Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
File: I_IfcxbhvXj4bupkJdXCKbmA-aw.mft (raw, json)
Hash identifier: sxs05dQSRFA4BOOs9KUuleQRHEZknKQe6xW4LdLKyKE=
Subject key identifier: E1:E2:AC:15:CF:20:0C:16:1E:26:F6:4A:7A:43:D9:CC:5A:3E:FD:77
Authority key identifier: 23:F2:1F:73:16:E1:BD:78:F8:6E:EA:64:25:D5:C2:29:B9:80:F9:AC
Certificate issuer: /CN=23f21f7316e1bd78f86eea6425d5c229b980f9ac
Certificate serial: 0198499C19E3AFF98838CA6C43DAB42162BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 02:00:23 +0000
Manifest this update: Sun 27 Jul 2025 02:00:23 +0000
Manifest next update: Mon 28 Jul 2025 02:00:23 +0000
Files and hashes: 1: 15gQ3l_CTz5DpsQh5tCstrbwJks.roa (hash: NBh6zaBQW3FImxNGTreLJET3gJwOeBKW+FttZU4GhEA=)
2: I_IfcxbhvXj4bupkJdXCKbmA-aw.crl (hash: lQNalU49c4NmH0hm8oIzNb90DY+N58DuJumXrgfrgEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:19:e3:af:f9:88:38:ca:6c:43:da:b4:21:62:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f21f7316e1bd78f86eea6425d5c229b980f9ac
Validity
Not Before: Jul 27 02:00:23 2025 GMT
Not After : Jul 28 02:00:23 2025 GMT
Subject: CN=e1e2ac15cf200c161e26f64a7a43d9cc5a3efd77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f6:1c:09:95:12:7b:67:09:7b:58:8a:8c:15:
40:27:a9:f8:2c:f7:ec:23:00:30:42:c4:07:24:83:
ed:91:7c:fb:aa:c8:7f:73:65:b3:33:e2:62:e7:a5:
b7:c4:3a:f5:8a:11:ac:74:ba:47:57:5d:06:e8:30:
57:40:1e:2a:5f:6f:c5:62:01:56:85:53:17:f7:d7:
52:61:9f:ba:1e:26:3d:db:1f:61:2d:79:27:55:d1:
29:a1:ae:d5:5a:2f:a1:45:e7:32:2d:e5:4f:da:b0:
12:ea:ff:50:71:1a:6e:91:5c:1e:e7:d7:18:30:31:
39:6f:77:77:33:f2:d6:6c:aa:38:61:d3:47:23:e1:
1b:14:81:f0:28:51:7a:0b:25:fd:39:f0:b2:7b:ba:
fe:be:60:fe:03:f0:30:e8:c0:19:da:6a:f3:29:75:
17:3a:d8:9f:1b:9b:79:24:b6:9b:c9:ef:55:91:64:
83:64:ac:2c:bb:d7:1d:53:a8:d0:2e:6c:8f:12:69:
a8:b6:19:64:81:4a:a5:14:21:6f:ed:e6:59:05:51:
13:c2:a5:10:0d:2f:05:aa:6f:0e:2a:9a:11:5f:6b:
a7:cf:38:83:9a:7e:cc:23:a1:5c:dc:59:8f:83:2f:
09:a7:cd:e4:27:a9:6f:d5:9a:dc:05:0d:6a:0b:84:
78:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E2:AC:15:CF:20:0C:16:1E:26:F6:4A:7A:43:D9:CC:5A:3E:FD:77
X509v3 Authority Key Identifier:
keyid:23:F2:1F:73:16:E1:BD:78:F8:6E:EA:64:25:D5:C2:29:B9:80:F9:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:8b:d7:e4:e0:23:c6:fe:e2:9e:f6:29:54:e8:88:ba:3f:73:
14:e5:35:0e:e8:e4:96:28:7e:68:db:65:c8:97:3a:a2:12:a4:
8e:16:b6:22:8d:8b:6a:d7:fc:88:d6:df:51:9b:cc:f1:ab:e8:
e3:39:29:5f:b9:89:d2:e8:55:91:23:8f:a6:40:7a:58:6e:d9:
dc:c9:cd:1e:c6:51:08:54:c6:7d:59:7f:8a:24:d1:1b:6c:6e:
b6:16:b4:22:ed:40:bc:58:d7:5f:0d:b5:2d:52:69:cc:a6:21:
85:db:eb:40:cb:41:78:64:7a:86:58:88:e1:50:af:99:17:6f:
c0:d2:35:fd:9d:c4:a3:58:fe:18:e2:79:d4:19:52:06:0e:85:
84:c0:f4:ea:0e:88:59:5f:5d:80:f2:b5:a9:be:76:c6:98:3c:
7a:87:ce:c7:26:07:2a:79:f4:fa:43:3c:90:30:e7:89:16:09:
ba:67:82:f3:68:01:8d:a7:c0:bc:9a:02:bc:9c:3e:17:59:78:
e6:12:39:34:48:a8:23:5e:16:a7:1a:d0:57:cb:b4:86:76:aa:
35:10:33:2c:57:8e:ad:93:49:55:ab:05:87:b7:4c:73:31:27:
03:8e:52:ea:71:81:8b:dd:92:2a:56:20:5e:3a:ea:b8:3d:2c:
03:d2:fc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:48:08 2025 by rpki-client