Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
File: I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json)
Hash identifier: kJg7l1RPskOIKtn4senYyhnb537ZxkAvcscqqt6KI3I=
Subject key identifier: 87:1C:08:67:7C:76:16:60:2E:D7:2B:96:E6:98:AE:B5:0C:A8:5D:C0
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial: 01982A11B02D5DEBA744BB43DB6FC2E370C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
Manifest number: 11DD
Signing time: Sun 20 Jul 2025 23:00:58 +0000
Manifest this update: Sun 20 Jul 2025 23:00:58 +0000
Manifest next update: Mon 21 Jul 2025 23:00:58 +0000
Files and hashes: 1: Ai_jhfn0i9Wvxs1dcGNuIQFRbQw.roa (hash: Gw+sAwziSiWdDJ9jEjQB+Xypl/VPbgg3IFN9iDAN1Ok=)
2: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: 91/NGC2ONLumG0XrK1wb/0koNK/68MMY/dD2QwiyAUI=)
3: U3XsaJj-IFBktG-dXYEuz5kV62s.roa (hash: kenyyNekJ/vibROkcjE9SyGPN68bhSkOSO66LaGuIH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2a:11:b0:2d:5d:eb:a7:44:bb:43:db:6f:c2:e3:70:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
Validity
Not Before: Jul 20 23:00:58 2025 GMT
Not After : Jul 21 23:00:58 2025 GMT
Subject: CN=871c08677c7616602ed72b96e698aeb50ca85dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:57:8f:b1:3b:00:06:69:ee:82:85:d1:48:9e:
86:70:d7:89:54:a3:eb:4f:ac:34:97:37:15:6a:97:
bd:2f:91:2d:3a:6f:fe:ae:cb:3f:fe:ca:99:2d:e1:
67:a9:4f:40:9e:a8:91:8f:b6:e7:3f:81:32:ad:9e:
d2:96:2f:4f:4e:03:ed:db:eb:76:88:fc:96:05:f9:
86:4a:6e:2d:ca:aa:a6:13:58:02:25:43:40:c5:5c:
d2:0b:22:ce:53:0c:c8:df:1a:91:5c:66:60:2c:9f:
5d:4e:56:58:d8:f3:a3:7b:87:40:6c:e5:42:9c:50:
2a:a1:e9:8b:b1:59:db:a0:be:8a:55:d6:7a:b4:5f:
4a:60:dd:24:90:68:f5:c8:dd:48:cd:9b:97:59:60:
af:b8:4f:73:6a:38:1b:09:c2:b7:ee:4d:cb:bf:27:
dd:73:66:cf:15:3c:f2:58:40:65:a5:7b:9b:f1:c7:
e5:8d:c5:8a:04:a0:0b:49:4d:45:85:c2:3c:09:6e:
4f:ad:3f:f6:55:9b:5d:9e:f4:f5:e8:0e:a8:62:90:
03:83:d5:7b:57:53:96:b9:41:d6:90:e3:eb:e3:44:
dc:43:c1:0e:74:be:d0:09:c9:ef:00:41:ee:dd:7d:
25:34:4b:8e:15:22:e6:66:35:8c:be:5b:21:29:ce:
90:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1C:08:67:7C:76:16:60:2E:D7:2B:96:E6:98:AE:B5:0C:A8:5D:C0
X509v3 Authority Key Identifier:
keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:85:96:43:14:67:ec:a4:1f:c6:7c:7e:39:a6:e9:ba:da:1e:
10:42:ca:cc:08:4a:00:b0:f6:35:c3:d5:4c:6b:be:93:43:cd:
70:b6:93:56:3e:bc:4d:e7:51:4b:cb:e9:80:d3:a9:1b:02:3c:
60:f2:1d:a8:e5:d0:0d:24:69:5f:bf:f8:37:7a:1e:3b:ef:6e:
73:d2:4a:e6:94:51:04:b1:9d:ca:f6:af:3f:17:a0:75:a4:50:
45:3a:af:52:58:31:24:6f:40:c9:e7:14:33:b4:9f:95:8b:79:
1c:16:8d:7a:34:f9:5c:e2:04:51:39:28:d2:dc:a2:dc:00:df:
c0:a5:0a:6d:4e:44:09:81:1a:7e:67:ab:29:44:2c:3b:7b:12:
be:5a:90:d1:53:9b:61:f1:ff:47:c0:22:c3:55:3f:6a:6d:c2:
a6:4c:52:0f:fe:a1:ab:a3:b5:cb:49:3b:3c:12:d3:f6:19:ca:
4f:2b:f2:a7:25:08:e9:57:26:18:01:cb:c0:19:55:f6:e4:36:
63:6d:3f:17:38:28:20:12:9d:d5:de:16:d2:f5:80:6c:0e:fc:
40:8e:43:1b:f9:68:79:f6:65:32:fe:a1:35:90:6b:2e:16:76:
fd:9a:39:bb:b4:62:2b:b4:94:eb:d1:37:99:08:11:c9:45:76:
73:71:3f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 03:21:39 2025 by rpki-client