Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
File: i024ekl6Fbp5pwbRLukExESdG1U.mft (raw, json)
Hash identifier: u/L6fTl4vFgBnvwhwLTyIgSjuyajExJJmo+lJqOidaA=
Subject key identifier: 12:46:33:0B:08:23:71:96:CC:CE:5A:7A:82:AD:DA:F1:D3:EE:9C:D0
Authority key identifier: 8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
Certificate issuer: /CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Certificate serial: 01984A0A061ED8161DBBBBBF2CDE99C9F0CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
Manifest number: AF
Signing time: Sun 27 Jul 2025 04:00:27 +0000
Manifest this update: Sun 27 Jul 2025 04:00:27 +0000
Manifest next update: Mon 28 Jul 2025 04:00:27 +0000
Files and hashes: 1: Mf_fXP2jPHVmLONdZ1xYPtuNu7Q.roa (hash: LOr2gDDIVLXiBV/jZXlGLfpc3s69N4tqrkcfM7qBuoA=)
2: i024ekl6Fbp5pwbRLukExESdG1U.crl (hash: 4YmhNynFxzvcY+OAdnzZIpIirBMo/ixW5hRc7UR2L2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:06:1e:d8:16:1d:bb:bb:bf:2c:de:99:c9:f0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Validity
Not Before: Jul 27 04:00:27 2025 GMT
Not After : Jul 28 04:00:27 2025 GMT
Subject: CN=1246330b08237196ccce5a7a82addaf1d3ee9cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e9:3f:f4:dc:b2:98:84:bf:75:41:6c:f1:bf:
39:a9:ee:11:cf:39:40:5b:d7:97:a6:9a:02:85:bd:
51:32:e5:1e:37:2c:14:fd:17:12:53:00:b4:9e:5e:
66:e7:f9:0a:10:57:4e:89:b8:c9:fb:7f:69:70:b2:
f4:8c:04:d8:b6:0f:7b:af:bf:c6:1a:11:12:0e:c7:
ec:7d:78:2a:c0:d7:84:23:48:a8:5a:60:48:88:31:
ba:e7:82:68:74:76:11:80:70:45:8a:c5:10:c8:1b:
b7:e1:c0:e3:4e:43:98:59:0b:23:db:88:de:cf:35:
60:f1:ef:a0:0a:1e:c7:db:86:d4:79:17:8b:79:15:
dd:cd:aa:74:85:23:ef:94:01:15:4e:c6:0f:9b:bf:
1e:61:83:1a:87:61:dc:1f:d6:cf:54:d8:da:ca:35:
43:18:77:07:e5:1e:fc:2e:85:30:9d:a1:49:bd:94:
81:0a:7f:fa:82:47:5e:05:50:6e:7f:70:50:ff:46:
98:3c:8d:ed:87:b1:59:d7:6c:c0:ce:b4:98:df:db:
4a:ba:03:44:18:4c:47:9c:89:fd:fe:89:d6:06:38:
60:83:a1:dc:cf:c0:73:e1:a7:32:db:78:a7:4b:e3:
f2:7e:b3:20:9d:b7:95:91:ba:92:2c:89:82:df:1c:
46:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:46:33:0B:08:23:71:96:CC:CE:5A:7A:82:AD:DA:F1:D3:EE:9C:D0
X509v3 Authority Key Identifier:
keyid:8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b4:f2:e2:63:fe:a0:94:ad:1d:9c:5e:ef:30:11:fa:74:41:
c5:e2:4b:43:52:f0:88:ae:d2:f0:82:5a:22:db:b2:8b:28:5e:
84:9f:04:14:44:d8:92:cf:ec:78:f0:11:6d:9c:6d:10:c2:a0:
f1:51:d5:26:39:7c:f6:a4:a3:e9:5c:0d:44:92:4e:ba:40:c7:
42:f5:51:d2:35:56:61:06:e0:1b:f6:8c:7d:65:1e:87:50:1f:
39:71:7a:c1:49:5d:74:f2:c7:39:f4:93:da:c1:1f:52:48:6a:
ff:7c:b8:6b:a3:aa:a0:f9:8c:ee:d6:9a:fc:73:25:f9:9d:c4:
47:cc:72:81:91:38:fe:e5:60:e9:b2:c9:72:38:2b:3f:b8:73:
77:b3:ec:ee:0e:ac:c3:f9:96:87:24:fe:69:d8:b4:cf:2f:a5:
89:33:3b:b0:91:dd:8c:48:ad:b2:f3:ef:25:7e:93:78:fa:7c:
79:3c:f9:e0:5f:6e:1c:4f:d3:7c:c4:94:55:41:01:73:80:ec:
86:0b:c0:b6:4c:85:92:03:e4:f7:09:6a:c0:08:3f:b3:e8:21:
66:86:37:f7:94:41:60:8b:d9:ea:02:24:5b:2f:18:80:97:60:
1c:e6:c3:a5:43:1c:9a:9e:c0:be:dd:b9:d4:0f:1b:81:3a:69:
77:7e:d8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:51:21 2025 by rpki-client