Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft
File: i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft (raw, json)
Hash identifier: x13knoczOw5y0JrYY/rWYgaWUrh5Vt0cnypbsSfuN6c=
Subject key identifier: 9C:C1:30:AA:0E:A1:AF:D2:E5:05:F2:63:CE:2F:61:0D:8E:16:88:96
Authority key identifier: 8B:51:18:65:93:02:99:76:3E:0E:5F:2D:82:56:7D:C5:A1:D5:3E:79
Certificate issuer: /CN=8b511865930299763e0e5f2d82567dc5a1d53e79
Certificate serial: 019847ADD23943C4F7BC3F84D8DA271CE99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft
Manifest number: 123C
Signing time: Sat 26 Jul 2025 17:00:30 +0000
Manifest this update: Sat 26 Jul 2025 17:00:30 +0000
Manifest next update: Sun 27 Jul 2025 17:00:30 +0000
Files and hashes: 1: i1EYZZMCmXY-Dl8tglZ9xaHVPnk.crl (hash: ap5CHlmcXVVZlz1sFuU+GFzDYK2YI8xTUBB9z64sbBc=)
2: vWNF9c9xh0UQ-FU-UmVlKKmFXu0.roa (hash: 6rkEiKqMQhH3x9WDxfo0uMKCtMaKKNiS0hRACYb4UZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:d2:39:43:c4:f7:bc:3f:84:d8:da:27:1c:e9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b511865930299763e0e5f2d82567dc5a1d53e79
Validity
Not Before: Jul 26 17:00:30 2025 GMT
Not After : Jul 27 17:00:30 2025 GMT
Subject: CN=9cc130aa0ea1afd2e505f263ce2f610d8e168896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:ce:36:1f:4f:5b:c3:e4:6f:04:cc:5a:68:
73:d4:28:b4:48:33:7c:8b:9a:5c:b6:8e:1d:4e:73:
15:e1:9d:4e:e2:5d:8e:d2:27:87:33:62:16:5b:ee:
d2:df:89:24:f5:1f:0c:47:24:34:bf:90:ab:92:11:
b1:74:19:d9:51:08:b2:50:3c:45:a7:65:95:24:f4:
46:52:33:38:5e:77:ee:a6:c5:bf:89:5d:7e:5c:4b:
6c:82:b4:bd:b7:fd:4d:eb:eb:54:f1:02:79:ff:70:
a3:1e:47:5e:d0:fc:9a:93:6f:ad:60:b7:ba:54:1b:
ba:e4:94:76:a8:09:40:13:aa:04:ec:96:c2:a0:04:
12:08:5a:3e:5b:e9:c5:d2:f7:e5:50:08:17:2b:c5:
92:c9:a0:60:6b:5c:06:89:02:66:c4:9c:8f:d4:2e:
99:59:a2:9b:16:78:17:57:02:0d:d7:d1:b6:c9:fd:
67:8d:fe:18:04:ea:07:9c:a3:3f:8b:78:4d:50:b0:
2d:30:76:32:f6:14:9e:85:0b:3b:ad:8b:45:72:ba:
74:1e:51:45:d4:12:a3:f5:15:bb:82:a4:f4:22:89:
d6:91:37:64:d5:0e:b0:e8:a1:08:02:aa:95:5b:67:
7a:f9:94:d1:2a:9c:b6:75:84:82:3a:2b:b8:26:45:
5c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C1:30:AA:0E:A1:AF:D2:E5:05:F2:63:CE:2F:61:0D:8E:16:88:96
X509v3 Authority Key Identifier:
keyid:8B:51:18:65:93:02:99:76:3E:0E:5F:2D:82:56:7D:C5:A1:D5:3E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/a8f02b-6563-40a9-a35a-1f09bb6db1b6/1/i1EYZZMCmXY-Dl8tglZ9xaHVPnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:08:fc:da:76:a5:58:8a:20:6f:62:1a:ff:44:2e:d5:83:35:
e4:c5:12:f9:2e:f0:40:f1:aa:28:51:d3:72:61:5c:a6:ac:72:
20:85:9c:89:1b:7f:78:a8:1b:fb:28:0c:4f:a4:66:ed:ee:b5:
37:67:b1:a5:b7:33:76:2f:f0:1b:12:18:96:0c:9a:15:1f:97:
a3:ed:e2:90:e6:74:89:ce:bb:76:70:8e:e1:35:a4:b4:7f:8d:
d3:e0:20:53:e0:07:5e:46:e6:d9:27:27:b2:ff:a1:f5:e8:5f:
ed:04:6c:da:cb:b2:49:9a:9b:7b:29:0f:86:97:0f:be:50:67:
d8:fe:2b:05:96:33:40:6f:ff:0a:fb:39:d1:18:dc:ab:04:f1:
11:0b:5d:04:61:51:e8:24:df:b6:85:20:87:9b:29:4c:4f:e7:
b1:6b:c3:1b:57:ab:cc:82:9f:f0:53:b0:76:9f:fd:9d:27:3d:
1c:6b:3c:b9:87:9b:28:19:38:1c:73:3d:f3:65:68:7b:a9:77:
8f:8a:b0:e2:a7:cc:63:2c:76:d2:b2:0e:e1:48:ef:ab:46:88:
a6:ac:16:67:44:b3:de:4b:43:cb:3f:14:6a:5e:ef:08:3e:aa:
f8:7d:7c:62:c1:2a:7e:88:0f:27:c8:3f:9c:07:70:2a:b6:64:
48:3a:56:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:36:32 2025 by rpki-client