Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft
File: I9FK_odQITwoDltovvsYhm95SX8.mft (raw, json)
Hash identifier: pEWXC2zHW4ZDJrnLQ3G6jBfYQE+a9nLp39Hp7xKeM3A=
Subject key identifier: 27:8E:0E:81:9E:44:1F:16:1A:64:FA:AC:B1:AF:B8:17:2B:77:AD:78
Authority key identifier: 23:D1:4A:FE:87:50:21:3C:28:0E:5B:68:BE:FB:18:86:6F:79:49:7F
Certificate issuer: /CN=23d14afe8750213c280e5b68befb18866f79497f
Certificate serial: 019921B21CE849968C99DB6BDBB8410836C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9FK_odQITwoDltovvsYhm95SX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft
Manifest number: 02F2
Signing time: Sun 07 Sep 2025 01:02:24 +0000
Manifest this update: Sun 07 Sep 2025 01:02:24 +0000
Manifest next update: Mon 08 Sep 2025 01:02:24 +0000
Files and hashes: 1: I9FK_odQITwoDltovvsYhm95SX8.crl (hash: ++SGMBRDbWUHwZyEvmsF0sdQNXCOrffA/hO/Ne7yfrk=)
2: bfd_WpvacXpVJP__dq6vej5IyyY.roa (hash: /B+pNt8vIwVV5x8COrKPeKukz7hh0c0T1g3kvtIg6Z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9FK_odQITwoDltovvsYhm95SX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:1c:e8:49:96:8c:99:db:6b:db:b8:41:08:36:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d14afe8750213c280e5b68befb18866f79497f
Validity
Not Before: Sep 7 01:02:24 2025 GMT
Not After : Sep 8 01:02:24 2025 GMT
Subject: CN=278e0e819e441f161a64faacb1afb8172b77ad78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:af:4d:41:7a:08:ae:18:d4:f3:bd:ad:14:
c6:17:44:ec:f7:e3:71:cb:ef:74:05:8b:99:26:4f:
d1:1d:da:b9:65:a5:9c:66:d3:98:c9:6e:99:1d:d7:
c3:9a:03:47:bf:c5:c4:3f:21:c4:95:4a:28:13:03:
e0:e1:51:39:34:03:06:7d:4b:83:da:9b:c5:84:12:
ef:cc:14:ee:77:fa:09:bd:ab:df:19:7a:b7:9a:ee:
31:aa:6f:5f:71:ef:4e:4b:b6:17:a7:aa:16:cc:b2:
24:7b:d3:d4:de:82:4d:f5:a3:09:37:0f:ac:f9:a4:
07:69:e5:ce:36:c4:b1:60:fd:c5:aa:0c:e0:34:e6:
20:3b:88:9f:4f:e5:12:af:9b:ec:e8:d6:f3:bb:cb:
31:12:3d:94:c7:8e:fb:5e:a9:74:c6:a6:e4:6c:c4:
cb:10:6e:82:a5:18:a8:0a:6a:05:a5:9e:3b:9b:99:
47:e4:68:e4:cb:38:96:c5:f6:be:9c:cb:3b:21:02:
30:8c:9f:1b:90:0c:98:fd:f4:c9:38:b8:89:9d:5a:
12:14:31:6c:ea:49:8c:c4:fc:e5:1b:70:f6:6e:ed:
29:b4:af:78:7e:ff:cd:d7:5d:ec:52:90:09:dd:32:
50:f3:6c:a7:5e:d5:a9:05:69:ab:11:9c:32:d5:18:
62:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8E:0E:81:9E:44:1F:16:1A:64:FA:AC:B1:AF:B8:17:2B:77:AD:78
X509v3 Authority Key Identifier:
keyid:23:D1:4A:FE:87:50:21:3C:28:0E:5B:68:BE:FB:18:86:6F:79:49:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9FK_odQITwoDltovvsYhm95SX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/89f845-5765-4c11-92cd-8472ca40f7a7/1/I9FK_odQITwoDltovvsYhm95SX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:77:a2:f5:f4:c8:8d:fb:4e:49:fa:f8:bf:cb:77:dd:d7:83:
79:4d:81:94:bf:ce:2b:6d:8b:e0:1b:cb:9d:33:14:0f:1a:88:
bf:48:07:9e:15:7f:bb:dc:e9:79:ac:40:91:b6:45:7d:7a:08:
8c:76:5a:44:d0:71:69:b7:e5:42:85:b5:7c:83:71:39:fd:45:
ae:83:d9:84:4d:71:f6:ce:61:4e:5a:a8:66:2a:e4:59:c7:2a:
ca:63:c6:54:05:ad:5d:9e:aa:5c:c2:b5:76:dd:5f:88:fc:7b:
06:a1:56:96:48:14:dd:f9:fe:14:07:24:c7:59:8a:44:51:b5:
1d:07:b9:51:a0:45:cb:8f:94:f2:ba:28:f0:f4:16:70:22:6f:
0d:f5:eb:0b:d5:c0:3a:82:97:95:78:de:c9:5f:d2:dc:b6:51:
50:3c:f2:6b:18:6e:35:d9:f6:7f:96:dc:2f:ef:13:57:14:be:
13:a7:1b:7b:58:96:0f:5c:8b:b2:d8:18:3a:cc:72:12:4f:b7:
47:e5:bc:8d:ec:3f:a2:c0:b8:c1:ba:6d:da:81:95:32:c9:41:
ff:8a:0d:1d:84:bc:5f:d5:96:45:ea:5d:6f:7d:b5:38:01:e6:
6f:7b:bf:70:ed:6f:c7:75:56:61:71:58:5a:2f:d7:22:70:c0:
32:bb:db:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:36 2025 by rpki-client