Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
File: _i4izBWFntSgeEv9CFhLPI-yn5o.mft (raw, json)
Hash identifier: 1kXXGPY6lMAtzx1YHb6uihR8+GdmvN86OsgQ4S3l7X8=
Subject key identifier: B1:62:7E:48:DB:B9:6C:3A:6E:35:4E:36:77:24:1E:00:36:B5:4D:2D
Authority key identifier: FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
Certificate issuer: /CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Certificate serial: 01984475F0FA24C16BE7FE15C51227A45AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
Manifest number: 0C32
Signing time: Sat 26 Jul 2025 02:00:36 +0000
Manifest this update: Sat 26 Jul 2025 02:00:36 +0000
Manifest next update: Sun 27 Jul 2025 02:00:36 +0000
Files and hashes: 1: 3GJal5BlkwMpqI0aUPXNpdisEd0.roa (hash: N1IIZPB15h65xX22ALfpxQG++svVYLQW4hUhjHJNwow=)
2: _i4izBWFntSgeEv9CFhLPI-yn5o.crl (hash: FvMu4fCV/26oZtskUmeamI47G0f03cTk/vLdY/xuSro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:75:f0:fa:24:c1:6b:e7:fe:15:c5:12:27:a4:5a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2e22cc15859ed4a0784bfd08584b3c8fb29f9a
Validity
Not Before: Jul 26 02:00:36 2025 GMT
Not After : Jul 27 02:00:36 2025 GMT
Subject: CN=b1627e48dbb96c3a6e354e3677241e0036b54d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:6a:07:6f:1c:4d:b6:79:a1:fa:7b:f2:01:
92:62:3d:75:70:c1:69:6d:96:10:b9:70:a4:52:74:
45:a5:6c:4d:18:b0:a6:6b:cc:24:a7:06:77:0b:ff:
f8:bc:3f:f2:0d:ce:36:c7:15:14:59:ee:9f:49:f4:
3e:7f:8e:1e:92:f4:41:d0:21:3f:5b:8f:a9:12:3a:
95:13:06:f1:9e:8d:5b:3c:d4:2b:8b:9d:8a:61:63:
df:75:7a:f8:6a:f2:ed:5b:24:21:af:35:35:7b:03:
30:8b:30:9b:4c:7d:f4:69:83:41:c5:c2:32:88:55:
f6:dd:78:2c:d6:e3:ba:87:05:56:57:18:91:50:7f:
e1:02:d6:4f:60:2c:ff:62:8e:a1:be:ae:32:53:72:
a5:e9:92:41:25:d9:4e:d5:b4:30:2e:b6:bb:fd:0a:
20:8e:d6:97:8f:03:7b:49:1e:58:99:a3:64:51:58:
b1:39:f8:fb:22:8e:56:02:4c:71:b7:c0:32:19:7d:
e3:db:b0:af:0e:ab:81:39:c4:96:de:0c:0f:d3:7c:
bf:7a:cd:4f:4d:df:bb:fe:2e:b0:b4:9e:70:fd:af:
f6:1f:48:8f:6f:c3:63:25:af:87:3a:5d:db:08:9f:
c4:f1:fc:ce:1c:7d:b4:f6:bf:37:3e:2a:55:dc:b5:
fe:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:62:7E:48:DB:B9:6C:3A:6E:35:4E:36:77:24:1E:00:36:B5:4D:2D
X509v3 Authority Key Identifier:
keyid:FE:2E:22:CC:15:85:9E:D4:A0:78:4B:FD:08:58:4B:3C:8F:B2:9F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_i4izBWFntSgeEv9CFhLPI-yn5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf9c10-c85c-4bbf-a25d-8060c503d86e/1/_i4izBWFntSgeEv9CFhLPI-yn5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b3:98:a4:db:e3:4c:77:0d:3e:22:f5:2c:70:61:5b:57:7b:
73:97:38:ed:82:77:6c:b0:a3:f2:ab:93:c3:32:4d:b2:d2:3a:
e6:e7:03:31:c7:a4:5a:b0:76:0a:57:41:99:65:ab:e1:0f:f7:
4d:90:ef:ab:04:ca:7f:9b:ba:8e:99:cf:f3:7a:58:d1:08:1a:
34:76:d6:6f:d8:d9:f8:3a:cf:ee:af:0f:f2:d1:04:8f:47:ed:
9d:72:3b:8b:87:22:9d:61:e4:c0:2d:fa:6f:37:0c:2b:2e:94:
6f:8d:75:b2:36:c8:01:c3:83:c9:c6:bf:04:f4:b1:fa:b1:3b:
ee:53:44:aa:4a:db:17:88:97:47:01:a5:46:a3:57:40:2b:9c:
5e:60:9c:bf:0e:e4:2c:59:f3:12:6f:27:d9:29:64:33:46:41:
a0:72:8f:76:c3:c7:3b:c0:0f:32:fb:29:5d:17:92:33:e5:6e:
bc:d8:29:6c:c8:61:93:d7:b2:60:33:f1:b8:16:82:ea:0f:e8:
64:8b:95:e8:d6:26:7c:e9:ae:7b:25:ec:d5:3c:6c:ad:70:b3:
be:7e:68:ae:20:5f:11:de:78:98:39:9f:e1:80:d9:ff:7f:52:
db:7c:82:e8:11:d2:5c:a9:26:be:60:a7:10:f9:07:bd:c2:bf:
32:2c:94:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:04:29 2025 by rpki-client