Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
File: I67pTQ__bGx1KmlC_6lirjfH5rY.mft (raw, json)
Hash identifier: lQdIUWB7zHyHIreIyl2mhfXdb+3qth2w0BbNJqK4xs0=
Subject key identifier: 04:D8:A4:23:32:8A:A6:7C:FD:0C:4F:3A:D6:37:83:11:65:5E:13:DE
Authority key identifier: 23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
Certificate issuer: /CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Certificate serial: 0198496616A39F700E17EF9E701230CFED79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 01:01:23 +0000
Manifest this update: Sun 27 Jul 2025 01:01:23 +0000
Manifest next update: Mon 28 Jul 2025 01:01:23 +0000
Files and hashes: 1: I67pTQ__bGx1KmlC_6lirjfH5rY.crl (hash: 4z24sLdxSzyIaRQ9P+GhxoH8WmQQefTkRhTYHAxO++s=)
2: gR0LYM6QGI-qsid_nSKtkxsGl7k.roa (hash: ZNyhf/gNov+ZA8ZlWmnXcmM+r4ht/hEtiegrCZhA7GA=)
3: s_AzbY_4r2Y_-4vfgCGonUFbZoY.roa (hash: HgaSiRleH54HgG93gpFtFR8yZx0H4YCH5wCdvkPpECU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:16:a3:9f:70:0e:17:ef:9e:70:12:30:cf:ed:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Validity
Not Before: Jul 27 01:01:23 2025 GMT
Not After : Jul 28 01:01:23 2025 GMT
Subject: CN=04d8a423328aa67cfd0c4f3ad6378311655e13de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6b:5d:37:12:90:0a:55:69:1a:65:a4:c4:a7:
a6:69:36:f4:0d:83:9c:6c:59:ae:f5:7e:e3:d8:49:
54:2e:8a:83:7f:b3:d9:86:1b:b3:fb:97:12:a2:45:
80:57:25:42:e5:cf:c4:ea:2f:bf:26:11:a4:4f:3e:
dd:c9:87:49:ce:27:69:75:d2:71:9f:6d:47:6d:e7:
bd:51:d7:df:5d:0b:ba:d9:22:34:08:a2:f7:aa:88:
4b:5d:67:2b:45:b8:be:9b:18:2e:be:c3:39:21:06:
3a:e7:0a:b6:4d:21:df:f3:90:a4:82:1b:6b:1d:c0:
62:e6:fa:00:8e:48:0a:b7:47:4c:9b:87:41:1c:cb:
0a:8e:c6:2e:61:d0:3a:98:1d:bc:c8:48:3e:d8:cf:
89:a5:fa:39:2a:47:1f:aa:af:68:85:bd:dc:3b:40:
e9:08:de:1a:a2:f9:81:fe:0c:96:76:0c:ac:75:6e:
a1:72:eb:ae:06:ff:51:3b:92:e8:2d:21:5c:34:84:
3c:4c:38:b0:db:13:b4:8e:2f:32:88:3f:8b:3f:2f:
61:3f:8f:86:35:bb:f3:9d:44:e6:ba:78:65:9c:b9:
e3:f7:d1:6e:71:11:1c:46:89:f8:33:c2:bc:50:ce:
70:7b:3c:a6:a8:b1:6f:ca:24:d3:41:3b:5e:68:c6:
32:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D8:A4:23:32:8A:A6:7C:FD:0C:4F:3A:D6:37:83:11:65:5E:13:DE
X509v3 Authority Key Identifier:
keyid:23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:40:17:d8:b0:5c:23:42:b1:22:8e:fe:a1:34:17:cb:06:df:
1d:5f:cd:d3:d8:fa:3e:81:ce:2d:21:fb:cc:7a:d9:71:44:33:
15:60:e2:2e:74:02:6a:19:43:9c:cd:b6:35:d9:89:dc:35:ed:
46:e0:38:41:d7:dd:d0:42:f0:48:56:bd:8e:1e:3f:1e:3d:1d:
30:b8:db:66:ff:48:56:d4:73:d1:3e:6d:df:6f:62:39:44:16:
43:36:3e:e7:51:30:85:8e:d4:b3:e9:d0:bc:c4:14:cc:73:83:
b3:5b:c9:ab:88:49:7b:bf:82:d5:35:39:df:00:39:0d:94:91:
bd:79:49:3f:02:fb:88:ae:81:c3:cc:ae:90:d0:74:a4:d7:81:
e7:f8:b3:54:40:4c:83:35:dc:7f:85:88:fd:bc:e2:00:7c:49:
b0:c7:93:65:3c:85:c9:5a:df:19:6b:27:95:c2:d3:f1:f8:9e:
f0:4c:cf:83:0b:23:0b:49:59:7e:c0:7e:d5:45:04:00:e4:76:
2b:44:ac:cb:70:4b:f8:31:eb:1c:72:2a:1d:1d:24:23:49:e7:
43:f7:f1:9d:ac:6e:20:f7:71:fc:6b:99:86:ef:30:80:93:8d:
86:a2:cd:d7:38:b6:68:5f:70:74:37:15:71:1c:19:24:c7:89:
18:93:a5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:49:25 2025 by rpki-client