Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
File: I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft (raw, json)
Hash identifier: Y74FRo6FU1x9YS+QLxMQwZPLWiGQwgAU1tE32ZnFo1M=
Subject key identifier: 7A:92:53:97:6E:E2:F9:31:BD:DC:EB:B4:67:44:E5:8D:EC:D7:0A:AB
Authority key identifier: 23:51:63:D3:9D:B8:88:16:CD:DC:59:7A:5D:B5:EA:E7:07:D3:DE:39
Certificate issuer: /CN=235163d39db88816cddc597a5db5eae707d3de39
Certificate serial: 0198D4A85286E32733C4495D4349F947FDEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 02:00:57 +0000
Manifest this update: Sat 23 Aug 2025 02:00:57 +0000
Manifest next update: Sun 24 Aug 2025 02:00:57 +0000
Files and hashes: 1: 0w9FBc0vTYSPsjAWKJJCnffXw-k.roa (hash: jLDk0IcPs8Pb9A807RQu6H+l6FnV9GFyw8DjOzzYbaA=)
2: I1Fj0524iBbN3Fl6XbXq5wfT3jk.crl (hash: 9C/Wn3tuEFL9vQf6u5/ErnmUzdW4+1xW+FYVrFQ65kE=)
3: gKeAQqo6LHoqnf4Vl-8HYj5MieI.roa (hash: SOGNQLrBgWGkjZGYc/wKjLGsnvGnOrdebSHsTRsYQCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:52:86:e3:27:33:c4:49:5d:43:49:f9:47:fd:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=235163d39db88816cddc597a5db5eae707d3de39
Validity
Not Before: Aug 23 02:00:57 2025 GMT
Not After : Aug 24 02:00:57 2025 GMT
Subject: CN=7a9253976ee2f931bddcebb46744e58decd70aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dc:e4:69:7c:3f:de:fc:05:f2:e9:f3:19:b3:
39:40:e1:04:32:26:6a:ef:f3:19:0d:e2:e9:cd:e1:
7d:de:68:fe:3c:c8:1a:b4:be:bb:51:d9:fc:6f:9c:
2c:9a:69:be:68:59:e2:7a:42:98:0b:cd:d5:dd:94:
31:76:51:0f:fe:b5:d8:4e:54:e3:e2:09:4d:62:38:
9c:ed:09:da:e6:e8:2c:56:37:d4:27:2d:d4:03:e9:
0c:6f:5d:f3:57:65:4b:08:5d:0a:9f:51:ee:ef:d3:
f8:83:4b:1a:39:4a:f7:ab:06:22:7c:90:59:1d:d5:
50:27:af:45:5f:19:20:39:45:fa:d7:ce:b0:c4:67:
06:b9:76:c3:ed:54:7c:bd:bf:a2:41:93:25:f9:5a:
cc:e6:5e:21:fd:49:8f:3e:44:77:ce:99:66:2b:67:
8d:7c:c8:ef:07:6e:9d:39:79:79:74:d0:db:a7:00:
25:29:c1:25:88:f7:48:82:49:f6:0d:3a:3d:2d:56:
9a:41:f3:99:fc:3c:b5:d7:46:89:68:cf:71:e1:f6:
dc:8d:37:63:40:f9:f2:b6:1c:90:4a:ef:43:ab:94:
db:43:e8:93:a6:b8:da:1d:5d:44:93:9f:be:db:45:
ce:9c:a2:6b:ae:ba:44:2a:e2:4b:25:2d:69:8f:10:
95:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:92:53:97:6E:E2:F9:31:BD:DC:EB:B4:67:44:E5:8D:EC:D7:0A:AB
X509v3 Authority Key Identifier:
keyid:23:51:63:D3:9D:B8:88:16:CD:DC:59:7A:5D:B5:EA:E7:07:D3:DE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0c:0d:e2:83:ee:67:6e:a1:ed:f5:ed:98:1f:13:57:78:d0:
6f:d8:71:c4:d5:99:3b:10:fe:1e:c3:a3:31:8b:4a:e9:1e:ce:
4b:5d:a7:ba:06:0a:33:ff:e1:88:ce:ed:72:ca:af:c5:1d:eb:
d0:43:3a:ce:f7:bf:cc:f9:23:d8:32:c5:ee:b4:bf:11:2d:cb:
66:80:34:57:01:bb:9d:06:07:f2:01:cd:59:b8:38:78:74:45:
7f:91:4c:40:04:17:19:0b:93:83:25:4b:6d:54:f6:c6:64:66:
1e:7f:18:92:2d:8b:9a:83:06:65:c7:c6:1a:3c:9b:93:67:c5:
42:a4:0e:e4:b0:2c:01:15:05:1d:54:4c:6a:2b:41:40:c4:e5:
c4:d5:79:40:bf:66:2a:b3:33:7e:24:80:22:71:88:5b:33:e6:
d0:61:2b:95:2e:a6:d9:00:87:ac:8e:7d:72:eb:6d:ea:36:d1:
fe:5e:0b:90:2b:6c:97:dd:5e:ea:45:bd:2a:8b:9f:38:5f:aa:
07:13:7d:bb:a9:ee:d2:e6:a7:d2:af:f7:b8:6e:44:f9:bf:6c:
81:f8:be:3e:fe:e7:6b:cb:a9:4d:5e:c4:33:ce:c9:a8:b7:dd:
27:cb:f4:56:9b:53:72:ca:6b:d6:83:fb:8e:0f:69:5a:ab:d4:
1c:80:a1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:23 2025 by rpki-client