Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
File: I-5ecUCbIf1cgg89OsP9wPznWgs.mft (raw, json)
Hash identifier: tYR5aik0E1WIRPnK60hCjHlt8X3dlQnFXvXsiu8wmCI=
Subject key identifier: 04:E5:0F:5D:2F:50:34:F3:B4:03:B7:B7:E0:01:CB:F2:A2:16:F9:EE
Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Certificate serial: 0199C48E329B99957F1879FF09BD6EEB9B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
Manifest number: 13C9
Signing time: Wed 08 Oct 2025 16:01:17 +0000
Manifest this update: Wed 08 Oct 2025 16:01:17 +0000
Manifest next update: Thu 09 Oct 2025 16:01:17 +0000
Files and hashes: 1: I-5ecUCbIf1cgg89OsP9wPznWgs.crl (hash: YXxXGS9G5H7pHy4Q8bb7MIWfnrwxkgV3gWsmZBx/h0k=)
2: JLTWHRuvioIZeiPuQHITq0nguEU.roa (hash: bk5yHjHsl6C1xvyULuJt1KQ0iqgopaEeKAR0yVznkzo=)
3: plwZ9l0lVtWa8erZq6nE-HfiL5Y.roa (hash: pvnWu+3SngeR8hyMQVNUkiZf5MAZJKgs78KtEduSXvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:8e:32:9b:99:95:7f:18:79:ff:09:bd:6e:eb:9b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Validity
Not Before: Oct 8 16:01:17 2025 GMT
Not After : Oct 9 16:01:17 2025 GMT
Subject: CN=04e50f5d2f5034f3b403b7b7e001cbf2a216f9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2a:70:09:fa:14:82:1e:d1:7b:af:cd:47:eb:
e1:18:3c:6c:1b:4c:e2:4f:f2:a5:6c:f4:e2:b4:38:
54:ec:f2:22:4c:b3:89:17:af:de:b1:9f:68:60:ed:
ce:79:05:6b:b1:72:71:54:af:eb:85:ad:8f:70:63:
f7:6c:78:ed:78:8a:bc:d5:87:bf:59:58:01:11:84:
37:d4:f0:4e:2e:25:a0:c4:8c:c6:65:04:2f:fe:96:
dc:3d:a8:e9:af:ac:88:8b:18:2e:b0:48:5d:b8:a1:
ab:c5:f0:40:87:c5:d1:d8:32:9e:ee:9c:c4:c1:81:
e2:31:7f:df:cc:0a:43:ac:1c:41:f6:a0:13:5b:52:
36:ee:52:f5:a9:08:8d:1e:7e:98:57:58:37:86:31:
4a:ce:9e:29:de:36:c4:1c:6c:bb:59:37:b9:1b:e9:
83:f2:ad:5b:52:99:b8:38:20:31:aa:1e:fe:ab:e4:
70:63:46:3b:ea:2c:07:06:8e:2c:ed:0e:79:f9:fb:
10:9c:fc:f4:b5:b5:9c:28:1c:94:26:ce:c0:dd:4f:
7d:50:59:7e:fa:47:1c:c3:10:ce:99:e1:07:b3:8f:
2b:1c:f3:e8:40:8a:ae:cd:dc:23:bf:89:f4:67:a7:
9c:90:74:bd:ae:ff:c4:12:86:29:86:7c:23:68:4f:
d2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E5:0F:5D:2F:50:34:F3:B4:03:B7:B7:E0:01:CB:F2:A2:16:F9:EE
X509v3 Authority Key Identifier:
keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:8c:64:d9:66:73:e2:b2:3e:76:ba:6f:3b:20:62:c2:44:77:
34:d7:23:2b:17:f1:c4:27:a5:80:54:3d:be:ac:95:3f:05:24:
e3:b4:e5:01:5e:39:45:ff:54:24:53:76:a5:4a:4e:0c:81:63:
73:67:e3:d6:35:bd:56:5b:ff:db:34:f5:0f:95:70:04:da:6b:
8f:fd:40:be:7a:5d:de:6c:7a:c5:36:71:3f:44:66:ac:88:c7:
5b:52:51:bf:c5:37:d8:86:33:93:61:09:3c:fc:9c:77:ac:c1:
13:e2:cf:c2:e0:6c:df:de:99:b7:08:f6:89:a0:52:96:e4:5f:
16:aa:3f:3b:18:fd:d6:56:51:ce:2e:ff:b8:8b:1e:b3:e2:b7:
7d:3b:d4:51:3e:54:cf:81:c1:1a:c5:1f:f1:e1:a2:71:b3:fc:
d0:3e:c7:56:54:3d:78:6a:6d:25:2e:f2:26:08:54:d4:ea:a4:
5c:cd:e6:4a:94:44:83:99:33:3d:29:6d:7e:c9:6a:29:db:48:
6b:02:c0:15:e3:32:bb:0a:ea:1d:ec:7a:1e:39:a6:50:be:9e:
6a:24:7b:c4:85:9c:ca:87:a0:2d:7b:57:f8:17:ae:6e:4a:69:
49:6e:05:37:f2:19:96:09:42:5a:3d:9a:81:80:2d:2c:89:2a:
91:53:63:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:21:58 2025 by rpki-client