Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
File: I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft (raw, json)
Hash identifier: pbcqbWUDtNd+R6kXaf8NR/bPNowTku8Bhr8GXyP0E3Y=
Subject key identifier: 07:49:6B:5C:C6:A2:FA:0D:2D:0D:83:AF:4F:6D:AF:C2:62:8B:3A:46
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 0198402B3D0AFE38ED14FE61592F04248635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
Manifest number: 09C2
Signing time: Fri 25 Jul 2025 06:00:32 +0000
Manifest this update: Fri 25 Jul 2025 06:00:32 +0000
Manifest next update: Sat 26 Jul 2025 06:00:32 +0000
Files and hashes: 1: FSsZO7tf2uyGI_GTm9rqM0qzwyo.roa (hash: +N02NDT8cxwi6khKovC14z/AE2KwVw5IVFU5XCAAiJs=)
2: I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl (hash: mhWZYI512861IzLvX0BaDzXCIky9cMfKVXh1yjBLNNE=)
3: pGnzHT17oa6cGFgaKh_Mb1gg4HU.roa (hash: tnbr1e3XQydvlzjAP3o8eDkS1HDgrVPM/kErIEuP+f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:2b:3d:0a:fe:38:ed:14:fe:61:59:2f:04:24:86:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Jul 25 06:00:32 2025 GMT
Not After : Jul 26 06:00:32 2025 GMT
Subject: CN=07496b5cc6a2fa0d2d0d83af4f6dafc2628b3a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:57:1a:de:38:5a:25:cc:1c:0c:15:f3:c7:e9:
5f:00:cd:ab:d0:09:95:57:6b:83:87:f6:fe:fb:37:
0e:fb:cf:17:3e:1e:83:86:d8:51:9a:ab:61:52:8a:
18:12:da:dc:3d:35:eb:10:83:1e:86:8a:97:86:49:
56:7b:d6:93:fa:f7:94:f7:e3:bc:f3:0c:40:31:1b:
1e:cc:f4:75:47:a6:15:30:78:44:ce:13:27:ce:f6:
14:2c:57:c8:00:30:7e:4b:53:9a:3d:c1:83:de:87:
d1:60:4d:17:9d:a1:fb:1e:6e:23:71:1a:a9:fa:a8:
b6:a3:a4:01:9b:af:b0:a1:df:6d:54:57:a0:94:83:
db:b9:62:7c:20:e6:a0:90:5b:6f:d2:bb:1f:51:53:
83:2a:ad:39:b4:d0:eb:d8:3b:0f:5f:74:81:3e:76:
c9:2f:71:a3:e5:47:fa:ed:ee:03:b3:a9:07:ee:88:
0a:f8:23:f5:ae:cc:10:91:d2:1c:86:ef:cb:c3:b8:
98:d6:67:9c:d0:62:ab:f0:46:0a:ae:5c:ca:93:99:
17:15:e4:12:0b:45:1a:0d:ea:6d:7d:63:90:cb:2d:
02:75:52:a4:fb:ef:3c:26:07:ce:b1:71:4f:e8:1b:
0f:be:99:ab:40:98:c1:d6:86:82:56:67:62:e6:18:
22:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:49:6B:5C:C6:A2:FA:0D:2D:0D:83:AF:4F:6D:AF:C2:62:8B:3A:46
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a7:8e:37:91:e7:f4:b0:23:7c:19:68:ac:14:7e:bd:34:53:
1e:ad:08:89:da:95:3c:f1:ae:d9:8b:1c:a8:e2:d3:c2:1d:4f:
c5:b1:db:8c:7c:f1:8c:4b:21:66:1a:3c:78:bf:5d:8e:1a:4b:
78:8e:46:0d:ce:e5:a8:e5:19:63:a8:ee:49:8b:b0:62:17:3c:
fb:ce:59:31:82:4d:2d:97:d4:99:e5:5e:96:1e:8c:1e:13:fc:
f5:40:7b:ee:e5:4e:d9:6b:36:0f:96:e9:eb:d6:19:1c:6d:2e:
42:1d:5f:0b:9b:79:39:71:ef:83:05:4d:77:4d:4e:50:e6:b2:
b9:d7:f6:35:6f:cc:8c:23:08:78:a2:ef:3d:ba:f3:09:2c:e4:
ad:ce:fb:71:ae:04:90:72:06:e5:86:ed:f9:7e:ac:e6:ec:8e:
43:84:d3:eb:15:46:cb:ba:60:07:4e:ad:a8:8d:24:8e:5f:59:
14:0c:4f:1e:18:d8:ac:a6:2d:22:3a:89:2b:76:ff:d9:ec:0c:
4f:f4:d3:2f:5f:9d:cb:2d:27:f1:5f:dc:15:ca:e8:b5:13:c3:
da:48:a9:83:7b:6e:75:07:38:d5:5c:f5:26:92:8d:17:3a:24:
8f:f0:c3:b7:68:89:49:7b:b0:6d:d2:db:37:eb:77:ee:05:e2:
08:38:60:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:41:46 2025 by rpki-client