:a1:e7:5d:35:98:
27:c7:e0:05:e2:03:51:53:80:4e:85:a3:b8:2a:6a:b6:f8:43:
0b:b1:20:fb:52:2c:28:ae:50:2e:19:1f:23:e9:8c:67:ad:fa:
a8:38:86:12:9f:94:dc:d6:9f:e5:68:09:f1:48:c8:68:13:68:
55:44:be:d8:6a:c2:c1:7c:66:bb:62:1a:35:50:6b:90:b5:66:
31:a8:b9:f1:c8:e4:86:53:3a:e6:88:6a:8f:ea:31:71:6c:ed:
2e:3c:00:af:42:63:de:16:e6:66:b0:50:aa:ba:66:2b:7d:a8:
f5:63:08:b5:ca:e6:d9:7a:a7:9f:00:90:f2:28:4a:56:e3:90:
d1:85:04:16:06:03:8a:c5:84:6a:c6:9d:65:b3:c1:d0:ba:83:
ff:46:e7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:02:08 2025 by rpki-client