Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
File: i5PlZ68ZipTh_PBf4P58khCVqEo.mft (raw, json)
Hash identifier: Y1MLuqWOx7mGtpuIGF7w1/jZSMYValSRGkCjWjcHsD0=
Subject key identifier: 32:49:A6:A6:76:4B:44:FF:AD:95:33:99:7D:B5:13:B0:7D:4A:6C:35
Authority key identifier: 8B:93:E5:67:AF:19:8A:94:E1:FC:F0:5F:E0:FE:7C:92:10:95:A8:4A
Certificate issuer: /CN=8b93e567af198a94e1fcf05fe0fe7c921095a84a
Certificate serial: 0198394D60811754C6123E52D902C7D8BE78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
Manifest number: 0AA2
Signing time: Wed 23 Jul 2025 22:00:28 +0000
Manifest this update: Wed 23 Jul 2025 22:00:28 +0000
Manifest next update: Thu 24 Jul 2025 22:00:28 +0000
Files and hashes: 1: 6DAE46YGraEJYVV3HiGtZg9tT3U.roa (hash: 9Q8yRtyc9v/k/ONyDJo3tJ6f8FW5cGNXex+XpsJxg2Q=)
2: i5PlZ68ZipTh_PBf4P58khCVqEo.crl (hash: 8r8jlxpuk24sdabKTUz/E6rRnh3nOY3FjO3U4kuWevQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:4d:60:81:17:54:c6:12:3e:52:d9:02:c7:d8:be:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b93e567af198a94e1fcf05fe0fe7c921095a84a
Validity
Not Before: Jul 23 22:00:28 2025 GMT
Not After : Jul 24 22:00:28 2025 GMT
Subject: CN=3249a6a6764b44ffad9533997db513b07d4a6c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:c3:b9:cb:0e:a6:d0:48:b8:73:5d:dd:6e:
ea:04:3a:01:10:53:be:0f:27:40:80:2e:16:56:d5:
f9:f4:3d:f5:f5:ab:ed:ba:8f:9e:95:6e:dc:4b:c1:
58:1a:2c:6b:fe:a0:77:1c:05:f8:c2:ff:f8:d2:f1:
eb:c9:ba:76:2f:35:b4:8b:4a:c7:6a:ac:cf:6b:03:
d9:0f:b8:12:2a:98:e5:1a:14:4c:35:de:27:b7:32:
59:39:c9:7a:8c:ec:9d:fe:35:6f:7d:c9:db:2a:78:
92:d5:51:c2:41:c4:9c:46:c1:e5:2a:d6:4e:ee:5a:
92:e9:b2:bb:14:e0:d1:bb:86:ab:8b:e8:c7:86:b4:
65:3b:63:91:c9:53:c1:9f:83:54:c2:47:bc:31:93:
bf:28:9e:97:e7:ce:ab:30:15:bc:00:6b:59:f8:d2:
41:32:3a:c3:50:2c:b0:62:c2:2b:d9:40:f5:d2:5b:
4e:bf:64:41:3d:f3:8c:6e:18:2f:09:de:73:72:b8:
f3:48:67:38:43:10:79:52:73:78:80:d8:ca:0b:0d:
e5:a7:62:ce:c7:d7:88:fe:4f:80:82:de:a7:f6:4d:
18:6f:42:39:a7:71:be:24:51:dd:48:0b:bf:ba:fa:
c9:7f:47:b7:b1:40:dc:5c:6a:b9:35:99:16:3c:45:
45:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:49:A6:A6:76:4B:44:FF:AD:95:33:99:7D:B5:13:B0:7D:4A:6C:35
X509v3 Authority Key Identifier:
keyid:8B:93:E5:67:AF:19:8A:94:E1:FC:F0:5F:E0:FE:7C:92:10:95:A8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5PlZ68ZipTh_PBf4P58khCVqEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cf130d-efd4-4dfb-a1a3-a2bf0a18cddc/1/i5PlZ68ZipTh_PBf4P58khCVqEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:74:e3:ea:ed:35:d9:9b:0d:1e:6f:05:4f:3d:24:6c:15:0b:
a8:fd:45:d6:98:60:e3:7e:5b:2e:71:8b:ec:29:90:78:3e:f0:
e4:22:6d:91:43:1b:76:7a:9f:24:3a:ee:2a:dc:7e:11:e6:40:
32:4a:ba:ef:5a:9d:f9:3d:ca:3f:aa:65:6e:93:49:f7:7a:b8:
c5:3c:e5:76:ac:25:11:9c:59:da:ad:a0:3f:89:dc:e6:2f:f8:
cd:a9:80:bb:52:d8:e4:40:13:7f:6e:14:fa:a1:98:51:e1:fb:
8f:c7:cf:97:4f:88:10:0a:67:64:e9:4a:0c:22:bd:4c:65:cb:
9e:c1:69:9a:e8:ae:97:fc:9f:f3:ac:0e:8d:c7:86:be:bd:4e:
e9:66:62:ea:fd:b6:63:3a:74:92:4a:a2:64:66:7e:97:27:54:
6b:b8:bb:5e:2c:9d:13:fb:37:99:58:3e:ee:92:eb:64:2e:12:
54:d7:e4:8a:79:06:95:92:79:94:96:f6:a9:33:41:31:62:4a:
f2:9e:dd:a2:91:52:81:74:9d:64:5d:3a:18:b3:20:e3:93:f5:
8b:d7:5f:bd:67:92:27:b5:62:6b:f2:f8:ea:7e:cb:02:cd:0e:
b5:b8:47:72:ce:86:ae:aa:89:9d:ae:da:53:12:a5:1d:08:95:
d5:18:a5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:47:49 2025 by rpki-client