Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
File: i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft (raw, json)
Hash identifier: CcBA0uxI428JpzzFiacJ1cbY6w2Z18fwBu8qn3k/bmM=
Subject key identifier: 9B:B9:C1:FD:BB:EA:48:58:18:4C:DA:79:30:DC:69:63:3B:4C:61:E7
Authority key identifier: 8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
Certificate issuer: /CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Certificate serial: 01984964F6A989436460C1B9CB163FFF61C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 01:00:10 +0000
Manifest this update: Sun 27 Jul 2025 01:00:10 +0000
Manifest next update: Mon 28 Jul 2025 01:00:10 +0000
Files and hashes: 1: FE1p8xqk22ZLL8TtVpBgIJ5HCYk.roa (hash: EEjSbBj9sFsFeIYvGJ66Mb2B5f9wjNh8P6NHIHv03o4=)
2: Nj_g5XagzgChnaGJmyAjIxliPxQ.roa (hash: 2T2yAo36kvnreO/zfmG7HDMPjTZHcC33NYqG6yteeqQ=)
3: i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl (hash: 3TZPZkc6XXmmkFYzCw/yUs0TQRBizkTOyi/1wHczU8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:64:f6:a9:89:43:64:60:c1:b9:cb:16:3f:ff:61:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Validity
Not Before: Jul 27 01:00:10 2025 GMT
Not After : Jul 28 01:00:10 2025 GMT
Subject: CN=9bb9c1fdbbea4858184cda7930dc69633b4c61e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:be:c8:02:28:6b:fb:b5:cd:14:ed:5f:61:
a0:bb:8e:ec:3b:dc:9e:53:20:af:c1:20:55:9d:c0:
87:94:88:db:a4:87:20:73:be:d8:c9:3b:63:a2:96:
a9:5a:e6:4a:65:79:60:eb:a7:48:ea:86:f3:73:5b:
44:f5:46:ed:c4:43:a6:d1:95:6f:3f:80:0e:f6:14:
bc:80:04:50:62:6e:d4:30:78:e2:e3:66:e5:88:ce:
38:18:f1:32:d8:89:72:76:08:c6:c1:87:4e:5d:cc:
45:b1:93:9a:ce:25:05:6c:d7:f2:6a:b0:7a:ca:eb:
18:f8:b1:e2:ba:3b:5f:eb:83:b7:8c:cd:3c:ba:31:
aa:ba:59:fc:e2:aa:1c:e5:3e:a1:34:dc:30:db:f4:
06:6c:44:23:ae:4b:f8:aa:60:68:74:ec:b3:3a:32:
88:d8:23:1d:38:37:c7:2b:e9:c0:07:bc:34:b3:35:
f3:e9:48:6b:b0:4c:98:47:90:d3:1e:48:d3:b2:aa:
76:00:a2:71:6e:26:1e:e9:12:ba:04:bd:68:ae:2d:
41:0e:6f:ea:e5:25:0e:75:32:14:96:85:05:51:03:
be:06:3d:9c:30:82:c7:b9:37:66:06:38:73:bf:36:
aa:f8:86:66:24:82:86:f9:16:b4:09:5d:47:89:05:
5e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B9:C1:FD:BB:EA:48:58:18:4C:DA:79:30:DC:69:63:3B:4C:61:E7
X509v3 Authority Key Identifier:
keyid:8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d5:77:40:e4:ba:12:1a:3e:45:97:d2:12:63:3d:12:95:19:
55:a8:8c:c0:a0:59:33:e5:ce:dd:08:91:39:12:5e:a9:d9:17:
1b:81:9e:8a:49:06:12:64:d6:bf:96:0f:70:39:99:79:34:e8:
81:b4:30:42:ad:0a:39:ca:83:ef:af:44:ed:b9:a3:22:a4:10:
df:47:cb:a3:c3:9e:e1:8e:15:ff:3a:fb:68:91:27:13:79:ec:
65:21:e2:9b:cc:eb:6c:21:f6:ff:37:70:5e:27:50:f0:59:33:
7c:43:bc:5d:50:90:c2:ab:1b:9e:83:ad:48:28:fd:de:d3:9e:
c6:bb:fe:4b:3c:0e:a0:63:ef:b6:ef:b0:49:72:fc:0c:f4:83:
f9:19:ea:f9:8a:4d:01:68:3d:7f:de:32:78:57:bd:27:8e:96:
b1:88:e9:60:fd:00:01:26:fa:c9:6d:eb:d6:b0:f2:30:3c:2a:
34:cc:73:b2:73:be:6f:6c:bc:cc:10:e0:4f:07:2b:5c:1c:20:
3d:f2:f8:37:2b:9b:a7:b0:f4:fe:62:cc:a8:f3:9a:7e:1b:9d:
ce:fc:ed:52:b0:4b:fc:23:ab:9a:e2:5a:ce:85:b8:fd:9c:b5:
28:e7:02:d2:20:e6:6c:7a:6b:39:00:09:64:03:25:66:54:43:
3c:81:f6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:24:04 2025 by rpki-client