Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
File: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft (raw, json)
Hash identifier: U6qRlTmCr0oNJDGspMzHJPib8EA/y40c+3yw74aZHY0=
Subject key identifier: 22:4D:88:DF:75:AB:64:6F:78:68:2A:5D:15:54:6A:7C:41:02:10:AE
Authority key identifier: D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
Certificate issuer: /CN=d422367433765b541a37390a998997b737c46472
Certificate serial: 0198D5839F39DC26286C4CF891753F7F49D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 06:00:29 +0000
Manifest this update: Sat 23 Aug 2025 06:00:29 +0000
Manifest next update: Sun 24 Aug 2025 06:00:29 +0000
Files and hashes: 1: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl (hash: niP1ZJJRk3DdWkzuUIizBOZ0bO1N8blu8kC7DADuTQA=)
2: dO1sDlUm4GNT1NLwZmfUYJ1pPqA.roa (hash: JWs3QU5N8u442ANJ16//ujHqSWgzP2/558mG+17RvNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:9f:39:dc:26:28:6c:4c:f8:91:75:3f:7f:49:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d422367433765b541a37390a998997b737c46472
Validity
Not Before: Aug 23 06:00:29 2025 GMT
Not After : Aug 24 06:00:29 2025 GMT
Subject: CN=224d88df75ab646f78682a5d15546a7c410210ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:88:63:95:90:f5:0c:13:29:37:49:10:df:
91:d9:6f:4c:75:26:e7:f4:44:22:15:d8:7c:6c:b9:
e3:a7:bc:94:b6:8f:50:38:c9:4d:29:f8:ff:5c:fd:
f3:8f:94:34:b9:e6:e7:9b:4a:66:10:1f:5c:eb:27:
02:75:00:8a:e6:9b:5f:5c:73:6c:f9:57:0a:16:42:
27:01:39:2d:4c:2f:5b:b4:65:5e:d1:aa:9e:aa:ea:
d6:f5:55:9e:06:69:ba:79:83:eb:9b:77:24:51:70:
ca:07:70:21:d8:c3:cf:07:39:28:f6:36:ce:39:bb:
53:ff:fa:71:52:c5:eb:d0:63:c0:a5:a0:58:7d:02:
cb:87:91:a2:a0:00:11:9c:1d:63:4c:06:ea:ae:6d:
f1:a5:87:34:c7:0d:76:9e:4c:b6:a0:3d:46:17:04:
1a:88:8b:fb:d2:44:fe:5c:44:f5:e3:f0:58:d0:f8:
fc:6b:ee:fb:8f:e7:f8:46:9a:61:6f:1f:14:65:89:
b4:5e:b6:1f:f9:8a:6d:61:6f:1d:df:3a:c9:1e:8a:
5c:9f:08:b8:51:6b:eb:4c:3f:41:40:50:b3:c6:6f:
1a:8d:5c:82:a4:2c:2b:13:79:a5:3c:04:ba:79:cf:
fe:6f:c4:16:6f:0d:7d:06:16:2a:9b:1a:de:0d:ab:
57:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4D:88:DF:75:AB:64:6F:78:68:2A:5D:15:54:6A:7C:41:02:10:AE
X509v3 Authority Key Identifier:
keyid:D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f5:f8:a7:84:b6:13:ca:cb:0c:2b:5e:56:82:2d:ec:77:44:
8a:28:51:db:33:54:20:2a:3c:70:a4:58:e0:c3:3d:4d:49:30:
a2:36:b9:ce:3f:a0:55:ac:2a:94:c7:e3:b9:f8:cc:7a:17:14:
a7:8f:d4:71:f1:9d:83:d2:24:08:92:73:21:28:2a:82:84:02:
bd:77:06:4c:d9:ce:c1:12:64:43:71:ec:a5:91:92:be:77:ff:
1b:dc:fd:6f:b4:d2:d4:b9:3f:78:00:e6:f0:94:4a:a5:14:4e:
00:4c:9f:d6:38:5f:24:7b:6d:e9:18:e7:a7:e6:f3:40:87:c1:
14:c9:a7:c7:ab:fc:85:37:3b:54:9f:68:a2:38:27:4a:0f:66:
e6:6a:bf:bc:15:13:5d:74:dc:c1:0e:6c:50:e1:c4:8f:73:5e:
39:a8:08:16:c9:bc:07:be:76:da:d4:bc:3f:b3:50:f4:35:8c:
38:ac:2e:ae:44:bc:e1:de:31:a0:8d:81:a7:da:80:b3:30:e3:
89:6b:5e:da:c8:b4:b0:24:94:34:ab:7e:2c:07:21:22:f4:d3:
39:c6:f0:44:9e:be:2f:d6:df:b7:90:3c:e7:32:31:8a:0b:ca:
4b:12:a3:0c:cf:72:62:72:dc:a6:3d:58:d7:64:c4:40:9d:68:
70:73:8b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:01:59 2025 by rpki-client