Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
File: I5xF5DYlUiCArsU5UpiaE6KKvQA.mft (raw, json)
Hash identifier: YNjGx2D8yrCSWHA/M7vCKNxmFlg/q3Jp9VIv9m9fwi0=
Subject key identifier: ED:87:49:8F:01:40:BC:3F:25:87:97:E5:D0:00:B3:C4:DD:D9:62:77
Authority key identifier: 23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
Certificate issuer: /CN=239c45e43625522080aec53952989a13a28abd00
Certificate serial: 01984777081745365323A45951C337CB41E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 16:00:39 +0000
Manifest this update: Sat 26 Jul 2025 16:00:39 +0000
Manifest next update: Sun 27 Jul 2025 16:00:39 +0000
Files and hashes: 1: I5xF5DYlUiCArsU5UpiaE6KKvQA.crl (hash: A+U3NfVuN/tKQUmd5PrC4HrYQ3xBIuDTwB2Al5KuJOM=)
2: lw90sey6Y2XkP3Sip6ebzWQtTKU.roa (hash: IdqbojAlXr4XwjmKtJYEU/2zd7cvDplQCfLZ9IO+/d0=)
3: uBZl19XYTdc5SBXaRHXvV0GGF98.roa (hash: 1Ti03xYR3EsLOQdndtqiFtUtuVxyXY66yoLYTtqG1ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:08:17:45:36:53:23:a4:59:51:c3:37:cb:41:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=239c45e43625522080aec53952989a13a28abd00
Validity
Not Before: Jul 26 16:00:39 2025 GMT
Not After : Jul 27 16:00:39 2025 GMT
Subject: CN=ed87498f0140bc3f258797e5d000b3c4ddd96277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:fd:33:5f:00:fb:d3:a7:d8:d4:50:0e:7a:
04:ba:e7:ea:e4:3e:d7:0f:79:86:94:b5:88:4c:c3:
48:2e:0a:24:d0:1a:06:2d:46:57:0a:41:70:39:b0:
b2:b9:56:4c:a3:d2:ae:53:8a:5c:f5:43:43:23:b8:
cb:85:c9:c6:0a:3a:c3:c9:a5:6f:0c:ba:ad:b0:a6:
da:98:1e:ca:93:88:dc:4c:f1:06:9d:a8:55:46:19:
68:5d:a8:61:46:04:0a:47:3b:65:69:c9:b2:4d:ea:
fd:fa:ee:1c:d8:c0:01:90:81:68:44:cb:87:b3:d8:
4c:11:a0:15:d8:ab:19:0d:75:f3:c8:42:83:95:0a:
ed:f0:6a:c1:d2:42:78:c8:b4:e6:2c:2b:36:49:07:
5e:10:2b:fe:ab:62:4d:05:5f:16:46:55:a6:dc:0c:
8b:e4:50:0c:86:de:84:fe:d7:81:ab:3a:ab:3a:83:
18:8e:94:74:e8:df:20:e8:cb:2b:49:3a:0c:78:eb:
26:dd:d6:66:39:de:42:1d:15:ee:65:e7:67:18:f2:
7e:28:5f:63:84:10:38:72:39:d1:2c:5f:32:2e:6c:
54:2f:90:14:3d:3e:86:d0:48:dc:c1:28:cb:0f:f2:
3f:64:fe:ce:96:45:a7:54:62:45:f7:14:a9:ac:5e:
6a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:87:49:8F:01:40:BC:3F:25:87:97:E5:D0:00:B3:C4:DD:D9:62:77
X509v3 Authority Key Identifier:
keyid:23:9C:45:E4:36:25:52:20:80:AE:C5:39:52:98:9A:13:A2:8A:BD:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5xF5DYlUiCArsU5UpiaE6KKvQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/I5xF5DYlUiCArsU5UpiaE6KKvQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:95:67:98:01:2c:30:45:ca:4d:11:2b:8d:18:59:53:dd:87:
de:ae:1b:e8:eb:ed:f8:95:8f:8a:d0:65:0f:87:fa:36:0b:c4:
c4:28:ae:c6:9a:6d:06:69:8c:e5:d3:45:d6:11:18:d9:62:22:
c9:bf:aa:df:44:ff:0b:26:a2:65:a0:9d:f7:30:25:6c:4c:ad:
f2:b9:71:b8:23:d9:65:6d:36:20:b2:ca:f1:af:79:ae:d3:89:
55:a0:0d:12:3a:b6:95:6e:57:59:6a:39:ac:98:73:b8:46:69:
63:7b:3f:0d:a3:f6:d6:fd:cf:56:dd:22:5f:ee:ec:c4:bb:1e:
a7:2f:16:68:dd:75:40:31:d9:87:4b:f7:47:3b:2a:e9:09:12:
1e:c5:66:27:f0:c1:a0:25:ec:86:2d:cc:0f:58:e0:20:3a:7d:
64:be:59:e1:c6:06:7b:88:83:0d:fd:68:cd:c1:6e:d3:c3:3e:
9d:8e:5e:a6:45:b1:96:ba:f1:b7:23:04:c1:6d:2c:af:9e:48:
1d:bc:1b:b2:f3:85:d4:c1:0b:64:d9:de:bd:30:0d:aa:b5:8e:
0a:b3:d2:a0:2c:a3:86:9b:a3:88:00:e1:e1:4e:e3:0a:89:c0:
cb:43:3c:7d:35:fa:be:01:9b:ac:d1:70:23:ac:03:6f:07:d9:
b0:f3:ed:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:53:48 2025 by rpki-client