Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
File: I7GUMIfOaWI-drIUWzR5rCBLock.mft (raw, json)
Hash identifier: ATCesmnJantHz7eQkgoMZbe+TOErU9wIff4p9HldW5g=
Subject key identifier: 7F:ED:31:6F:CF:FC:1A:A6:37:D2:67:66:95:A4:AA:98:F7:9D:0A:CA
Authority key identifier: 23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
Certificate issuer: /CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Certificate serial: 01994D781FC30C6A17D48CFA50CA80FB0FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
Manifest number: 15C6
Signing time: Mon 15 Sep 2025 13:02:21 +0000
Manifest this update: Mon 15 Sep 2025 13:02:21 +0000
Manifest next update: Tue 16 Sep 2025 13:02:21 +0000
Files and hashes: 1: I7GUMIfOaWI-drIUWzR5rCBLock.crl (hash: FaJErs/QfsDwtcZo5fyO15R540uUduignJtu1nrkoJ8=)
2: IGzDnKyfU3XrsCi1kVIq3v9WjnM.roa (hash: BCjdpahib4P29wEhEZ+5HfDxKnWj0l2OSsP7lZ3IOHg=)
3: fngY7vAjtnIa6khyzBr6ohfARXc.roa (hash: 8j7K0AdGmWd/+RMVsdDrX0khITQq1MTMhTuPXkbPnqc=)
4: xgdlAL2WKr_Js4V_ZLjPaz6bev8.roa (hash: CfOyHBtQR8zjYYv9qA3Dd8n5he3YeIT+MsIzoT30dKc=)
5: z5Ucz1kkGg56QZyAblN2WefSoGM.roa (hash: 5hK/qHn0csimMvRktmqCqsq2To8mi7zen0Vo1KFJGyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 13:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4d:78:1f:c3:0c:6a:17:d4:8c:fa:50:ca:80:fb:0f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Validity
Not Before: Sep 15 13:02:21 2025 GMT
Not After : Sep 16 13:02:21 2025 GMT
Subject: CN=7fed316fcffc1aa637d2676695a4aa98f79d0aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f0:46:42:db:bf:f6:fc:2e:c7:64:d4:0d:d8:
8b:a0:bd:32:41:8a:a1:51:df:36:ee:e6:78:a2:e5:
34:04:30:96:6e:6a:61:6a:84:ac:1a:6c:fe:ec:e9:
f7:05:35:d4:a9:ad:eb:c7:6e:65:57:19:45:08:43:
ac:ec:e5:e3:9f:b3:7b:82:bd:e3:a1:51:75:d3:63:
94:65:05:76:cf:e3:83:2b:d0:8e:aa:d9:a8:75:2f:
e8:1c:6a:6f:27:a2:5c:90:d4:5c:44:d2:5e:f8:2a:
38:93:73:ff:bc:bc:64:8c:0e:99:00:60:ae:9d:95:
32:29:cc:c5:74:3c:db:a3:21:69:53:8f:b5:0e:e1:
d1:c9:d4:98:32:b4:57:5b:5f:4a:a2:ac:85:cf:e2:
5b:e3:fc:e4:d1:c9:5f:92:79:dd:f6:9f:54:fb:5d:
2f:44:41:74:3c:0e:35:37:52:57:bb:d2:b8:34:f3:
44:b6:46:1d:03:8b:10:a5:da:29:fb:61:56:a3:66:
78:2f:80:1a:75:ea:38:83:0f:c7:e1:3c:00:97:c1:
2e:9e:67:78:34:a4:f7:af:c6:f0:00:2a:6a:c7:41:
62:ac:66:84:b6:4a:4f:cd:69:41:70:04:30:7a:36:
68:82:56:e3:45:ca:09:7b:a0:11:64:a1:aa:d7:96:
a5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:ED:31:6F:CF:FC:1A:A6:37:D2:67:66:95:A4:AA:98:F7:9D:0A:CA
X509v3 Authority Key Identifier:
keyid:23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:c1:fb:87:14:76:66:72:7f:ad:10:f4:d9:60:43:02:88:90:
a4:a6:9f:d6:bb:63:81:6b:8d:6b:49:e2:72:c8:2e:1d:2c:1b:
a2:95:ad:ef:89:98:18:98:ad:97:04:fa:5d:51:d2:99:b9:fb:
66:f6:d7:72:69:c9:40:97:1e:6b:ff:77:9f:86:d7:d9:48:59:
86:33:6f:0d:c2:92:2e:75:2e:51:e3:3d:4b:7a:74:a6:41:ed:
93:68:3a:5b:da:51:dd:20:15:85:0d:95:5d:d9:e7:74:5c:65:
ba:15:28:fa:92:ac:5e:a5:dd:83:ea:7f:ad:08:dd:0e:9f:18:
ed:56:c3:d6:5c:88:a4:cf:bb:36:a8:43:d3:d1:03:af:b8:92:
85:f0:d0:48:88:9c:ea:fd:7c:5b:99:20:7f:eb:45:9a:29:dd:
60:e2:ba:c8:28:1a:4e:7b:f8:35:65:8a:77:4d:97:b1:39:b5:
5e:6f:20:3e:05:d0:d5:e7:e6:05:f8:29:2e:f3:7b:5b:78:71:
8e:ab:2c:e5:2a:c6:c2:3b:0d:1d:3e:9d:cb:6a:95:12:89:bf:
ea:ca:a8:48:1c:d5:4c:71:2a:98:12:46:0a:55:04:e5:84:54:
1d:3c:36:d1:2b:81:a3:2d:9f:e5:11:15:2b:70:44:69:d1:ee:
f2:be:48:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 21:28:06 2025 by rpki-client