Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
File: IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft (raw, json)
Hash identifier: 87z6tZGAoSVhxxG02DdnIpdVwdCqHcEgkHW0kX+qgYs=
Subject key identifier: 13:75:78:0F:60:40:E4:29:27:F5:F3:FC:4A:34:4C:4F:1A:13:5D:3B
Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
Certificate issuer: /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Certificate serial: 0198451AD4832A9C9E15DC6AC82088026206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
Manifest number: 1370
Signing time: Sat 26 Jul 2025 05:00:42 +0000
Manifest this update: Sat 26 Jul 2025 05:00:42 +0000
Manifest next update: Sun 27 Jul 2025 05:00:42 +0000
Files and hashes: 1: IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl (hash: PZ3UnZax3XEycDMcZD7mnQ5WRMeL5QJ7VO1HHWY/36Y=)
2: Tj1VT7s8ilnWaRH5FDEx4ErgOfw.roa (hash: EAnVAxYXeZnLn3O7V7JRGZpaiw9YJLofd+adf3s7hWw=)
3: z8gJT3mWJvoCjNtGavez3w-sptI.roa (hash: rAtA37xRZ8BRiEnR3BviWDsE+vEFga17zSGIolCXdPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:d4:83:2a:9c:9e:15:dc:6a:c8:20:88:02:62:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Validity
Not Before: Jul 26 05:00:42 2025 GMT
Not After : Jul 27 05:00:42 2025 GMT
Subject: CN=1375780f6040e42927f5f3fc4a344c4f1a135d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ff:8d:5b:bd:ee:09:98:7c:c7:ae:0a:65:0d:
af:7d:2a:da:7a:b4:23:94:99:ae:bc:9c:fc:41:8a:
84:46:36:e4:0c:78:03:2f:d9:65:de:9b:ec:d8:8b:
36:0e:64:94:79:20:c1:d0:18:fa:e4:4a:a2:b9:8a:
0a:a2:e8:10:d3:8d:4e:b7:37:e2:fa:8a:0d:65:0f:
54:42:c8:03:c3:c1:53:7b:4d:26:e6:85:7e:ce:1b:
96:4d:6d:34:87:16:59:f6:7e:58:4c:ba:5d:1a:05:
f5:92:d8:7a:b8:ce:01:5b:ef:97:bc:ae:36:06:a1:
a7:54:be:46:07:79:7b:e3:cc:4f:57:02:e0:95:df:
5e:ca:c5:ff:9b:0b:37:a0:4d:78:7b:17:aa:84:e9:
b8:d2:06:b0:81:57:9c:cf:da:a6:5a:76:dd:db:a8:
52:5c:95:f9:08:ca:24:a4:44:df:41:58:3d:68:0c:
f4:7b:c1:56:42:59:6f:02:71:e1:45:a2:e9:c0:fc:
66:13:26:57:4c:ec:da:09:d4:1b:fa:e4:20:10:eb:
d4:f6:34:f5:d8:9c:c7:18:91:50:69:82:9c:db:49:
de:63:6b:a2:b2:0e:22:04:c6:e3:02:71:41:ec:29:
89:31:d3:f0:9c:c8:ea:84:83:88:ce:df:12:30:10:
fa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:75:78:0F:60:40:E4:29:27:F5:F3:FC:4A:34:4C:4F:1A:13:5D:3B
X509v3 Authority Key Identifier:
keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fd:3a:cd:0f:db:61:a2:c6:dd:a6:2d:f4:fe:5e:f1:b2:ff:
2d:b6:5b:66:fa:9c:05:5b:39:36:54:a6:47:8d:6a:36:df:d1:
6b:9e:3b:18:22:8f:3f:80:90:ec:2e:5c:26:47:a9:41:e7:e2:
58:49:10:7c:de:cd:e3:e0:30:6d:0e:ae:fa:32:04:c3:8f:52:
e4:c1:46:71:a4:44:a0:3f:6d:db:77:9e:68:3d:89:19:c3:88:
2b:e5:e0:6f:1c:30:8f:7d:4b:10:b3:a6:d1:a5:77:9c:ff:b5:
c5:ca:23:71:ee:51:18:c9:16:cf:dd:40:de:d1:38:68:d5:34:
cd:01:0f:89:4b:f8:41:16:37:05:76:3a:13:60:42:a9:5d:5a:
cb:2a:23:1c:1f:f6:24:85:c9:9d:6d:37:5c:ed:d0:30:b5:a4:
58:ce:a9:d2:b9:88:fc:68:eb:c9:e2:16:09:d6:d0:d3:c5:89:
a9:5f:29:93:db:40:f6:e4:6e:c8:b5:2c:d1:f6:3f:81:1c:49:
27:f1:e5:64:c0:74:b0:03:da:49:e1:8b:9b:93:63:88:8f:7f:
ba:02:d5:66:ca:4f:05:2c:ad:25:f5:36:f4:6c:76:53:c6:26:
42:1c:7c:f5:01:2e:20:35:d7:8c:03:8d:cf:6b:ca:98:b0:b2:
47:e3:f2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:42:29 2025 by rpki-client