Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
File: I90F63vZRcZd8Yc1UtzJDLLhdyM.mft (raw, json)
Hash identifier: ZymvExdcXGTL04J99D7hcwtbrEB13cvKJ8Oyjsa83rc=
Subject key identifier: 6E:8E:A1:26:90:9D:C8:FD:35:C6:0D:7E:EC:A8:2E:BA:5E:23:1C:92
Authority key identifier: 23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
Certificate issuer: /CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Certificate serial: 0198432C424355156207C0F5237BEC27ACEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
Manifest number: D4
Signing time: Fri 25 Jul 2025 20:00:30 +0000
Manifest this update: Fri 25 Jul 2025 20:00:30 +0000
Manifest next update: Sat 26 Jul 2025 20:00:30 +0000
Files and hashes: 1: I90F63vZRcZd8Yc1UtzJDLLhdyM.crl (hash: x+x5IDT4B7qbJdtmY0AGF6/dFHj6vhKyKuZDvVWNHaU=)
2: jS5n1QIkV5a4mMLNQcvKPtlrQ-M.roa (hash: lelwm9WsLrqz4fINUrusZCHF/wAouDsWxQ/qaZbxy6o=)
3: kt9kY-16BQ4necIVFRgAtvjd9vU.roa (hash: 66gMsyaOtysX+kjpi4hM+Oe5TYeIKMy84VcIEuNL1pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:2c:42:43:55:15:62:07:c0:f5:23:7b:ec:27:ac:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Validity
Not Before: Jul 25 20:00:30 2025 GMT
Not After : Jul 26 20:00:30 2025 GMT
Subject: CN=6e8ea126909dc8fd35c60d7eeca82eba5e231c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c3:b6:e0:3c:cc:03:fd:ac:b8:ae:9c:9a:be:
72:f9:25:3b:24:c4:5b:04:ff:ce:f3:3e:4c:1e:e5:
04:03:09:84:ea:86:c9:80:1b:a9:35:80:d4:6a:a4:
f3:41:88:1a:58:da:22:af:bb:12:62:99:4d:06:a3:
2d:31:f4:78:49:63:33:25:ed:6b:11:20:df:f1:d6:
56:ad:88:c1:64:db:29:df:84:a7:65:f3:e1:e8:5e:
04:72:5f:55:7e:e1:90:93:a1:59:20:a5:b6:fa:f6:
16:45:9d:78:e6:85:c2:47:12:26:3e:03:3c:d5:b1:
98:98:8a:de:7f:55:ec:4b:72:8f:da:2b:eb:92:26:
94:e0:b2:c1:d3:10:77:19:1b:0d:14:4a:88:06:47:
83:b9:b2:34:6c:43:11:a1:6a:7e:1f:86:bc:9e:f6:
42:5d:0b:fd:2a:f1:5c:78:85:82:59:c5:73:c0:57:
13:4e:0f:98:d1:03:d1:fd:c7:17:df:e4:1f:26:1e:
42:63:6a:97:df:65:ca:02:57:cd:bd:c5:68:21:58:
45:da:86:fe:22:5e:84:85:49:09:1b:36:00:ee:6e:
00:52:e8:12:bf:b7:55:d4:d5:0d:9d:93:ee:41:de:
24:25:77:bc:2a:a6:d8:95:fa:ce:b0:e4:0c:9b:af:
5f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8E:A1:26:90:9D:C8:FD:35:C6:0D:7E:EC:A8:2E:BA:5E:23:1C:92
X509v3 Authority Key Identifier:
keyid:23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:6a:97:e5:50:67:8e:80:86:ea:d8:c3:6f:25:90:e4:86:8b:
67:d1:84:6e:7b:66:96:b9:2a:42:0e:d3:8b:49:67:a3:63:8f:
1e:cf:62:b7:2b:da:f7:fa:0c:bb:3e:21:53:75:ee:8d:25:ba:
78:91:3c:e9:db:a2:86:7e:e2:2d:56:12:a2:f0:8a:72:e3:7c:
55:a8:c9:09:ea:56:8c:ef:07:b2:28:00:ca:74:61:ad:8b:a8:
b1:ca:db:5d:3b:13:04:8c:b0:64:55:f7:04:a0:57:a6:02:ad:
e6:62:18:04:d9:bd:d1:6c:9c:84:3c:90:0d:a4:7a:5a:e8:9a:
7f:66:69:eb:1e:51:59:da:90:0b:ee:b3:e1:0c:65:6a:e2:b7:
f1:bd:d2:69:5d:56:a4:ac:c5:76:0d:b5:15:b6:4b:02:0d:2a:
7b:24:39:63:1f:72:90:ac:cb:c0:fd:50:17:ad:44:ec:e4:e9:
8e:43:6c:fb:b3:2a:c8:5a:dc:ea:ae:06:3c:d6:74:59:49:ef:
49:b9:15:37:a9:ab:51:4b:95:48:95:aa:20:41:6f:32:25:4a:
2d:70:44:e8:5d:40:38:5e:34:a7:ff:d4:fa:1d:be:c8:29:74:
0b:bb:2d:dc:06:da:b7:5f:b0:63:92:29:a2:05:57:fd:c6:4a:
9c:2f:f2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 05:32:36 2025 by rpki-client