Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
File: I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft (raw, json)
Hash identifier: 1S/5yDdtpRsGHW3jtTJCKseJgtTStxXK8vGVTujakPc=
Subject key identifier: 10:CF:AF:D7:37:5C:68:09:E4:DA:C5:39:F4:82:D4:11:7D:C4:C7:4B
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 0198D4E0B30FF307B874E9DD0283FCB61775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
Manifest number: 0A0F
Signing time: Sat 23 Aug 2025 03:02:32 +0000
Manifest this update: Sat 23 Aug 2025 03:02:32 +0000
Manifest next update: Sun 24 Aug 2025 03:02:32 +0000
Files and hashes: 1: FSsZO7tf2uyGI_GTm9rqM0qzwyo.roa (hash: +N02NDT8cxwi6khKovC14z/AE2KwVw5IVFU5XCAAiJs=)
2: I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl (hash: 54yK2QpL2fFcldLJyi9RooJvrpFQxzj1QY2u7QPLNyc=)
3: pGnzHT17oa6cGFgaKh_Mb1gg4HU.roa (hash: tnbr1e3XQydvlzjAP3o8eDkS1HDgrVPM/kErIEuP+f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:b3:0f:f3:07:b8:74:e9:dd:02:83:fc:b6:17:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Aug 23 03:02:32 2025 GMT
Not After : Aug 24 03:02:32 2025 GMT
Subject: CN=10cfafd7375c6809e4dac539f482d4117dc4c74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:20:e0:73:29:68:89:83:5b:47:f8:b0:36:
dc:84:ea:b1:74:3c:23:2c:2e:2c:db:dd:a1:fc:9b:
71:27:c7:fb:75:42:4d:47:b6:81:b8:c5:ff:a6:16:
66:80:48:3f:fb:09:fb:fe:aa:25:e9:21:e9:00:61:
f1:ce:5e:37:79:55:24:b1:31:e7:ee:ba:6e:10:5f:
20:a7:60:d1:fd:a5:f1:f4:f7:e2:7b:44:d2:78:8b:
46:91:b4:21:2d:ef:36:38:ee:19:6c:87:31:d4:ca:
8a:2e:2c:04:ca:18:33:f5:db:cb:d0:88:3b:8a:52:
51:2a:8d:ac:46:a1:7e:49:04:f6:75:fa:77:fe:26:
30:c8:72:b2:f8:f9:ba:5c:5f:63:13:8c:5b:f4:c7:
d3:82:21:37:27:d2:0c:6f:41:31:76:31:75:ae:9f:
1a:3c:bc:90:d2:e9:25:aa:f9:47:98:71:ef:dc:df:
3e:b3:00:38:56:f1:ec:da:b2:50:0b:28:bf:98:cf:
16:72:4d:ce:83:38:3a:bc:41:32:6e:e5:df:0b:b1:
be:3d:a9:70:d2:d3:4a:a8:ff:b8:d5:5f:22:fd:69:
fc:55:0b:46:a0:8d:6e:11:ef:df:b4:a4:67:2e:fa:
0a:31:c4:df:6d:72:0d:75:2f:02:79:ac:7b:c6:f9:
34:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CF:AF:D7:37:5C:68:09:E4:DA:C5:39:F4:82:D4:11:7D:C4:C7:4B
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:06:18:90:05:d4:6e:43:f1:d4:be:bb:5e:fc:0c:a0:9f:29:
1c:b7:14:19:a5:5c:94:d6:3e:46:8e:e0:a7:7e:c9:24:e6:ea:
6f:24:6a:ec:43:03:f9:a5:f2:49:43:90:03:f5:9d:6b:f1:99:
14:e6:a0:39:22:0c:44:00:67:fe:f1:ed:67:5d:d5:b1:c2:a6:
75:27:36:bf:f7:56:55:6c:a8:ba:6e:f8:6e:87:cd:9c:8d:d7:
64:41:2d:a1:a7:b0:e3:37:4d:86:9a:41:12:b1:f8:5f:97:90:
bf:fb:f5:96:52:fe:10:e8:53:ea:1e:2f:5d:34:b4:d8:42:28:
4d:4f:39:a4:ae:b5:50:47:ba:b2:e7:31:49:d4:f8:af:ac:32:
61:40:d9:c4:81:41:ac:d8:ae:fe:4a:f7:87:e1:55:75:8d:2d:
3a:6d:50:fc:ed:67:c6:60:83:2f:e6:9d:ea:56:d3:2f:b5:c4:
37:e8:f8:eb:88:9c:c2:28:c8:ff:41:00:78:c7:aa:52:74:50:
f1:3e:53:de:25:99:3f:52:2f:6a:a6:86:67:e4:23:d8:c0:ea:
b1:91:63:b7:5b:1d:1d:b0:ee:43:19:11:1c:fe:1d:cf:b9:cb:
31:e6:bb:d3:eb:67:c3:b5:40:6a:bc:87:f5:12:b5:0e:b4:a7:
d8:b8:9e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:25 2025 by rpki-client