Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
File: i9S8vzXbf-LvZjUipaOjl5pPH_g.mft (raw, json)
Hash identifier: p2ezz0jSJau9tj+p30vaJ0/7WnqMnEf7oUjOp4Rs0G0=
Subject key identifier: ED:EB:DC:09:6E:7B:7F:B4:24:03:1F:4E:74:FF:D0:00:31:E9:B4:22
Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
Certificate issuer: /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Certificate serial: 019848F793766435B9F800CF1E91041A0A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
Manifest number: 13CD
Signing time: Sat 26 Jul 2025 23:00:41 +0000
Manifest this update: Sat 26 Jul 2025 23:00:41 +0000
Manifest next update: Sun 27 Jul 2025 23:00:41 +0000
Files and hashes: 1: 1-_88t3hetlFBanVHA2DU4QOnOb4.roa (hash: latlaUAnjm2YfCy+iquDacPIbXwTYbtI55yE63hF5qU=)
2: 9bvrYkBqiqKMnn8_sup9wHDDvAw.roa (hash: OmLw4QBgjy48HSO5mm8k/HJy6DwFgzHoft0ePJqTlrs=)
3: i9S8vzXbf-LvZjUipaOjl5pPH_g.crl (hash: pWUVxzzDbXA7d0yfXQC/1azdBY4BSH2dmqw5rkJsFRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:93:76:64:35:b9:f8:00:cf:1e:91:04:1a:0a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Validity
Not Before: Jul 26 23:00:41 2025 GMT
Not After : Jul 27 23:00:41 2025 GMT
Subject: CN=edebdc096e7b7fb424031f4e74ffd00031e9b422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a1:37:d0:39:ba:18:ce:0e:bd:a7:df:cf:5a:
62:a2:f6:a3:2f:d5:5e:cd:1f:ae:05:55:6d:3d:9f:
da:c2:e8:1c:f9:7f:23:c7:90:10:3c:a3:f8:b9:0c:
e5:04:92:8f:36:8a:7f:e7:93:ef:b8:16:cc:b5:ca:
4f:95:94:ef:e8:15:c4:73:b6:e9:8d:e6:a2:d8:d3:
39:d1:21:05:41:92:8b:72:06:09:14:45:74:04:6f:
70:70:09:26:8b:19:52:84:f5:a7:0c:bb:ed:79:b5:
ba:d8:e5:37:85:b6:d9:7a:91:23:4e:e3:56:7e:b8:
12:e5:cd:12:e2:69:84:c4:28:08:9e:c7:98:15:4e:
8c:a5:da:9e:1b:56:b2:1a:dc:9c:49:c9:bb:7e:5e:
ff:0e:3a:8e:d8:24:8d:ab:45:72:dd:c0:03:6e:e0:
70:c8:ac:37:33:f4:62:66:e9:c3:38:24:ed:00:bd:
6d:ee:50:8a:03:0f:3e:4a:9d:17:51:25:0f:6d:2b:
e0:e1:3b:3e:ee:b0:c0:80:ae:f5:89:29:07:0d:61:
82:61:3b:fe:50:3a:3d:89:94:9d:7e:85:cf:8b:39:
a7:3a:8d:a7:2c:ae:0b:0b:4e:09:dc:82:5b:b3:49:
8a:5a:6f:65:f6:49:32:88:f0:84:38:45:bf:28:6e:
46:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:EB:DC:09:6E:7B:7F:B4:24:03:1F:4E:74:FF:D0:00:31:E9:B4:22
X509v3 Authority Key Identifier:
keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:3b:05:86:37:65:f8:1f:66:8f:8e:ea:22:a7:5e:8d:4f:b9:
36:e3:f2:bf:1e:a4:e5:8e:01:e3:af:9a:3a:ac:8e:b3:31:1c:
92:39:d6:29:45:94:62:d0:49:a9:2b:99:a3:78:cb:06:a0:d1:
f9:b2:20:84:52:dd:53:5b:10:d3:b0:68:c7:3d:15:6d:d2:fa:
aa:7b:d5:c8:44:aa:35:10:f2:6b:cd:94:76:55:18:eb:f0:66:
74:6c:fa:c3:62:28:df:e1:f1:54:45:78:3e:92:36:72:a7:4c:
a6:60:7d:77:35:65:aa:25:b6:e8:b9:e5:e0:20:c1:5f:90:93:
ba:70:dd:be:47:3a:59:a0:5a:61:b9:b6:d8:9b:96:0c:c4:f9:
ce:f8:2c:56:5a:2d:a2:cc:e7:eb:43:7d:a0:f5:14:93:24:ff:
6f:61:16:ef:d0:90:56:c2:fd:2d:84:35:57:c2:a0:2c:fc:d3:
c2:93:c4:ce:49:bd:40:cb:ad:9f:5f:f5:64:57:2c:eb:e0:96:
c5:c2:2f:46:8b:55:83:d1:b9:6d:91:6c:68:fb:60:55:02:f8:
22:77:c7:24:f0:c7:25:22:e0:49:f2:e8:18:e6:df:14:98:b2:
0a:7c:6e:00:a7:05:9d:8f:e4:0b:ce:cd:2d:f7:21:ba:d2:4f:
23:51:42:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:01:46 2025 by rpki-client