
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
File: I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft (raw, json)
Hash identifier: laKOjtTubLbkrN4SaLnkru6u2PnR/0DVCGcS9+kMVos=
Subject key identifier: 81:58:F1:74:E5:90:59:C2:85:B6:DD:18:B3:E4:80:16:16:5E:0B:8F
Authority key identifier: 23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
Certificate issuer: /CN=234cd34911cfce946a22ea84663738cdcc076d45
Certificate serial: 019847E48053715EF44C6BD3F7F7F63743DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 18:00:14 +0000
Manifest this update: Sat 26 Jul 2025 18:00:14 +0000
Manifest next update: Sun 27 Jul 2025 18:00:14 +0000
Files and hashes: 1: I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl (hash: hvCRUyJRV8ZBjZYJ1QEhlq1W025pTT358euuzUck/Mw=)
2: h4MNBNIqF_ThX6XaH2WdhshuJOA.roa (hash: rTGzgorMfX1eun7k8wcYtv0yi00PmZQby+9ZEZuIh7g=)
3: nJekGUdzLnW-TjQjig7_IehTMxo.roa (hash: 7EP+L4VTl9fIN/VTMWiTcp215tfBsK8IFYr8aaBuzJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:80:53:71:5e:f4:4c:6b:d3:f7:f7:f6:37:43:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234cd34911cfce946a22ea84663738cdcc076d45
Validity
Not Before: Jul 26 18:00:14 2025 GMT
Not After : Jul 27 18:00:14 2025 GMT
Subject: CN=8158f174e59059c285b6dd18b3e48016165e0b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:ef:00:7c:fb:ec:9f:b0:a0:28:81:94:8c:
f1:cf:2c:4b:91:32:15:18:b0:10:65:5a:d2:2d:a0:
ef:e9:1f:d8:c0:e3:a6:d0:59:3d:86:e8:51:de:c8:
a2:08:b9:3f:91:f1:ef:da:ec:2e:1b:37:8e:30:c7:
7d:0c:21:ca:b4:5a:48:3b:86:0d:bf:77:4c:40:5f:
dc:04:c1:83:4f:8f:82:be:80:82:20:fe:4a:c0:f2:
76:41:48:7f:16:2e:7b:90:00:f6:e4:6f:f2:0b:30:
dc:a9:f1:5f:0e:65:89:f4:a5:7a:51:d2:f2:74:8a:
99:8c:a9:c2:54:dd:e5:f9:03:48:c7:40:d8:56:cc:
9b:25:8f:34:ef:fd:45:ff:42:df:d4:c4:ae:29:d5:
28:bc:eb:30:5f:69:9e:b3:ec:dd:5d:38:bd:dd:61:
17:e2:38:89:fe:d2:c8:86:b2:28:de:b0:cd:f0:81:
c9:b2:63:59:9f:d8:67:51:38:4b:b3:93:b4:df:79:
26:16:c3:05:0c:3a:9c:e7:77:19:be:2a:51:01:29:
f4:b6:56:4a:29:8d:88:b6:3e:be:38:7c:c5:35:7c:
09:99:fc:cd:d1:11:6f:8b:c9:0e:f7:7c:03:cf:01:
2a:46:2e:01:39:f3:4d:82:8b:cb:d5:b6:e8:bc:b8:
65:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:58:F1:74:E5:90:59:C2:85:B6:DD:18:B3:E4:80:16:16:5E:0B:8F
X509v3 Authority Key Identifier:
keyid:23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:79:63:28:6c:ad:2d:12:e1:7c:f1:83:b2:24:c5:93:33:1d:
76:9e:de:8e:b5:54:0a:11:df:5d:58:99:00:97:2b:88:9f:47:
13:5a:a6:9e:db:cb:3f:52:85:16:7a:ae:f7:4f:96:aa:4d:19:
4b:9c:ac:a1:97:47:04:61:31:8c:97:03:a4:cd:1c:93:d9:e9:
18:42:8b:4e:31:72:5b:73:79:dd:4a:a5:ce:89:82:25:00:a3:
64:6a:cf:7b:ba:6e:47:0e:a4:36:27:4c:d7:df:d0:b6:64:14:
4f:4f:cd:40:96:1c:6e:03:6d:1a:ae:45:7e:d4:bf:0f:f6:03:
e3:8b:4a:f0:f1:b4:97:22:ca:b0:2f:2c:7b:53:b4:6d:f5:97:
7c:e5:e7:6e:80:0f:ff:d8:32:19:c5:db:c9:4d:4b:b4:55:91:
21:e5:da:25:6f:8c:f3:01:fa:72:d3:b9:42:97:80:ac:60:0a:
80:f1:eb:eb:51:69:e2:74:c5:ca:35:1a:42:2f:db:25:29:b9:
6c:1d:19:a6:7f:b7:d1:01:4b:df:d6:22:ef:b4:d4:5b:07:ae:
73:fd:fc:c0:94:e8:06:06:f3:da:66:cb:3f:62:6c:55:c4:0a:
8d:58:61:01:98:83:83:ba:0b:c9:c3:56:04:f8:f1:4a:22:bc:
40:fa:91:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:25:27 2025 by rpki-client