Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
File: I15QLDFNUQT3xgzNaXicuEj_Xgc.mft (raw, json)
Hash identifier: WHnicnmCMdFmin3C3JnGAKd4C0IUOx4qAGJJ2mKTiIQ=
Subject key identifier: 3C:DE:98:E8:33:20:CB:48:5A:E1:54:2B:8B:8A:8E:E1:81:DF:42:F5
Authority key identifier: 23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07
Certificate issuer: /CN=235e502c314d5104f7c60ccd69789cb848ff5e07
Certificate serial: 01984A417429830169087AD94BC5B5F8C413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
Manifest number: 0127
Signing time: Sun 27 Jul 2025 05:01:00 +0000
Manifest this update: Sun 27 Jul 2025 05:01:00 +0000
Manifest next update: Mon 28 Jul 2025 05:01:00 +0000
Files and hashes: 1: GLkcEMe4eneYkegJdDsN96p2G5w.roa (hash: a+Y+AIr4ILwMbtFOtGWppkOOeW987wrq4kOZaYCKOMI=)
2: I15QLDFNUQT3xgzNaXicuEj_Xgc.crl (hash: RaAIhuejrWsdr4s6iat9wU5crLwjzeHEG8cr6erEDX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:74:29:83:01:69:08:7a:d9:4b:c5:b5:f8:c4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=235e502c314d5104f7c60ccd69789cb848ff5e07
Validity
Not Before: Jul 27 05:01:00 2025 GMT
Not After : Jul 28 05:01:00 2025 GMT
Subject: CN=3cde98e83320cb485ae1542b8b8a8ee181df42f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:21:80:ab:93:4d:cb:62:ce:eb:39:3a:c3:96:
ca:70:7e:83:59:6f:76:83:63:92:11:2d:7a:ef:19:
65:e8:8c:47:51:e7:3e:35:0e:ba:40:15:ed:82:a0:
a5:82:21:c0:86:83:82:2b:b0:22:ca:c0:f9:9f:ec:
63:6c:89:77:04:cf:df:92:dc:ca:33:26:a8:58:81:
b4:6a:cd:ea:75:aa:9f:a4:34:5e:29:35:56:a5:41:
81:87:9c:10:56:95:59:f1:22:a8:d9:df:30:b2:87:
f2:ec:ba:b5:2a:21:66:94:41:05:23:60:83:1e:18:
d7:03:11:a1:2a:4b:d7:ee:f0:ac:69:49:ba:64:ee:
d8:b7:e5:1f:c2:b6:38:69:bc:e2:35:e3:a1:b3:61:
51:3e:c8:aa:7a:ad:32:0d:c2:57:27:be:1c:b0:9e:
bc:e3:1e:2b:de:f6:4c:e2:23:0d:d4:e2:68:fa:ef:
de:fe:3a:4b:8a:1f:ce:31:67:35:55:7f:81:b1:0f:
20:fa:73:98:48:6b:f2:90:4a:94:75:e7:8f:38:aa:
61:13:07:1c:d0:8a:e9:7e:c3:99:30:a8:a2:f3:9d:
3d:cb:c3:61:e8:be:42:c9:b9:09:eb:58:7f:82:3b:
d2:42:c0:e6:31:27:e4:c8:45:48:dc:ea:87:8c:1f:
55:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DE:98:E8:33:20:CB:48:5A:E1:54:2B:8B:8A:8E:E1:81:DF:42:F5
X509v3 Authority Key Identifier:
keyid:23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ce:bc:25:e9:d6:0d:2f:f7:1c:53:a3:2f:ff:75:55:8b:0e:
cc:92:ba:32:77:fc:9b:e4:04:bb:69:56:ca:c4:0f:cc:10:d3:
ca:21:c9:fc:0e:7c:ec:b3:48:6e:ca:d8:1b:16:01:b9:90:7b:
d0:d7:f1:73:bc:89:ab:24:34:ff:c2:7e:17:17:d5:9a:a7:f7:
a6:46:67:26:18:4c:14:07:5f:b1:84:24:57:b6:69:49:1b:95:
12:84:58:9c:e0:fb:8d:02:bd:2b:ce:84:8f:a3:0d:12:ba:ff:
a7:73:fa:94:00:e6:5c:df:12:3e:82:5b:c4:11:af:7a:f0:91:
97:5f:3e:f3:0b:f0:40:68:ea:bf:07:eb:c1:80:1a:88:61:16:
3e:b9:5b:eb:20:1d:37:df:ce:02:a2:d1:e8:55:11:82:97:f4:
ff:eb:26:ba:db:9d:32:7c:45:af:ab:61:ae:b7:62:40:26:50:
4e:c1:91:53:9f:7c:67:17:28:51:ca:42:64:52:bf:ca:b6:72:
34:7d:a7:62:ab:c3:5e:a9:ea:b2:46:46:3f:96:47:d2:73:7c:
70:ce:c2:35:ed:4a:38:ce:5a:6d:23:2a:66:78:e6:b2:32:fe:
9e:12:f0:8d:74:87:1c:f1:e7:f3:ba:57:52:5a:74:e2:0f:4a:
12:2b:79:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:21:25 2025 by rpki-client