Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
File: i96i1KsTgPCjt_59T6eCjhyUNVg.mft (raw, json)
Hash identifier: r4QTxiGufDiQ21vAYiqviDvo7tC+smzpPn87Y1HQXR4=
Subject key identifier: 4B:38:B4:E6:28:85:06:6B:CF:A6:94:F5:5E:45:F3:F9:C9:26:2E:DC
Authority key identifier: 8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
Certificate issuer: /CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Certificate serial: 019842F4FB83F0DE417707923591CAA443AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
Manifest number: 15FF
Signing time: Fri 25 Jul 2025 19:00:08 +0000
Manifest this update: Fri 25 Jul 2025 19:00:08 +0000
Manifest next update: Sat 26 Jul 2025 19:00:08 +0000
Files and hashes: 1: CXV5h4NnxextID8ps-zs1B6iIxg.roa (hash: H0fWCwenw+LaQh1zQTvHX9xYl9ZHHPd/qzueTxfRIcY=)
2: i96i1KsTgPCjt_59T6eCjhyUNVg.crl (hash: QGb7gtE/yEa91Y1FZxHDPNtx63tzGHK7VmIf1nz7KOU=)
3: uXuzZdEmcXhnurqd_jWF8YOUHrw.roa (hash: 0tKKSAqCxTZYYBM2R7eXZ3g3GCiHz3+8Vn0Oldh70rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:f4:fb:83:f0:de:41:77:07:92:35:91:ca:a4:43:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Validity
Not Before: Jul 25 19:00:08 2025 GMT
Not After : Jul 26 19:00:08 2025 GMT
Subject: CN=4b38b4e62885066bcfa694f55e45f3f9c9262edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:04:b2:c1:8f:9a:79:f1:72:98:e1:ec:bc:ec:
53:34:54:64:60:b3:4d:39:0b:29:b9:12:79:86:c4:
b3:09:cd:5d:da:51:39:01:9b:31:bf:e1:f7:ec:af:
ec:78:70:f7:36:01:7e:91:c4:3b:2d:4e:ea:04:20:
f6:30:bf:fd:a5:e2:e7:31:1d:5a:4d:fa:4a:59:02:
ec:f9:76:98:e1:2f:27:ae:e6:a3:e7:ba:f9:49:b5:
cb:13:8c:09:64:8f:79:c0:37:9c:e1:5a:fa:2d:83:
83:d5:c7:d3:e7:d6:a1:6b:9e:cb:53:74:a4:95:ab:
64:c0:bf:76:6e:8c:ef:5a:c1:f8:76:c0:80:10:39:
5e:4e:b9:34:d8:85:25:ff:8f:64:ad:a9:a8:17:13:
e7:43:da:9a:1a:61:b1:ec:55:39:7d:1a:eb:da:e5:
8b:1d:5a:19:43:1c:d5:20:ef:e0:ff:3b:f6:44:3e:
7c:b5:ad:1a:40:73:4e:7c:54:f6:a2:cd:0b:54:85:
30:65:a5:d6:f0:8c:60:cb:a4:e7:6e:17:ed:9b:dc:
fe:2c:d9:97:01:2e:10:8f:b4:36:e1:64:74:7e:5d:
4b:46:3c:95:31:37:9c:9f:11:c7:87:9b:9c:7a:0e:
1c:a7:00:cc:2d:80:78:18:3c:b0:66:23:8d:03:83:
85:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:38:B4:E6:28:85:06:6B:CF:A6:94:F5:5E:45:F3:F9:C9:26:2E:DC
X509v3 Authority Key Identifier:
keyid:8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:33:9b:f6:c1:9c:58:3a:9e:64:f3:64:d3:6c:1c:2b:d8:f8:
34:70:72:ba:4a:29:2b:18:a4:a8:15:00:1b:45:9c:42:26:b9:
04:dd:38:86:c6:f7:4b:52:ea:61:5e:45:9f:8c:b5:37:c8:1d:
54:e1:f3:37:99:96:2c:aa:49:55:18:6f:62:ca:d1:14:f3:2d:
1a:80:ef:34:e1:f7:d9:85:ed:28:f2:78:06:9e:90:5b:d2:d9:
33:19:52:dd:b2:98:52:e9:2c:b8:7f:4e:01:25:f6:f3:43:87:
ca:d0:a1:18:68:ab:b8:0e:c6:24:71:9c:66:de:2e:87:d0:d7:
be:55:fb:05:e6:80:cb:a3:b9:d1:fc:25:a2:23:0e:bd:0c:61:
1e:1a:f6:20:42:fe:e3:e5:b7:aa:6b:82:a4:6c:55:47:d3:be:
7e:39:30:d8:cf:51:45:f1:27:d1:a7:46:ab:7e:ab:65:eb:60:
51:a1:21:36:a3:98:8d:fb:39:ca:43:94:8b:c0:b2:65:cf:22:
5e:27:67:36:75:f2:96:77:44:e7:eb:00:9a:6e:20:41:22:40:
34:09:56:f1:ec:2e:a6:5f:d3:73:3c:86:75:8f:04:6e:25:cb:
5b:5c:d0:54:ed:d4:58:ad:42:72:be:87:a7:76:07:39:44:c6:
60:09:86:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:24:38 2025 by rpki-client