Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
File: I-RRZMVy7d5d8lORfMEqLf05i5c.mft (raw, json)
Hash identifier: 9kkSvxwbwPxBKilqJLkqa2TXG+5abu9DQDdvYUEqyRA=
Subject key identifier: F5:09:B2:CC:E4:9B:00:34:A4:87:C3:47:5A:2A:54:2D:39:E8:70:6E
Authority key identifier: 23:E4:51:64:C5:72:ED:DE:5D:F2:53:91:7C:C1:2A:2D:FD:39:8B:97
Certificate issuer: /CN=23e45164c572edde5df253917cc12a2dfd398b97
Certificate serial: 0198D660766F41F1E9F746E119FA6222E813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
Manifest number: 071A
Signing time: Sat 23 Aug 2025 10:01:42 +0000
Manifest this update: Sat 23 Aug 2025 10:01:42 +0000
Manifest next update: Sun 24 Aug 2025 10:01:42 +0000
Files and hashes: 1: I-RRZMVy7d5d8lORfMEqLf05i5c.crl (hash: 2nQwfWdku57Wvwrc7IsuD1k4/h6af0vLAjv7gbMAprc=)
2: Qf0cAOk73br7c02Yp4LiYn6tSvI.roa (hash: Uq615z1vQ76UBbAOWh8ANumqrOuVi1i2JY2ord8ybMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:76:6f:41:f1:e9:f7:46:e1:19:fa:62:22:e8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e45164c572edde5df253917cc12a2dfd398b97
Validity
Not Before: Aug 23 10:01:42 2025 GMT
Not After : Aug 24 10:01:42 2025 GMT
Subject: CN=f509b2cce49b0034a487c3475a2a542d39e8706e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e4:0a:13:96:32:cb:9b:94:c9:3d:39:24:1e:
be:7d:bf:4c:77:79:0a:01:a1:58:d2:19:50:f0:c0:
b5:3a:de:39:40:90:0b:e8:fa:75:f5:9f:90:a6:85:
ae:7e:f2:4e:35:e7:df:3b:8e:98:4b:94:2b:7c:68:
61:3f:52:1c:5d:1c:c2:1d:58:77:af:20:e8:44:a2:
3f:c7:6f:9a:87:83:5a:31:14:36:63:4b:8b:9b:da:
ec:2c:90:60:aa:f6:23:be:22:42:e3:0f:62:94:da:
ea:ae:f9:a4:fd:4f:66:c0:58:df:25:19:4a:ef:bd:
be:a3:32:dc:e0:ef:0a:ba:32:22:f0:2f:10:cf:83:
0f:80:62:c4:49:f8:34:5b:1b:b5:45:c7:ed:77:87:
91:34:b8:04:d8:57:2a:20:22:8f:e2:03:51:5e:c3:
50:be:18:bf:1a:5a:a5:e5:97:d8:b4:03:3b:75:6f:
c5:0a:a0:4d:c3:ad:e0:cd:37:54:8c:1a:db:a2:ed:
a0:0b:b5:46:26:05:d3:36:f3:11:f8:c8:00:23:93:
fe:35:47:b9:07:17:a5:a1:9f:e0:13:2c:da:38:ce:
da:ab:76:1a:de:1c:5d:ee:3d:ec:07:0b:99:31:7e:
93:59:c0:b2:4f:06:83:5e:78:d6:13:2f:b8:52:75:
3c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:09:B2:CC:E4:9B:00:34:A4:87:C3:47:5A:2A:54:2D:39:E8:70:6E
X509v3 Authority Key Identifier:
keyid:23:E4:51:64:C5:72:ED:DE:5D:F2:53:91:7C:C1:2A:2D:FD:39:8B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:cf:be:d5:dd:2c:ff:1d:24:02:a8:01:f5:49:12:94:7a:d2:
13:76:48:06:60:74:60:d6:20:65:b0:2a:15:91:87:c5:7c:bf:
7d:15:d4:fe:9c:a3:00:a8:5f:eb:f6:6f:38:2e:41:13:07:34:
e4:41:d0:ec:f8:c3:07:d4:20:1e:de:e5:f9:c2:f3:73:7f:f3:
d8:ad:2b:cf:2a:15:02:d1:01:90:16:c0:b3:96:2c:1a:0a:10:
8b:78:b6:03:54:61:1e:4b:22:a9:e8:ea:c6:c6:7d:0b:b0:68:
d9:a8:55:7d:7c:86:ab:39:12:d5:96:ec:ff:b0:25:19:f6:0d:
3e:e6:8a:ed:ae:32:03:a6:ab:e3:39:92:5a:65:89:0e:fe:41:
f6:d5:ac:96:18:0d:ec:26:81:d6:75:96:6c:8c:84:26:72:1c:
bd:5f:9c:b8:d0:99:9b:f7:1e:e4:86:cd:28:34:17:71:ca:36:
48:62:1d:94:e3:e6:8b:fc:0c:ba:d9:39:12:3a:67:13:65:71:
05:d1:e2:5e:2b:23:c4:36:e5:f1:d5:3d:ed:13:c1:8a:15:39:
b7:fd:32:7d:3a:ab:f2:eb:29:7f:a9:7a:ac:00:ef:da:b6:ed:
54:1c:20:1d:f5:5e:4c:29:86:6e:d9:8c:f5:f3:8e:61:57:61:
f0:df:68:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:00:38 2025 by rpki-client