Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
File: i5zFfKhHI67ChBFF9vfTAb3zW6w.mft (raw, json)
Hash identifier: ZZeTJ8ie0/vikZSl/8zcpsrkOQDC0Ie86ov/3NxlLuY=
Subject key identifier: 2C:67:CE:3D:6F:63:40:9B:C4:AD:88:11:74:C0:DD:16:48:7A:AE:98
Authority key identifier: 8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
Certificate issuer: /CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Certificate serial: 0198D583D00F4091EFC1DC8E09389606B018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
Manifest number: 0478
Signing time: Sat 23 Aug 2025 06:00:42 +0000
Manifest this update: Sat 23 Aug 2025 06:00:42 +0000
Manifest next update: Sun 24 Aug 2025 06:00:42 +0000
Files and hashes: 1: i5zFfKhHI67ChBFF9vfTAb3zW6w.crl (hash: k1IflqiK3yCMe0M76xk47J5BAxA0abcIf3l49JRV2RY=)
2: tCW9fwISpjkcZibIaKBsjXs7N7A.roa (hash: NwxiC6aogmrL5itM5Y4be2nBp9O9LLOH8w2QrDP5u38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:d0:0f:40:91:ef:c1:dc:8e:09:38:96:06:b0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Validity
Not Before: Aug 23 06:00:42 2025 GMT
Not After : Aug 24 06:00:42 2025 GMT
Subject: CN=2c67ce3d6f63409bc4ad881174c0dd16487aae98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:69:fd:f6:0e:65:12:78:95:9f:5b:88:ba:4e:
5e:a6:95:66:9b:5c:cb:c9:1b:f7:9a:c1:44:ba:79:
1a:89:79:cb:73:14:3c:0b:91:de:31:c7:16:da:9b:
f3:25:7f:7c:a2:80:b9:dc:f5:b1:1b:9f:b0:aa:97:
7b:c4:c6:da:8a:2b:ab:9f:a1:71:b2:31:81:d1:8d:
ea:9c:80:c1:8c:e4:eb:6f:62:58:37:6a:89:3a:ba:
3b:34:45:c5:37:83:94:5f:de:7f:1a:c7:35:90:dc:
d5:0f:b9:b3:ff:57:3f:76:c2:49:83:c5:ab:c7:76:
2d:98:d2:53:85:99:24:aa:d6:ac:1c:fc:83:ad:3d:
69:63:e7:84:40:0a:d1:ac:a2:d7:1d:32:fa:fc:1d:
9e:ab:30:40:4a:3d:0c:9b:0f:ad:a5:87:bf:53:95:
2c:43:7c:ce:1a:4d:6c:58:95:e8:28:7a:51:c1:ec:
14:67:6d:5c:1c:19:b3:7a:68:76:33:20:7d:03:c4:
07:23:ff:d1:e0:8e:83:3d:9e:5c:9a:d3:46:9a:7f:
fe:de:0a:1d:57:c4:12:25:3b:76:d6:54:23:9e:28:
49:d6:e6:c9:66:24:1c:d0:ad:2b:ba:4f:dc:da:5c:
48:b8:f7:6c:9a:0b:0a:da:07:8a:f0:97:7b:4c:ae:
57:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:67:CE:3D:6F:63:40:9B:C4:AD:88:11:74:C0:DD:16:48:7A:AE:98
X509v3 Authority Key Identifier:
keyid:8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e6:ad:d3:1b:b4:5e:98:14:ab:08:1e:23:75:16:aa:51:08:
c9:7c:34:f0:cf:45:1d:68:fc:cd:bd:0e:5f:b6:41:67:a7:40:
61:ea:ac:07:b4:08:77:7f:24:a1:f6:ea:d8:c3:b1:4d:55:d7:
cb:e5:a8:67:c0:b7:de:79:69:6f:98:d8:fc:b3:8c:6f:52:94:
63:e0:cb:3c:d3:88:b2:2f:c1:99:25:fc:99:e2:61:a6:75:4a:
1d:cb:24:94:94:7e:19:2d:b9:06:30:db:4a:dc:8c:94:8a:05:
22:23:9d:cd:44:20:0d:d6:24:ba:85:e3:1c:35:40:f4:e7:62:
0a:55:27:6a:c2:0a:b8:ba:69:ee:1f:92:f3:5e:9f:77:be:e1:
5d:a5:d2:97:b3:f7:9f:d4:90:9b:48:15:10:cc:68:af:25:4b:
91:a2:5e:da:33:0b:fa:00:cc:1a:de:3e:a3:0a:83:6c:38:b4:
4b:72:e0:a1:0e:6e:2a:d6:31:3b:03:32:13:c9:73:0e:68:2d:
81:d2:8d:2b:a5:02:95:e5:62:9d:16:6d:b4:b7:85:01:e8:cb:
39:4b:5d:4b:94:c6:68:39:6a:ba:4f:33:6e:72:4c:af:f4:eb:
da:02:0a:7b:e0:36:4b:98:df:e3:3c:ca:f8:28:62:f7:fa:7e:
14:3f:80:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:12:05 2025 by rpki-client