Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
File: i5zFfKhHI67ChBFF9vfTAb3zW6w.mft (raw, json)
Hash identifier: o32rveg5x+AG/TLJp3tacyx0atSgYwBmCpcBnranq2k=
Subject key identifier: 92:EA:09:C1:64:BC:D9:32:23:67:39:F5:10:DD:C4:75:AB:73:7F:F8
Authority key identifier: 8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
Certificate issuer: /CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Certificate serial: 0198353A1BCF10CE3E3BE365B6E51FA9286B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
Manifest number: 0425
Signing time: Wed 23 Jul 2025 03:00:57 +0000
Manifest this update: Wed 23 Jul 2025 03:00:57 +0000
Manifest next update: Thu 24 Jul 2025 03:00:57 +0000
Files and hashes: 1: i5zFfKhHI67ChBFF9vfTAb3zW6w.crl (hash: V+s744GN10Q8M02E8g8M3ihAU6HSIGMO0VA9EvTtxFY=)
2: tCW9fwISpjkcZibIaKBsjXs7N7A.roa (hash: NwxiC6aogmrL5itM5Y4be2nBp9O9LLOH8w2QrDP5u38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:3a:1b:cf:10:ce:3e:3b:e3:65:b6:e5:1f:a9:28:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9cc57ca84723aec2841145f6f7d301bdf35bac
Validity
Not Before: Jul 23 03:00:57 2025 GMT
Not After : Jul 24 03:00:57 2025 GMT
Subject: CN=92ea09c164bcd932236739f510ddc475ab737ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:97:56:fd:37:4f:e8:c8:69:9d:11:f1:65:48:
51:5d:38:fa:e9:dd:b6:74:ba:6a:0b:df:6c:40:5a:
e2:9f:5b:ed:78:a2:a9:01:62:27:5b:a6:b1:99:81:
fb:99:9c:0b:5a:46:93:78:1d:cd:a8:cb:23:b9:91:
05:f5:37:d6:50:df:bc:ec:ec:8c:3d:3c:4d:93:82:
e5:53:18:f2:fa:c3:ee:10:de:09:f9:16:8a:d0:ad:
52:4b:3c:81:f6:b1:07:cd:7d:87:12:0b:9d:5e:ee:
4d:f8:96:9e:49:31:a6:0d:13:1f:8c:36:ff:4e:2e:
94:03:96:1b:e0:bc:4f:fa:94:06:1a:9b:e3:38:c5:
cb:5d:d5:4f:ac:e3:19:72:29:3f:e0:23:72:a8:30:
06:a7:35:09:d1:00:d4:ea:a8:c3:ec:f9:fb:31:9b:
b4:1e:fe:df:93:0e:c5:b7:6c:05:26:09:87:18:8e:
6d:94:95:9a:69:4a:f0:cb:7e:0a:76:80:9a:d8:5f:
a5:d4:f3:67:43:9b:de:32:9f:df:96:2b:e7:85:6d:
80:b1:c5:43:1e:5b:d1:af:eb:11:16:7c:04:5f:49:
19:89:4a:8e:f1:9b:d0:a8:58:1d:c8:92:8a:8e:c9:
25:5b:13:fb:d3:2b:ce:7a:f3:34:5d:58:0d:ef:7d:
97:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EA:09:C1:64:BC:D9:32:23:67:39:F5:10:DD:C4:75:AB:73:7F:F8
X509v3 Authority Key Identifier:
keyid:8B:9C:C5:7C:A8:47:23:AE:C2:84:11:45:F6:F7:D3:01:BD:F3:5B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5zFfKhHI67ChBFF9vfTAb3zW6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/38e6f7-4e35-4c2d-9977-097cb8df2a24/1/i5zFfKhHI67ChBFF9vfTAb3zW6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ac:73:7d:1e:e1:61:79:10:88:48:0b:06:82:7a:9a:85:42:
a6:61:fc:0f:6e:22:af:cb:3a:5b:3a:bc:8a:b6:78:58:c8:6e:
9f:e2:9e:b8:72:08:cb:46:64:68:c8:94:b1:ab:c4:86:aa:7c:
a3:af:81:8e:51:a4:d0:76:a2:b3:d8:11:5f:8a:09:1f:3a:4e:
4b:be:66:bb:85:86:f4:df:73:a9:6b:69:bd:5b:bf:87:c5:c7:
fb:0f:84:57:b8:e2:7a:50:89:29:32:5d:1c:83:0d:31:db:f9:
7b:a3:a9:68:00:45:48:07:25:22:f4:ef:4b:3f:b8:49:6c:98:
ac:8d:76:ba:35:c9:98:c6:17:bf:1e:c4:30:b1:17:bc:67:78:
71:2e:99:b5:c4:24:e3:06:37:cf:b8:be:71:bf:a6:50:a8:a6:
0b:d0:64:ff:08:05:b5:2c:8f:de:8d:6e:6a:4f:0e:41:fe:69:
18:a2:08:dc:6a:88:2e:57:43:18:6c:73:79:8b:01:61:80:f1:
93:2c:a1:bc:90:20:d1:f9:05:71:04:18:f4:19:14:7f:2a:b2:
e5:8a:af:fa:a6:c0:43:a6:38:64:88:f5:c2:2c:2e:fa:9b:8e:
a9:20:98:6e:e3:c7:0c:3c:b0:a5:27:3e:42:b7:7f:51:e9:db:
8c:5a:cf:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 13:04:25 2025 by rpki-client