Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
File: I32X8VCOekR4mfWaVfuKpiQe9RA.mft (raw, json)
Hash identifier: 48JN8qPdCStByjxAhB0dqqFI6Or8wAD28OSj5o5NXu4=
Subject key identifier: DC:E3:00:36:7B:6B:7A:42:64:30:7C:05:6E:EB:5D:FE:8F:4A:1D:31
Authority key identifier: 23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
Certificate issuer: /CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Certificate serial: 019849D3509931807D672FF68CC5080CCD3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
Manifest number: 048D
Signing time: Sun 27 Jul 2025 03:00:42 +0000
Manifest this update: Sun 27 Jul 2025 03:00:42 +0000
Manifest next update: Mon 28 Jul 2025 03:00:42 +0000
Files and hashes: 1: AgvVH_Z5ZikBFIUyEGB_f4ftLfg.roa (hash: Ii6l1o1UjR6zsFk/Ik5xPFxEIQrzvV/YcOC6UeUTh7g=)
2: I32X8VCOekR4mfWaVfuKpiQe9RA.crl (hash: dtx/i8o1os67wi3Ry5tUhe1hjl03dMyntdzC9nIqAMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:50:99:31:80:7d:67:2f:f6:8c:c5:08:0c:cd:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237d97f1508e7a447899f59a55fb8aa6241ef510
Validity
Not Before: Jul 27 03:00:42 2025 GMT
Not After : Jul 28 03:00:42 2025 GMT
Subject: CN=dce300367b6b7a4264307c056eeb5dfe8f4a1d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:08:b3:3a:c9:f5:7e:8e:bd:f9:ec:2d:1a:
93:21:ee:0d:f2:40:48:6a:af:13:aa:80:b6:13:79:
a7:9e:89:7a:f6:8c:4d:8a:de:8b:7b:0b:8f:6d:0c:
5f:cb:e5:a7:12:53:6e:02:c4:4a:cb:6a:9b:1e:18:
eb:f7:41:a5:8a:32:fc:9e:2c:43:72:bd:bf:8d:0d:
15:40:eb:3f:5f:69:a8:29:b3:2e:cf:f1:cd:79:cd:
07:fd:4a:74:53:e9:bd:9e:02:64:4a:2b:a7:19:f8:
28:ce:31:51:16:a5:1e:5f:f8:49:00:9d:3b:a6:60:
5d:51:d8:3e:64:5b:de:29:8b:3f:4e:be:1f:26:de:
4c:1b:be:52:c7:dd:55:8b:9e:25:0c:44:b0:aa:e7:
db:a7:e0:8c:3a:d6:65:35:49:91:26:63:e2:55:b0:
4a:e1:e0:89:b4:45:e4:3e:c7:f8:54:16:93:4a:1b:
99:2d:87:bc:ad:0c:7c:b4:8f:80:37:c4:c5:6c:f4:
67:f8:96:7d:93:21:c8:73:a2:fd:b2:c4:e8:2f:94:
80:28:52:4a:21:7c:ed:86:06:71:db:b2:b8:52:ee:
7d:10:dc:3e:89:8a:5e:23:0a:f5:22:3f:b8:ef:bb:
4e:7f:94:07:11:6c:fe:b2:e0:81:47:64:7c:49:a3:
01:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E3:00:36:7B:6B:7A:42:64:30:7C:05:6E:EB:5D:FE:8F:4A:1D:31
X509v3 Authority Key Identifier:
keyid:23:7D:97:F1:50:8E:7A:44:78:99:F5:9A:55:FB:8A:A6:24:1E:F5:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I32X8VCOekR4mfWaVfuKpiQe9RA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f503d7-1fb6-4370-b44f-44a41a93113e/1/I32X8VCOekR4mfWaVfuKpiQe9RA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:82:61:a1:dc:0f:e8:77:e4:a6:e5:7d:33:6f:74:e0:21:77:
e4:8e:58:0b:d7:90:c0:32:1a:a3:3d:26:d4:4d:cd:27:44:92:
6d:03:c0:aa:0a:41:7c:10:49:03:c8:d2:de:18:30:5d:fd:12:
52:40:95:02:89:cb:a3:73:8b:7c:9c:8d:02:84:00:4f:4c:63:
d7:64:83:77:e0:bd:f1:71:38:2c:20:90:4d:1e:f5:f7:4f:05:
6c:5f:b3:61:dd:7a:4e:c9:84:1c:5e:39:57:dd:b2:d5:ed:22:
22:65:7e:98:82:e3:95:35:9f:79:e8:8d:c7:c3:39:3f:d6:f8:
7e:42:33:cc:24:5c:a9:09:dc:70:9a:5b:00:86:2c:39:7c:4b:
0e:ef:54:4f:ff:22:52:95:95:0a:f1:19:e8:68:b5:dc:96:a6:
e2:48:54:91:1a:84:a6:13:0c:ae:9f:c4:02:ca:19:1e:9d:4a:
d8:38:a9:21:39:9d:86:70:b1:1d:b5:55:46:43:f3:f4:d3:42:
7b:1d:bc:f4:b4:87:b7:75:df:4f:ea:2b:c9:d8:3e:32:3a:77:
db:93:b8:f8:49:0f:ef:43:cc:3a:fb:f4:18:80:ab:e6:c8:4d:
88:76:81:38:86:da:70:b8:e9:bb:bd:8f:27:24:20:8e:22:be:
27:0c:f3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:30:46 2025 by rpki-client