Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
File: I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft (raw, json)
Hash identifier: uKcup+qp9s+qfuOQmA7VuEQYMH82ffN7AfI4ybStw5M=
Subject key identifier: 08:0C:65:CA:94:45:8E:64:F7:B3:92:CF:4A:C5:EC:40:5C:56:AF:AC
Authority key identifier: 23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
Certificate issuer: /CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Certificate serial: 0198530D8E5E2446D79E3642DB7201695577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
Manifest number: 094E
Signing time: Mon 28 Jul 2025 22:00:54 +0000
Manifest this update: Mon 28 Jul 2025 22:00:54 +0000
Manifest next update: Tue 29 Jul 2025 22:00:54 +0000
Files and hashes: 1: I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl (hash: lXsheOnL8q7wjbGolozgB6JH6NHwn/oHHr34gHpMyH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:8e:5e:24:46:d7:9e:36:42:db:72:01:69:55:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Validity
Not Before: Jul 28 22:00:54 2025 GMT
Not After : Jul 29 22:00:54 2025 GMT
Subject: CN=080c65ca94458e64f7b392cf4ac5ec405c56afac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:86:b0:b7:50:4b:f6:83:7d:0a:cf:83:dc:6d:
78:bf:37:6d:b3:fe:8d:8d:fa:64:ab:a1:c1:95:1a:
d6:97:12:94:ed:30:56:29:2d:97:d1:af:34:e5:e3:
93:e5:6a:71:86:13:23:c8:07:1c:d6:c9:d2:f9:b2:
50:f8:4d:f8:68:9e:0c:52:25:df:a0:1a:e6:f4:94:
72:f5:08:d7:b1:47:a0:c1:17:f8:d0:64:be:67:a0:
b6:f8:23:96:85:78:9a:a1:13:dd:36:f4:5e:3e:38:
af:2f:78:0c:2d:dd:56:d0:50:53:a5:8d:4e:b8:01:
c7:64:dc:a3:a5:e0:b7:4c:17:2a:f6:c8:8d:5a:2b:
09:8a:bf:b5:1a:0d:95:5b:c0:96:76:b1:af:24:be:
82:ed:93:23:22:79:d1:49:a6:d8:c5:49:a8:c2:a7:
74:d5:5e:bc:e4:5c:b4:65:42:4a:44:5e:89:8e:db:
9f:1a:d8:fe:44:6a:34:dc:87:92:99:ea:58:a4:5b:
93:f5:42:23:50:60:6e:89:0b:6e:ae:77:9b:d7:b0:
61:d1:93:1c:4f:ed:44:00:93:ba:da:93:73:58:1b:
42:ee:28:ec:73:ea:8c:16:4e:08:64:5e:d1:1c:c6:
d8:f9:49:7b:c3:23:09:6a:96:de:5b:1f:d2:c4:82:
cc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0C:65:CA:94:45:8E:64:F7:B3:92:CF:4A:C5:EC:40:5C:56:AF:AC
X509v3 Authority Key Identifier:
keyid:23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:57:3c:d7:6c:82:83:44:51:58:e8:0e:1f:a6:b3:5f:c0:64:
12:8f:7a:9a:27:ce:9e:70:8f:e3:c1:f1:d7:7b:45:8c:f4:1a:
00:ff:70:cf:d9:d0:00:08:ff:2c:34:82:09:86:23:2d:d7:fc:
a6:30:e4:bb:0a:7b:af:e8:79:5d:28:0c:d9:fb:fe:b3:47:ad:
f9:ef:94:43:93:94:c7:7a:55:60:36:4f:8a:45:c2:21:7f:c6:
38:c4:04:fc:db:3b:d2:85:7d:84:de:67:32:11:bf:23:96:7b:
d5:61:b2:a1:1b:a2:0c:f5:2d:d0:9d:86:6b:0d:c0:1b:db:9d:
38:f9:24:cb:ca:20:92:df:98:af:89:08:e9:b0:0b:7a:c1:75:
56:01:eb:4f:14:e1:6d:50:21:25:88:a0:91:de:68:e2:fa:bf:
4d:f1:2e:aa:5e:89:44:8e:b9:e9:47:74:e3:c3:4c:96:82:50:
33:d9:42:35:82:03:53:b7:ea:a3:b3:13:8d:49:9d:ff:8c:04:
fa:8a:29:2c:d5:32:6f:40:a4:84:72:bd:38:03:eb:8d:9d:40:
42:14:c0:01:6f:ab:58:9e:92:4a:7b:70:d0:b3:5a:29:32:1d:
3f:42:45:97:97:cf:ee:54:89:76:3e:f5:b1:c9:93:97:de:9d:
8b:58:80:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 23:07:00 2025 by rpki-client