Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
File: i7dzgYUSSQpQCthD6irnF-8hsUw.mft (raw, json)
Hash identifier: rUsDNPU/uT/dsHQKvcKV6YedeJ2BdBj5m+vcDS3aThA=
Subject key identifier: 92:15:0B:4A:3F:D8:96:06:67:6F:AF:09:58:7B:1F:ED:90:8B:ED:CC
Authority key identifier: 8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C
Certificate issuer: /CN=8bb773818512490a500ad843ea2ae717ef21b14c
Certificate serial: 0198D660EBC0780FF74F6B022CE199954CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:02:12 +0000
Manifest this update: Sat 23 Aug 2025 10:02:12 +0000
Manifest next update: Sun 24 Aug 2025 10:02:12 +0000
Files and hashes: 1: L6BmwALeicC8VgFsadJhZLZOhdw.roa (hash: jlbIuI51ox4C1wny8/EXm0XGuTxyG7RmZ5JEvI5tNCo=)
2: i7dzgYUSSQpQCthD6irnF-8hsUw.crl (hash: 8r9DZTpP2N4pIWP4nMivVnH4ZyZOTFEstIt6q2T7Qt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:eb:c0:78:0f:f7:4f:6b:02:2c:e1:99:95:4c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb773818512490a500ad843ea2ae717ef21b14c
Validity
Not Before: Aug 23 10:02:12 2025 GMT
Not After : Aug 24 10:02:12 2025 GMT
Subject: CN=92150b4a3fd89606676faf09587b1fed908bedcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9e:8a:1b:29:11:15:4c:e8:4c:a4:4f:58:0d:
11:40:31:ee:e3:24:ff:c6:b5:ba:9b:5e:2a:29:f3:
48:90:97:fa:b9:da:fa:6f:e1:4a:73:c4:28:14:4b:
8b:6c:c6:9b:32:5e:55:1b:d8:c8:4e:0e:40:ee:4f:
fd:4c:2a:c9:30:01:45:e6:2b:44:fb:0c:7f:86:b9:
6f:21:42:7f:96:24:ed:6a:8a:c9:24:cb:66:6a:1c:
90:ce:cc:40:e8:b7:26:7d:88:e4:38:28:89:f0:a3:
ee:04:c3:27:5e:a4:a9:09:31:dd:7e:8d:af:b5:69:
b3:c6:4d:01:22:7e:01:e9:95:b3:63:0a:63:0d:4f:
8d:2e:5b:7a:21:70:5c:b1:b0:17:7e:72:66:1c:34:
0d:e4:47:45:0c:71:9f:e0:15:ff:14:41:8d:f8:18:
e7:76:0b:79:95:4e:d5:e1:7b:a4:87:01:bb:1c:48:
f5:75:42:96:06:94:f4:b1:71:e0:2a:22:ab:49:95:
66:05:5e:0f:49:6e:7c:fa:64:a8:5b:18:ce:ff:0a:
54:7f:0c:c7:8f:e6:ca:d0:ce:9f:7a:b6:5f:5f:01:
fd:f2:99:0d:f1:87:d2:47:35:44:a2:3b:7b:8b:c6:
f8:92:5b:77:79:0e:24:1f:14:6d:c9:5a:8a:52:e3:
6d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:15:0B:4A:3F:D8:96:06:67:6F:AF:09:58:7B:1F:ED:90:8B:ED:CC
X509v3 Authority Key Identifier:
keyid:8B:B7:73:81:85:12:49:0A:50:0A:D8:43:EA:2A:E7:17:EF:21:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7dzgYUSSQpQCthD6irnF-8hsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ded6c-b469-420c-b15e-52b3f68dc0c2/1/i7dzgYUSSQpQCthD6irnF-8hsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:5f:bb:03:1a:76:70:2f:b3:61:ad:1b:29:38:4a:c2:48:4f:
91:18:78:d8:5c:f2:cf:9e:31:9a:4b:bd:eb:13:8d:7a:a9:47:
3d:20:cb:2b:67:2b:70:25:4d:fe:86:89:9e:8f:1d:cd:b0:f5:
47:38:79:b6:29:56:17:aa:56:41:02:f6:b2:6d:84:ac:0f:cc:
f9:ad:72:1a:48:6b:41:51:7e:11:ab:9b:c1:3a:42:32:2c:7f:
c8:ae:0f:91:31:b3:3d:9b:12:33:42:13:12:1f:da:df:2e:79:
c3:4f:f7:43:d8:5a:79:a5:f0:9b:c0:9a:3f:df:f7:21:b4:d6:
32:b7:19:f9:02:c5:dd:e1:34:43:5f:34:6b:23:61:1e:9f:0d:
b6:a7:28:cc:7b:24:ed:59:04:8f:db:68:49:5e:ea:a0:46:b5:
96:ad:6e:6e:ac:32:21:7e:2c:e3:d6:cd:ac:e3:47:91:d0:0f:
56:1a:51:ef:55:05:16:77:a8:64:0f:81:d5:8c:a6:ca:82:82:
48:f0:d9:23:00:20:a7:81:0b:88:13:a5:5f:66:39:0e:18:2d:
4d:56:38:79:dc:eb:91:a1:16:51:26:3c:2f:ae:ca:fb:a4:c7:
45:5e:29:32:5b:70:32:2d:2c:11:5f:e9:cc:79:d0:fa:45:38:
53:c6:cc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:59 2025 by rpki-client