Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
File: IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft (raw, json)
Hash identifier: P7GNrelCKQhpUSy5i1YWixCwGIzoAkdKTtGxbUQ/V5w=
Subject key identifier: 8C:42:A6:BB:3B:48:B8:5B:60:17:6D:D1:12:C8:0F:89:CD:DB:41:D9
Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
Certificate issuer: /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Certificate serial: 0198D5F1613E15FF17ACA24A6B86EB0E3B57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
Manifest number: 13BB
Signing time: Sat 23 Aug 2025 08:00:22 +0000
Manifest this update: Sat 23 Aug 2025 08:00:22 +0000
Manifest next update: Sun 24 Aug 2025 08:00:22 +0000
Files and hashes: 1: IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl (hash: KeAuJkqfe6NUQMafDgvy4lL2TfyxxycXhvTLQFS/5i0=)
2: Tj1VT7s8ilnWaRH5FDEx4ErgOfw.roa (hash: EAnVAxYXeZnLn3O7V7JRGZpaiw9YJLofd+adf3s7hWw=)
3: z8gJT3mWJvoCjNtGavez3w-sptI.roa (hash: rAtA37xRZ8BRiEnR3BviWDsE+vEFga17zSGIolCXdPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:61:3e:15:ff:17:ac:a2:4a:6b:86:eb:0e:3b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Validity
Not Before: Aug 23 08:00:22 2025 GMT
Not After : Aug 24 08:00:22 2025 GMT
Subject: CN=8c42a6bb3b48b85b60176dd112c80f89cddb41d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:45:e8:dd:19:e9:5f:23:43:25:41:d8:bf:95:
68:ef:fc:64:52:5a:cd:e4:6b:5d:6a:61:49:ea:e0:
9d:5b:48:9e:f8:9d:12:73:d7:da:e4:d9:1d:d4:ca:
21:14:08:64:3b:af:41:de:1f:c9:dd:94:8e:70:cb:
90:5f:2a:e9:df:e8:67:62:53:cf:ae:82:3c:1c:69:
c2:63:58:32:b7:41:79:a1:30:94:45:ce:91:2c:ce:
2f:3b:26:e1:46:0d:6b:b8:de:dd:82:b5:59:45:30:
2f:11:13:d3:1c:ca:0f:a3:c6:f1:6b:06:a3:6f:40:
37:73:6f:c4:52:fc:c9:e3:ad:f9:37:98:82:ad:59:
2f:2b:08:de:79:7d:e6:ad:80:03:4d:00:c1:0a:a0:
ed:be:ed:84:a5:68:52:8b:08:79:01:d9:3a:8a:8c:
96:4b:ee:41:f1:22:a9:24:f0:bb:6a:5f:18:3a:4b:
48:14:08:d3:e5:d2:b9:7e:fb:c3:8a:21:69:c6:dd:
0e:87:06:64:5c:f3:9b:8b:a5:50:9c:a0:79:3e:56:
4a:d4:52:04:29:89:df:cd:2b:e6:63:3f:31:4c:a1:
e2:8e:55:76:84:08:9e:82:b8:6e:6e:50:b7:b8:9a:
10:a1:e3:bd:e3:e7:a5:31:10:35:16:1f:bd:6a:38:
f3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:42:A6:BB:3B:48:B8:5B:60:17:6D:D1:12:C8:0F:89:CD:DB:41:D9
X509v3 Authority Key Identifier:
keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:be:0a:4a:78:08:b4:df:c2:da:6e:09:1e:1b:a0:97:9a:ef:
bc:89:90:5f:2a:8c:34:56:68:1c:bb:e5:81:74:5c:2b:0c:44:
fa:87:7b:07:e6:94:48:80:2f:b7:9c:57:5a:33:77:56:a2:dc:
d1:28:5f:cc:36:a2:f8:c1:ac:59:dd:32:5e:76:a0:ad:0a:9d:
96:eb:26:e7:da:d4:6a:7c:ac:c6:4d:64:ae:1b:f4:5c:34:07:
ff:28:97:3e:ce:ee:3d:57:10:47:00:5a:9f:81:af:29:dc:9a:
bb:02:23:58:44:3a:e6:09:9e:30:cc:91:ba:f4:e5:6d:7a:a8:
22:58:b2:7d:49:4c:1f:b1:53:50:f7:78:0d:12:47:7a:89:7c:
a4:03:04:6b:17:c1:f4:20:87:09:1b:e9:cb:2a:04:68:fa:87:
7e:5f:13:cb:01:b8:7f:af:f3:aa:71:b7:6d:68:ba:4f:97:9f:
8b:e8:d5:1c:10:18:33:4d:e5:eb:a6:04:13:5f:bf:6a:c7:91:
7a:a9:03:85:b5:fd:0d:28:a1:a0:b9:3f:f0:0a:07:6c:c4:79:
49:ad:6b:0e:0b:1d:a0:7e:a4:3f:73:84:11:d9:ca:9f:0f:00:
11:bf:09:6f:9b:e7:af:e4:cd:ff:86:76:85:3a:02:c9:96:61:
48:0d:52:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:53:24 2025 by rpki-client