Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
File: tI9Br9xglWj7Izj9sgstDEIrcjs.mft (raw, json)
Hash identifier: omzr5jXQEOYFgCL+0rgbb/iN8ZBMDGcLsAjoAMwMxE0=
Subject key identifier: 2D:25:89:CB:2D:3C:DE:D9:B5:38:38:40:A7:A6:E1:16:73:B6:B2:76
Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Certificate serial: 01984852CA0E0C49A3ED04DDA9C7121AEC00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 20:00:41 +0000
Manifest this update: Sat 26 Jul 2025 20:00:41 +0000
Manifest next update: Sun 27 Jul 2025 20:00:41 +0000
Files and hashes: 1: pA8DlYtcvRNA-jdEe_3R7YRB6rk.roa (hash: XB3O2NdSBoC9ldQGDUty/6gqx/qt/ZpvhUOCQP6iI1c=)
2: rg67AeqtMD0wJ1IIvMd4YeaFTyI.roa (hash: po3w7Qi8ZlRiTSE2vYAsVYJZWCbY0SnfvN8Hrjn9vnc=)
3: tI9Br9xglWj7Izj9sgstDEIrcjs.crl (hash: LNdmYIuIBFoDCHzplaaQ+SW0bhCdmnA+wdu07Mu9JrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:ca:0e:0c:49:a3:ed:04:dd:a9:c7:12:1a:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Validity
Not Before: Jul 26 20:00:41 2025 GMT
Not After : Jul 27 20:00:41 2025 GMT
Subject: CN=2d2589cb2d3cded9b5383840a7a6e11673b6b276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:7c:ef:1b:c3:81:a8:d7:e3:17:cb:7a:7c:
54:f1:ef:7f:50:dd:06:1d:31:f2:fb:6d:36:ad:af:
cf:5f:f0:ef:b6:c3:cf:7c:d3:80:ab:0d:c8:15:46:
2f:ab:21:7d:98:0d:52:22:78:55:e1:23:8d:2a:d1:
f7:57:f4:79:45:6b:78:58:da:44:7f:1d:10:21:70:
67:97:7f:5e:c0:17:59:42:cb:74:be:9f:e1:13:e5:
7b:b5:be:ae:10:10:23:26:6c:87:fc:7b:e1:5d:cd:
3c:5c:d6:06:0d:8e:26:0d:e6:6e:e7:88:33:4a:f9:
86:49:f0:39:eb:98:72:ce:20:4f:99:93:39:ea:9c:
b7:2b:e8:e3:1b:cc:60:2e:47:32:a5:f8:75:0d:50:
54:6f:93:38:3d:e7:e5:b2:3b:20:0c:67:ff:41:a9:
8e:50:f5:79:c5:4d:7d:b2:65:fd:fa:e3:f9:ad:6d:
0d:d8:af:70:2a:9a:c0:0b:7e:c8:54:bc:e1:4a:0c:
b6:3f:e7:19:26:b5:31:88:a7:30:2a:90:c5:05:e7:
aa:dc:bb:02:69:67:b7:bf:ca:35:80:19:1a:64:50:
86:6c:ca:69:5e:82:cd:98:39:76:f9:6e:a6:33:b2:
80:f2:10:69:f3:f5:e5:e9:35:18:bb:9b:4d:a0:01:
52:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:25:89:CB:2D:3C:DE:D9:B5:38:38:40:A7:A6:E1:16:73:B6:B2:76
X509v3 Authority Key Identifier:
keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c1:88:03:d2:c5:af:b0:b5:b1:d1:f8:2c:1e:d4:8f:c0:cc:
c1:82:0e:5b:ec:27:14:d4:ab:7e:27:c1:ff:b5:13:a0:fb:9d:
a3:8c:67:60:fb:44:2b:1b:83:5c:70:d4:d8:34:4b:cd:14:0d:
57:46:65:06:d9:0c:ab:4d:a8:03:b8:35:48:c2:cc:75:07:36:
79:99:03:da:34:d9:cb:a6:81:eb:2e:5d:f6:4b:2f:c9:26:fe:
a9:e0:15:96:6a:a3:87:d6:b3:ef:07:73:f2:aa:ce:55:5c:5e:
2b:a4:fc:00:0c:e3:33:a5:c4:47:90:7d:d0:bc:28:f6:e3:77:
bb:ac:80:c7:78:c4:a0:0f:1f:bc:cc:c8:19:73:f4:1f:81:31:
80:c5:9c:c1:c5:ec:c3:8c:0f:f5:d7:87:4f:d0:64:47:d3:d3:
f2:d4:21:ea:5b:73:86:bb:b3:34:03:1c:e9:cb:ba:91:56:69:
8c:92:59:93:59:47:99:bd:b1:e0:76:10:6d:e9:81:ea:16:ae:
f7:1e:a0:5b:c4:5b:0b:fc:99:49:7f:e9:1a:46:78:f8:06:8f:
50:e8:af:81:8a:37:27:be:dc:a1:7e:9e:88:c6:ea:eb:fd:ae:
5e:8d:d8:e5:77:6e:81:e8:d4:3e:9f:74:79:46:f5:36:54:6d:
0f:c6:80:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:11:33 2025 by rpki-client