Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
File: i85CgamU1SFm7z_xdyi64hiFX8Q.mft (raw, json)
Hash identifier: 65h6t/KhBT8ZrRPHYfMFH/KVssYNKhRjYWHHLFaLdko=
Subject key identifier: 34:5E:A6:B7:5B:87:DA:1F:54:9F:1E:A6:59:73:0B:CA:51:91:FF:F4
Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
Certificate issuer: /CN=8bce4281a994d52166ef3ff17728bae218855fc4
Certificate serial: 019847ADCCA7225DDE8C815244144E3F3A52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
Manifest number: 1592
Signing time: Sat 26 Jul 2025 17:00:29 +0000
Manifest this update: Sat 26 Jul 2025 17:00:29 +0000
Manifest next update: Sun 27 Jul 2025 17:00:29 +0000
Files and hashes: 1: 92LlPsnUIAq2_qCu90vUr2n0raU.roa (hash: foBfA1Aqx+KxyLS/ipFmoqJrrHi0Kf81SvkfmiaHeCY=)
2: i85CgamU1SFm7z_xdyi64hiFX8Q.crl (hash: Hbbf1JLpKbPz4gCkif77DSSchbl9T6fk9Lj9+xWrtvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:cc:a7:22:5d:de:8c:81:52:44:14:4e:3f:3a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4
Validity
Not Before: Jul 26 17:00:29 2025 GMT
Not After : Jul 27 17:00:29 2025 GMT
Subject: CN=345ea6b75b87da1f549f1ea659730bca5191fff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3e:a8:98:25:c6:ef:75:f4:3b:a7:0d:70:15:
95:ed:7e:47:d6:4d:e2:46:b2:ff:24:bb:66:45:cc:
78:80:34:96:bf:04:3a:16:40:32:70:b4:7a:79:73:
d9:d2:66:b5:52:10:37:45:fc:3b:c7:05:fb:26:42:
22:36:53:34:2e:c3:49:f1:82:8a:7e:ce:e2:2a:1c:
d1:48:9b:b4:33:96:2e:c3:99:98:8b:f6:7f:d9:19:
71:1a:9c:e3:45:e1:e2:3d:a7:da:21:e6:b5:95:d8:
7b:4b:e4:cd:16:7d:aa:df:55:f7:a5:11:cd:68:f5:
d0:e2:19:41:55:21:fb:a1:c8:40:08:56:49:b8:98:
3e:6a:ef:71:40:e7:a2:3a:55:d7:81:01:33:a1:58:
0f:62:d3:34:9c:88:7a:dc:1d:69:d9:ca:51:ce:6c:
74:f4:83:c0:b4:df:e3:7c:89:dc:0f:bb:cf:fb:8a:
d9:35:79:17:6d:2c:70:a0:48:8e:22:35:b8:8f:d7:
2f:ba:66:b4:d7:b2:d9:96:7c:40:4b:40:97:45:d7:
f4:1d:a8:12:f3:95:76:ba:7a:06:24:6c:af:ef:aa:
48:a4:c9:cf:ee:a7:95:12:00:80:68:96:cc:1a:c5:
de:90:9d:c3:1b:df:d5:9a:79:10:d2:ab:b8:3f:dc:
34:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5E:A6:B7:5B:87:DA:1F:54:9F:1E:A6:59:73:0B:CA:51:91:FF:F4
X509v3 Authority Key Identifier:
keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:42:52:09:e6:75:15:11:f3:bd:ad:d6:72:bf:b4:b1:5a:23:
df:04:9d:5e:ee:e7:c6:1f:d9:fa:97:29:40:b5:fd:04:80:83:
81:b6:a2:f2:02:64:1c:2a:13:58:5a:29:b3:ba:05:1d:ac:6a:
67:03:c0:95:3e:87:96:c1:5c:2f:5a:d9:72:c4:38:81:36:0c:
5d:68:7c:26:14:dd:72:be:bf:5c:38:e3:5b:d7:6c:e4:4d:d2:
7b:b6:28:b7:a8:1f:1c:7a:d2:52:06:d8:28:c1:d5:70:68:94:
24:d1:b1:ca:97:8f:9b:af:f5:b1:8c:08:53:b4:f6:55:f5:9f:
c8:cc:33:a6:b5:c8:a4:d6:91:e5:c2:68:cb:12:61:b9:ed:8e:
fb:42:0a:3b:11:13:69:5f:bf:0d:5b:a3:9e:a1:76:c1:9a:6b:
c9:9a:13:6f:3d:12:f2:58:b3:8e:31:0b:14:fe:d7:99:0c:96:
ff:13:7f:68:d3:a1:33:93:c5:41:33:9e:79:71:52:58:58:a3:
e8:79:1a:fc:27:6a:20:5b:8f:36:f5:01:56:d7:2b:f5:86:72:
b5:c1:6e:66:93:7f:ff:e0:f7:a2:38:ee:ee:a8:71:3a:49:e7:
c9:47:ae:ec:5f:fe:bc:84:57:f3:ee:d3:91:99:05:14:43:0d:
76:6f:c1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:34:11 2025 by rpki-client