Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
File: I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft (raw, json)
Hash identifier: +8n3/TZNED/d35lfoiP8jQetuCTmOdOxGDnf7mNS6Dg=
Subject key identifier: CE:0F:CD:C9:FD:26:68:56:23:AA:BC:0D:8D:15:36:9B:0F:24:F5:A8
Authority key identifier: 23:51:63:D3:9D:B8:88:16:CD:DC:59:7A:5D:B5:EA:E7:07:D3:DE:39
Certificate issuer: /CN=235163d39db88816cddc597a5db5eae707d3de39
Certificate serial: 0198499C419F1B8FDBE97906068B1C12E1F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
Manifest number: 1607
Signing time: Sun 27 Jul 2025 02:00:33 +0000
Manifest this update: Sun 27 Jul 2025 02:00:33 +0000
Manifest next update: Mon 28 Jul 2025 02:00:33 +0000
Files and hashes: 1: 0w9FBc0vTYSPsjAWKJJCnffXw-k.roa (hash: jLDk0IcPs8Pb9A807RQu6H+l6FnV9GFyw8DjOzzYbaA=)
2: I1Fj0524iBbN3Fl6XbXq5wfT3jk.crl (hash: K44MM6I+3XjvGx6r5gWPRYD+s/tTGGdkbSr4/uPnsLM=)
3: gKeAQqo6LHoqnf4Vl-8HYj5MieI.roa (hash: SOGNQLrBgWGkjZGYc/wKjLGsnvGnOrdebSHsTRsYQCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:41:9f:1b:8f:db:e9:79:06:06:8b:1c:12:e1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=235163d39db88816cddc597a5db5eae707d3de39
Validity
Not Before: Jul 27 02:00:33 2025 GMT
Not After : Jul 28 02:00:33 2025 GMT
Subject: CN=ce0fcdc9fd26685623aabc0d8d15369b0f24f5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:90:f2:c9:c5:cc:6d:36:83:e8:f8:6d:ee:00:
99:18:5b:57:1e:2f:6f:75:0a:29:8e:95:60:92:32:
a0:68:ed:83:2c:2d:af:d0:18:dd:ff:fd:e2:b0:25:
bb:ea:19:b6:1f:c1:7f:bb:2e:2c:02:e3:34:d8:f6:
6c:f3:ea:57:ff:c2:5f:88:76:b2:12:3b:20:1b:bf:
0e:df:96:75:92:3a:bc:02:49:01:7c:6c:00:61:83:
d5:ed:43:eb:24:0e:18:e8:3e:75:1e:5a:46:27:71:
61:89:8f:c2:24:dc:93:38:d4:cf:c0:29:79:3c:e2:
f9:23:72:f6:37:41:85:5e:84:df:9e:2d:6c:84:80:
61:3a:67:27:50:eb:51:02:56:26:38:a7:42:1d:82:
5b:af:6d:b3:81:11:5e:9e:4d:28:66:6c:d1:99:29:
a4:cf:31:18:a9:b1:88:26:0a:12:6f:65:05:16:b6:
63:5a:5f:da:c3:d4:23:be:a7:0f:9a:d2:97:2f:ba:
0d:fc:d1:49:65:e5:a6:d3:18:95:ef:70:04:ad:44:
64:76:e1:44:55:fd:ff:4f:e5:f4:24:d7:7c:83:79:
63:e3:72:31:b0:c9:f3:92:c7:b1:e6:ac:4e:5c:fb:
bb:37:21:e3:12:ac:a3:fc:55:ae:2c:e2:cf:44:1c:
f4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0F:CD:C9:FD:26:68:56:23:AA:BC:0D:8D:15:36:9B:0F:24:F5:A8
X509v3 Authority Key Identifier:
keyid:23:51:63:D3:9D:B8:88:16:CD:DC:59:7A:5D:B5:EA:E7:07:D3:DE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:65:8c:b2:8e:c3:b3:cf:a1:e9:70:7b:19:42:3c:54:74:68:
a2:bc:67:91:b3:c1:2a:8e:d3:5a:7e:f9:9c:ab:b9:4c:12:1f:
35:a5:7d:7e:d4:a8:15:a5:51:4a:04:b9:de:9c:d5:b8:04:2a:
25:9c:0e:60:d5:20:cc:10:4a:7a:71:57:08:6e:b9:ff:b9:3f:
78:36:b3:3a:08:46:f4:67:f1:c3:b9:bb:65:29:2e:84:da:22:
28:9d:27:1b:cd:b5:1d:ea:bb:b2:59:3b:f1:2e:56:a9:5b:6e:
c5:8a:c6:62:3c:07:4e:a4:54:ec:b3:a9:98:17:d0:65:d4:c1:
52:7c:ac:78:55:8a:ac:8f:6b:b0:9c:e2:59:f8:75:ba:70:19:
66:d0:c3:74:fa:47:e8:30:dc:90:47:63:69:bf:7c:fe:f7:9c:
42:83:7d:d7:9e:7e:7a:32:c6:fa:9c:7f:a6:33:58:d8:b3:2a:
cb:f3:7c:1c:7e:50:cc:d8:6d:62:73:6c:15:30:96:70:bd:50:
34:f7:f4:02:93:4e:a0:f1:56:29:58:69:cc:72:05:f2:f9:ce:
69:67:48:2f:4c:e5:1e:8f:07:6f:17:2e:df:62:17:a5:60:2c:
d6:db:2a:0d:80:c8:46:92:99:b7:86:7e:ae:ba:7f:14:33:41:
10:e0:d0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:08:50 2025 by rpki-client