Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
File: I5Vy3fyrYpHmQQzNToYO42AA5mg.mft (raw, json)
Hash identifier: DIc+yQpointATadEdwDFc0j8qsQ7zVv5lU+uj0j6EAw=
Subject key identifier: 1D:36:E8:07:39:E7:F3:A9:F4:CD:3A:F3:80:DE:29:31:9A:AA:86:DD
Authority key identifier: 23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68
Certificate issuer: /CN=239572ddfcab6291e6410ccd4e860ee36000e668
Certificate serial: 0198D472D7F8EB4AFF422C3722204F78DF94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 01:02:32 +0000
Manifest this update: Sat 23 Aug 2025 01:02:32 +0000
Manifest next update: Sun 24 Aug 2025 01:02:32 +0000
Files and hashes: 1: I5Vy3fyrYpHmQQzNToYO42AA5mg.crl (hash: PVGRLU9JvFp42FHHYKbh7qsCJcgnj28TQarYtvc09wI=)
2: cEnlNHZ35kSVNo2T27Ex45pap18.roa (hash: q/g4pWJ8XYH4irxAQK7i5w/oElgLduGOhld/VI56BOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:d7:f8:eb:4a:ff:42:2c:37:22:20:4f:78:df:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239572ddfcab6291e6410ccd4e860ee36000e668
Validity
Not Before: Aug 23 01:02:32 2025 GMT
Not After : Aug 24 01:02:32 2025 GMT
Subject: CN=1d36e80739e7f3a9f4cd3af380de29319aaa86dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:eb:39:7a:c2:c1:62:8b:2d:fc:ec:da:7c:2f:
fb:39:3e:98:fc:c6:58:ca:81:d6:4a:c9:89:6a:a4:
b1:9f:60:a6:68:22:65:21:2b:89:74:dd:2d:b1:77:
44:94:82:98:b0:47:6e:ea:5b:5f:44:34:f8:1c:3f:
30:5c:9e:8d:92:a8:0b:e4:8f:db:d8:6d:6c:7d:6e:
5d:ba:84:62:69:eb:f6:b4:af:2f:4d:db:d6:83:8a:
ca:ab:1a:57:49:e2:2d:4f:c3:27:2d:f4:fa:94:0c:
39:33:4d:d4:e7:52:42:de:99:ee:19:30:48:b6:b5:
98:96:a9:d1:f6:b8:93:26:82:c7:58:b4:6f:1e:87:
f9:c9:34:8a:35:90:6a:c4:82:b5:dc:f2:1a:21:ba:
e6:fe:61:a0:5d:e3:2e:48:cd:05:2a:9f:77:56:10:
43:75:06:25:a5:47:4d:9d:1f:36:fe:25:1e:e6:31:
f7:10:fb:34:b4:78:6b:84:f8:97:64:05:e1:d9:1c:
99:99:8f:cd:b0:cf:e5:90:07:35:d3:f0:09:27:7a:
b0:05:e3:19:c3:d6:f0:2a:76:23:4b:c5:11:ca:d2:
54:30:58:41:78:b9:d3:30:94:c4:74:50:5a:1a:cc:
5c:35:aa:07:15:10:68:c4:5f:b6:70:62:e8:40:e3:
a8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:36:E8:07:39:E7:F3:A9:F4:CD:3A:F3:80:DE:29:31:9A:AA:86:DD
X509v3 Authority Key Identifier:
keyid:23:95:72:DD:FC:AB:62:91:E6:41:0C:CD:4E:86:0E:E3:60:00:E6:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5Vy3fyrYpHmQQzNToYO42AA5mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1d7f08-e77c-4338-9a39-8e19c0db86c2/1/I5Vy3fyrYpHmQQzNToYO42AA5mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:93:b2:0e:0d:76:6c:68:b1:7e:a8:9c:50:ef:93:39:44:f3:
da:51:f0:95:c6:58:0f:5e:9d:e1:f9:f4:8f:26:39:cd:66:f1:
02:e3:dc:2b:9a:ae:f4:d5:35:cb:57:71:bb:6a:1b:68:62:d7:
3c:49:24:88:df:10:97:ad:85:80:31:09:56:19:55:31:d8:02:
ae:7e:c1:28:f6:8f:0d:5c:ca:01:0c:85:af:e8:b3:09:f1:01:
32:0c:bd:5b:cb:62:3c:0f:06:d9:93:1f:1c:b1:d9:e3:8c:1a:
9c:92:6f:b9:20:ef:4e:76:31:24:1d:f3:ab:92:70:0f:42:29:
75:c4:81:3f:4a:e1:70:69:d8:12:4d:c7:d5:79:82:7b:5e:37:
d4:34:0d:29:ff:05:23:b0:03:54:5c:9f:82:f3:fa:c7:76:8e:
d9:63:03:80:4a:1b:0b:32:b8:d5:c3:cf:0e:e5:52:bc:c2:d4:
35:63:3b:c1:ad:bb:60:6e:91:73:2a:e2:ae:0b:11:3c:3c:87:
b3:20:f4:8e:7e:58:e4:6f:d1:c4:68:7e:5d:99:06:01:b9:1f:
3e:86:f1:4a:fa:4d:e0:6d:95:48:f1:d2:a7:33:85:65:85:8e:
88:f0:4f:2a:fe:cc:44:13:5c:0b:79:c9:43:c8:14:22:71:ae:
70:d0:5e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:58 2025 by rpki-client