Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
File: I9SAsHlWF-Libm4YJkN356lsePM.mft (raw, json)
Hash identifier: Sz1G5OO+EkjiqNto44eb3JQQxeS2uWd+oHY/j1cA4Mg=
Subject key identifier: 3A:8B:48:12:23:C3:A3:40:F3:23:61:E9:D5:EF:A8:85:00:91:19:47
Authority key identifier: 23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
Certificate issuer: /CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Certificate serial: 01984AAF24A1A7E935EB775F7E139C85BD1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
Manifest number: 148B
Signing time: Sun 27 Jul 2025 07:00:48 +0000
Manifest this update: Sun 27 Jul 2025 07:00:48 +0000
Manifest next update: Mon 28 Jul 2025 07:00:48 +0000
Files and hashes: 1: I9SAsHlWF-Libm4YJkN356lsePM.crl (hash: QfLxhHmFhOkqx/SPViDDqBSlux+TPECkXjBUInSEVuE=)
2: i2GfKnioIrK4DFco2liFl7JEt9U.roa (hash: Ib8ibm5kzCYxk8mp5/206nEi8+cY3/XjnCkQAxAJBU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:24:a1:a7:e9:35:eb:77:5f:7e:13:9c:85:bd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d480b0795617e2e26e6e18264377e7a96c78f3
Validity
Not Before: Jul 27 07:00:48 2025 GMT
Not After : Jul 28 07:00:48 2025 GMT
Subject: CN=3a8b481223c3a340f32361e9d5efa88500911947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f5:d8:f5:b5:9d:8e:2b:93:47:c0:25:a2:0f:
a3:51:32:23:20:8a:39:05:94:9f:fe:86:dd:16:6c:
d0:f4:c1:22:c4:ef:8b:c9:11:b7:13:3e:29:dc:d1:
40:ea:53:fe:b5:a0:a9:3c:96:6b:8a:3a:e4:54:0f:
39:39:3d:58:43:ac:82:5a:27:2d:7f:b6:40:b4:ee:
1e:2b:6d:bc:f4:10:c5:1d:de:16:25:58:b1:28:d9:
fc:89:cc:50:17:78:bc:a2:15:3e:8a:d3:99:46:34:
26:f3:37:f6:41:4e:8d:b8:22:ed:56:38:39:5a:d5:
9c:c1:c1:c2:e4:44:33:0c:1b:a2:67:73:a7:42:31:
7d:8d:0c:70:e8:b3:2b:1e:99:5b:37:91:cf:3b:3e:
9f:c4:d3:a0:fd:1f:59:f6:d0:18:20:24:56:f8:92:
48:d3:52:1b:40:a2:a8:60:fb:d1:47:d1:2f:2e:20:
41:24:97:a8:d9:0e:94:c2:ed:75:da:26:fa:f0:49:
db:7d:f4:9a:48:ab:84:ed:29:74:0c:a2:69:6e:0a:
c9:ab:f9:aa:f9:38:f2:1c:2a:5b:3d:dc:9e:8b:70:
5f:2d:12:a0:6d:74:1a:64:0f:93:5c:e3:66:eb:d8:
af:ec:94:21:bc:e5:7b:3c:c1:d7:2b:d6:a3:12:b3:
c4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8B:48:12:23:C3:A3:40:F3:23:61:E9:D5:EF:A8:85:00:91:19:47
X509v3 Authority Key Identifier:
keyid:23:D4:80:B0:79:56:17:E2:E2:6E:6E:18:26:43:77:E7:A9:6C:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9SAsHlWF-Libm4YJkN356lsePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/664cab-ba9a-4c40-97f4-af98e49f11ae/1/I9SAsHlWF-Libm4YJkN356lsePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:96:60:f1:dd:63:c1:10:d7:f0:f3:10:db:20:c8:1a:cd:1c:
39:17:75:cb:bb:5f:9f:49:57:90:0a:23:2c:15:a0:f1:c8:e5:
9c:b4:db:8f:15:e8:8b:f4:c9:56:d2:4c:d4:ca:0a:bf:0d:41:
a9:6d:c7:a8:ca:24:87:a4:e0:21:33:91:52:03:55:a7:50:af:
ab:a8:d6:06:4d:cb:65:56:fc:5b:48:97:e4:bc:d4:20:35:89:
47:d6:04:0f:51:a8:8d:65:d5:c4:b1:c8:1f:8b:1d:a3:27:ac:
1a:15:b9:90:d6:7a:6e:70:e8:c5:cb:24:af:de:44:55:09:f8:
b3:2c:1b:3a:c7:e1:89:76:6c:01:a9:64:53:94:62:f9:3f:02:
48:39:67:26:ac:88:fe:2d:45:f8:a1:11:7d:53:d9:8f:25:37:
5a:f2:30:48:12:1d:5b:30:e7:e2:34:91:42:57:9e:a2:58:a4:
ba:10:19:22:18:3c:be:bb:94:16:de:cc:30:63:5f:05:bc:08:
cc:d2:5f:83:dd:d9:5a:af:02:1e:4c:b8:b8:95:28:2e:09:c0:
fa:2a:bd:9e:37:e0:76:a5:a4:f9:9d:ac:d7:32:b0:14:11:25:
c9:f1:65:d5:ec:fa:64:1a:c5:10:47:ba:83:ab:28:f4:44:0d:
5d:a1:a1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:53:09 2025 by rpki-client