Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
File: i3P4NzXIqxCgqNROFwEo8COEbnk.mft (raw, json)
Hash identifier: c4VJByRWcXuiOuf8PknnhcGWueGf/NgSs47nAdIQ4FI=
Subject key identifier: 56:86:9D:95:83:DF:50:86:61:8B:71:1F:C7:4E:83:AB:FA:FF:4B:D1
Authority key identifier: 8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
Certificate issuer: /CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Certificate serial: 01984AE5F1F9ABB9EC25D6BF2D4E47685249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
Manifest number: 04C5
Signing time: Sun 27 Jul 2025 08:00:40 +0000
Manifest this update: Sun 27 Jul 2025 08:00:40 +0000
Manifest next update: Mon 28 Jul 2025 08:00:40 +0000
Files and hashes: 1: L3ocwI9skWdmpza9Qr_soDnI5iA.roa (hash: 9lUp3ywFYQ08BYq4aJkqYCgUsr8TmtCB3L7KRcDWSOM=)
2: i3P4NzXIqxCgqNROFwEo8COEbnk.crl (hash: OArBCjiA3yGj8dfGM/pq4jjdjzDk/DpgnlZt7a2WoYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:f1:f9:ab:b9:ec:25:d6:bf:2d:4e:47:68:52:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Validity
Not Before: Jul 27 08:00:40 2025 GMT
Not After : Jul 28 08:00:40 2025 GMT
Subject: CN=56869d9583df5086618b711fc74e83abfaff4bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a4:af:f3:ed:2c:3e:1c:b2:0b:79:f0:f3:e3:
80:46:8a:b5:4e:4f:35:a8:59:bf:02:a1:a1:4a:83:
c5:22:c1:c5:e6:8d:5d:25:cc:1c:8b:d5:64:91:d8:
42:fb:f7:c0:2f:38:11:03:b5:be:f0:3b:d5:8d:b3:
32:e1:b0:2d:fc:da:76:84:e9:97:7e:7a:95:d6:2c:
57:aa:cf:38:7d:a6:a3:73:28:64:44:53:5d:38:64:
d4:47:d3:51:fc:7f:52:1c:a3:9a:1c:39:83:97:a1:
1a:6c:d8:42:d3:a1:0e:13:cb:95:1e:d2:fd:2c:91:
42:84:5f:be:bf:e8:da:13:c4:75:3d:36:9c:fd:27:
8b:29:4b:31:94:fe:52:29:55:f5:8d:be:2e:a3:b0:
e6:90:d4:3a:21:5b:a4:0d:f6:c1:ca:1e:30:77:8b:
b7:d2:3e:db:c7:37:0f:ee:20:2e:9b:6c:b9:ab:49:
cb:25:32:f8:d5:29:cb:39:f5:0b:39:54:c5:8f:67:
38:de:59:dc:77:6a:46:3f:f4:f5:51:a6:a1:cd:f0:
96:5d:c1:6c:b8:a6:b1:e6:df:24:f7:d7:93:6c:33:
17:51:84:31:85:24:ce:a5:49:c2:ca:e4:f3:69:c3:
a7:7c:ef:f3:42:d0:7a:15:51:2f:de:32:87:48:45:
11:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:86:9D:95:83:DF:50:86:61:8B:71:1F:C7:4E:83:AB:FA:FF:4B:D1
X509v3 Authority Key Identifier:
keyid:8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:fc:05:2a:64:3c:d0:a8:20:df:8b:c6:3f:d4:c5:4d:b3:5b:
b2:a1:fb:e8:47:2a:f5:27:7a:7d:a5:46:8c:ff:ad:49:5f:e9:
7b:14:b4:38:e8:c8:37:46:a8:d2:c6:0b:b1:f7:1b:a2:10:dd:
44:19:8b:a8:79:17:05:b4:df:c0:02:ae:df:82:7e:7e:75:94:
3e:06:71:ad:80:83:12:85:dd:e7:15:ab:51:b1:34:ba:1a:bb:
af:b8:26:94:16:fd:04:d2:ff:5d:85:66:b4:62:36:95:c9:87:
b0:79:7e:f8:21:c2:db:b8:7d:4f:78:da:3d:99:96:8a:d2:15:
0a:a7:fc:30:4f:a2:a9:d8:95:ec:ef:d3:e1:76:e7:94:27:45:
c1:00:ac:bb:9a:7b:a8:6f:9d:64:d3:15:fe:dc:fc:74:45:23:
3d:e9:31:52:04:35:59:7c:0a:11:41:a6:72:99:57:32:ac:c0:
78:4d:11:51:11:98:ee:72:6d:7a:03:0b:94:74:cc:98:78:72:
e3:25:41:50:14:97:91:6a:52:59:0e:91:9e:30:95:4b:42:d6:
24:75:f7:f5:82:70:84:0a:59:c9:fb:91:b5:ae:94:93:d8:5b:
1a:0e:76:21:d0:2a:5f:56:eb:4d:67:82:33:60:4a:8f:69:4c:
13:a2:79:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:02:45 2025 by rpki-client