Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
File: lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft (raw, json)
Hash identifier: zvkPJex++eJPZFTzuTXIOS89vePLiEda7JTVnaiw/W0=
Subject key identifier: B2:FE:96:B5:47:25:B0:C8:79:3D:00:1E:26:03:C1:AD:37:81:97:1A
Authority key identifier: 94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
Certificate issuer: /CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Certificate serial: 019849663CC5DAABD4D2734BF680CB385B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 01:01:33 +0000
Manifest this update: Sun 27 Jul 2025 01:01:33 +0000
Manifest next update: Mon 28 Jul 2025 01:01:33 +0000
Files and hashes: 1: 5UBdfwa59JnO3TC0RbPoMbXcwMI.roa (hash: BXAoKRzIsnGpyUD97PKhyGWEISH1mZLvzMgOl4ru7To=)
2: DyQE1mAMz0-Y555bTSVvXkqEC1U.roa (hash: hwRt5mho9M1lkKLFQYJUnV8/sYmEs4QQ4EstdFb/mZk=)
3: lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl (hash: lU2pKgfGRehItXDTlZ2/IbPydGHn6IMhaNlvsgace5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:3c:c5:da:ab:d4:d2:73:4b:f6:80:cb:38:5b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Validity
Not Before: Jul 27 01:01:33 2025 GMT
Not After : Jul 28 01:01:33 2025 GMT
Subject: CN=b2fe96b54725b0c8793d001e2603c1ad3781971a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9a:82:63:1a:a9:9a:3e:4d:53:43:3a:33:d7:
52:0e:e1:a1:b8:99:51:e6:7b:45:ff:0c:de:7d:a6:
78:4b:2d:f3:be:13:4e:1d:4b:8a:54:8f:8e:27:65:
db:db:ba:8f:cd:70:84:be:d0:97:bb:ca:3c:db:5f:
f5:46:d7:4d:4f:40:d1:c6:09:bd:77:40:86:db:fd:
96:c1:30:df:95:99:b5:98:36:25:29:83:37:eb:ab:
d5:14:29:3b:01:d8:a2:c2:1a:8d:4a:72:98:97:0f:
ed:8d:6e:79:bb:38:5b:c2:fc:ee:fc:e3:6d:b1:86:
dd:70:6b:70:4c:28:b6:47:ae:cf:1c:21:1a:fc:87:
0c:2e:85:e3:55:e9:66:db:be:21:1d:66:4e:2a:ae:
e5:ea:f0:56:0e:03:cc:71:f8:b6:cf:1d:da:bd:97:
ef:72:bc:44:eb:b9:f0:ac:46:99:c4:4a:4e:08:13:
0e:62:3e:cf:2f:f0:77:c6:e5:69:5a:d8:1f:be:4f:
1f:48:4c:22:5e:b0:39:60:8c:b5:0a:52:7f:47:6e:
7b:05:9e:60:df:5a:ec:1a:8d:f5:d1:df:33:2e:a4:
68:d1:86:cc:57:41:3b:28:9c:eb:11:a7:4d:aa:0f:
f9:68:da:6a:b8:da:33:f2:da:54:a5:37:a7:d5:ca:
6a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FE:96:B5:47:25:B0:C8:79:3D:00:1E:26:03:C1:AD:37:81:97:1A
X509v3 Authority Key Identifier:
keyid:94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7b:57:dc:83:7f:5c:54:6f:aa:01:aa:a1:4f:72:1d:7e:0a:
19:f2:be:b3:8a:63:37:5c:ea:fa:36:87:e9:b7:7f:29:e3:cd:
c3:49:cc:33:42:c4:9d:2a:05:5d:61:0a:4b:26:6d:18:63:95:
a5:1f:18:67:aa:d7:a1:f6:a2:c8:fe:61:ee:ba:1c:14:ef:d6:
25:9e:3d:2d:56:c0:37:e1:a4:1f:f2:d4:12:8e:12:8a:2e:9d:
61:4d:63:2f:96:35:a4:42:65:ff:41:04:8a:01:de:60:08:5f:
9b:40:48:96:fe:ed:ab:bf:5e:bd:a1:6a:92:82:19:5b:02:04:
86:df:38:f3:3f:c5:a1:60:da:29:c4:cc:9f:5e:29:9a:80:a2:
16:16:28:e4:8c:37:d8:4f:f0:5f:41:f5:1f:ae:d6:e4:1f:74:
c2:3d:6b:70:6b:a2:c3:63:79:dd:4b:8b:b1:28:17:e4:3e:8e:
e7:0c:f0:99:80:56:2b:cb:7c:30:9c:a0:f7:3e:d4:a4:46:0f:
9e:e7:dc:bb:69:66:18:a1:77:eb:2c:d3:ce:22:97:c4:31:b0:
87:de:b2:5b:00:45:f0:33:de:7e:a2:b9:00:06:91:b9:ff:bc:
e1:63:ea:a9:60:7d:12:27:8e:e1:fd:c5:06:ec:47:54:76:52:
38:cf:e9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:09:41 2025 by rpki-client