Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
File: i58lgoNRffGYWTiOE7rRrgJopfs.mft (raw, json)
Hash identifier: xdHLPJkGejTRH5tOITttPbds8bXlX1E+tNE7VWA5yPk=
Subject key identifier: 67:53:A2:22:05:0F:07:0F:B6:AD:CD:DC:38:38:00:EE:EC:F0:AF:46
Authority key identifier: 8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
Certificate issuer: /CN=8b9f258283517df19859388e13bad1ae0268a5fb
Certificate serial: 019849D3632159A325246238ACE519FDEF24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 03:00:46 +0000
Manifest this update: Sun 27 Jul 2025 03:00:46 +0000
Manifest next update: Mon 28 Jul 2025 03:00:46 +0000
Files and hashes: 1: aUEo_6I1NIoEpJrfmKA_-34y2x4.roa (hash: qf/pPhy348tojuz4A7OR24KHAsQ8d6peWd65flxSoJ4=)
2: i58lgoNRffGYWTiOE7rRrgJopfs.crl (hash: wXrFzcm8SB32jMe55ZxyFqDOKnqjM2O5Omu7efI3YRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:63:21:59:a3:25:24:62:38:ac:e5:19:fd:ef:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9f258283517df19859388e13bad1ae0268a5fb
Validity
Not Before: Jul 27 03:00:46 2025 GMT
Not After : Jul 28 03:00:46 2025 GMT
Subject: CN=6753a222050f070fb6adcddc383800eeecf0af46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:10:ee:14:fe:2d:26:44:c6:f0:aa:46:0d:67:
b0:0f:a2:8b:1e:72:9f:f9:71:a0:f0:3a:58:d9:bc:
78:0f:f6:32:2d:25:87:3f:88:f3:df:b2:a6:f8:00:
16:97:93:61:77:62:0d:1c:80:6c:aa:d9:7a:a5:18:
75:b1:46:d3:68:4a:86:4e:a8:bc:a5:ac:96:07:c9:
5b:68:80:68:cd:a9:9b:cb:a1:ef:c0:82:53:1e:06:
30:bd:40:19:49:77:d7:84:2c:ae:0e:cb:55:8f:88:
59:d6:e8:0b:33:2e:86:b5:2f:c3:3c:a5:22:58:49:
d9:e9:b7:cd:d7:1c:a7:63:7c:3c:a1:70:6e:6a:30:
69:51:08:fb:96:0a:fd:4c:39:28:72:ed:97:2e:2e:
cc:6b:24:14:af:8e:d0:a6:f8:d7:3e:9e:c8:8f:26:
1d:ed:22:e1:03:e0:9e:75:31:55:55:d2:d6:00:93:
2f:47:13:1d:f1:1b:c0:cf:41:22:34:ce:ee:c6:a8:
6c:23:d6:7a:9e:13:b1:9e:9f:57:eb:91:40:be:ab:
1e:0a:a9:a8:3d:cf:2d:13:10:0f:bb:ff:79:d9:ea:
6b:8a:c4:0b:44:12:83:4d:f5:a4:ce:78:7b:3c:0a:
5a:3c:51:cb:2d:1a:66:34:d6:80:cb:4a:db:c6:ae:
8e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:53:A2:22:05:0F:07:0F:B6:AD:CD:DC:38:38:00:EE:EC:F0:AF:46
X509v3 Authority Key Identifier:
keyid:8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3a:77:8f:75:75:49:9a:6c:94:a5:8e:ee:e6:7d:fd:00:dd:
c0:83:a3:48:bc:f8:65:0a:37:c9:82:0f:79:01:ae:fb:48:18:
ea:77:c3:22:53:db:ba:4f:4d:85:0e:f8:b3:f2:25:f3:ba:da:
ef:11:3f:a2:e9:f1:5d:e7:03:bd:39:fc:45:63:bc:bb:6a:4a:
b0:5c:9f:65:5c:c0:6d:2a:bb:75:40:88:95:13:6f:ca:7b:52:
b9:0a:15:f1:31:fd:34:0b:04:54:ad:3e:5c:00:fd:5a:7a:6f:
c4:8e:a3:5a:b4:11:e9:47:71:b5:ff:c1:55:86:79:b7:08:f3:
9c:06:ac:df:e3:64:06:e2:02:b9:c6:be:ad:cf:b9:68:da:f5:
06:72:11:f5:02:8d:77:60:10:b0:10:1b:59:bf:bd:9f:6d:48:
a0:ec:f0:3a:0e:a5:4b:a2:b9:eb:1c:2d:d0:7c:81:fa:28:13:
48:e2:55:eb:00:96:78:f1:c4:dd:58:a0:b9:97:00:9a:61:c7:
33:aa:a5:57:54:f5:9c:04:c9:1f:3b:61:83:d1:04:47:5a:2a:
20:49:dd:1c:49:b9:eb:47:6e:ce:56:74:5e:e1:72:17:45:df:
35:39:bc:31:1a:45:61:e1:f4:2e:da:58:be:13:24:0d:0e:31:
c7:a1:80:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:32:24 2025 by rpki-client