Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
File: I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft (raw, json)
Hash identifier: X0pkaX85AC1YxAblw51JzQ0jrsO8u+CPkENOWQaAhRY=
Subject key identifier: 0F:49:05:C1:91:EB:18:EF:B4:31:33:9D:4E:D8:CF:2D:45:53:E6:0A
Authority key identifier: 23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
Certificate issuer: /CN=23607105955c764a813fd9524a7e41b940c56832
Certificate serial: 0198D515894A96DBD18AAA7651A8C2E7D5A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
Manifest number: 024C
Signing time: Sat 23 Aug 2025 04:00:15 +0000
Manifest this update: Sat 23 Aug 2025 04:00:15 +0000
Manifest next update: Sun 24 Aug 2025 04:00:15 +0000
Files and hashes: 1: I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl (hash: 1NsdpmG7XGBsQ17BLPGpBB0g5HSDZL/oGggBzfN120M=)
2: pL8DPUuY6V_LTawy1OdUwrIg01c.roa (hash: yxyfBx5vs5Lhayo07nTfHgtEaPhrWIe0WeuncjCeyYo=)
3: rPtueqwAgjU2IUHv5A02J4kLlys.roa (hash: vDBPmEjKrFXU2lnK2ZWnREJRhpJ1uOnxEsPQx6QBwFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:89:4a:96:db:d1:8a:aa:76:51:a8:c2:e7:d5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23607105955c764a813fd9524a7e41b940c56832
Validity
Not Before: Aug 23 04:00:15 2025 GMT
Not After : Aug 24 04:00:15 2025 GMT
Subject: CN=0f4905c191eb18efb431339d4ed8cf2d4553e60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:ce:db:1c:ab:2d:4f:0b:a2:8f:32:c5:ae:
a7:df:78:73:58:0d:b0:17:5c:5d:56:53:9a:da:28:
f6:cb:6c:39:b6:55:d7:30:f0:2e:57:8c:0b:5b:0a:
f0:0f:42:8a:48:73:3d:f2:f8:e4:6b:a9:76:13:73:
71:e8:7d:10:3e:6a:8f:a0:8e:14:c0:91:d5:d7:37:
e4:d9:93:26:2e:66:12:db:a0:75:be:8d:cf:37:b7:
d5:6e:0b:f0:74:18:19:71:1b:e6:08:76:9c:8a:c5:
2e:e8:e4:ff:02:d3:59:a8:b0:ae:2f:0b:91:68:6f:
79:c6:71:7d:89:04:d7:a9:06:2d:aa:0d:2e:b2:6d:
ab:1e:31:bf:fb:ea:16:c6:5a:51:bc:c7:ab:60:80:
5f:6b:c7:d6:6b:79:dd:0a:8b:29:7f:07:9a:68:ac:
b5:61:8f:68:e2:4a:6c:86:1c:5a:fb:7f:d6:4f:9a:
18:b7:89:b5:d8:c1:6f:af:59:64:09:05:c3:81:5c:
bf:4b:ce:41:01:e8:f0:19:b9:53:e8:a5:08:24:6d:
4a:b9:65:a7:92:80:b3:b6:f3:5b:8d:3d:54:78:1b:
3f:ad:e7:54:44:d9:45:f2:a2:c6:56:2a:f0:af:8e:
b5:a2:30:55:ae:d3:22:65:bc:66:1e:50:da:1a:15:
3f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:49:05:C1:91:EB:18:EF:B4:31:33:9D:4E:D8:CF:2D:45:53:E6:0A
X509v3 Authority Key Identifier:
keyid:23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e9:b9:a7:3d:fd:cb:40:50:fc:2e:30:bb:bd:ab:11:11:13:
f3:42:f4:7f:01:71:78:ac:bc:38:a9:48:74:7f:a6:af:91:d7:
f9:37:3e:af:a4:bb:fe:5d:74:1d:e4:e7:a0:fe:5b:47:4e:1b:
73:01:ca:3e:ed:03:13:8a:1f:d8:f0:12:14:3b:bd:f1:ae:4a:
74:7c:24:64:31:27:fd:7a:16:0e:1d:e0:07:ba:5c:2d:e2:50:
e2:9f:54:af:3e:5c:20:ac:91:45:29:95:b1:6f:b4:b5:af:8b:
62:26:22:23:a3:7f:63:ac:1b:78:2a:fd:84:21:55:67:55:9e:
d0:2a:be:39:7d:81:d4:c0:58:fd:50:8b:5b:15:90:4a:83:ac:
55:88:87:93:38:e6:e9:56:30:da:99:14:f7:c6:72:cd:18:64:
89:64:66:c2:71:6f:39:e3:e4:dc:92:f4:96:01:99:64:03:94:
4c:ef:77:08:a5:46:ff:6f:61:52:a9:62:c3:6f:26:76:0f:de:
fb:22:9d:61:5a:a6:db:78:cb:02:7a:5a:e8:36:7a:65:db:f6:
67:1d:4d:1a:7d:ed:30:01:9e:8c:c7:ec:89:a8:e8:05:04:3f:
34:3e:04:5b:2d:ea:81:e2:e8:7a:bb:db:0e:d4:3d:a7:d0:1b:
b3:25:cc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:43 2025 by rpki-client