Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
File: I-5ecUCbIf1cgg89OsP9wPznWgs.mft (raw, json)
Hash identifier: 3z/VElOPNJITIqkLb+Ym8NXzNxvRS5EecadZ009YZ7M=
Subject key identifier: 45:43:4C:5E:50:93:0D:D4:B7:EB:F6:B1:B3:14:C9:DB:BF:CB:CF:D9
Authority key identifier: 23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
Certificate issuer: /CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Certificate serial: 0198C79299574B709D93A9D72E76D46DD2B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
Manifest number: 1346
Signing time: Wed 20 Aug 2025 13:02:09 +0000
Manifest this update: Wed 20 Aug 2025 13:02:09 +0000
Manifest next update: Thu 21 Aug 2025 13:02:09 +0000
Files and hashes: 1: I-5ecUCbIf1cgg89OsP9wPznWgs.crl (hash: 6A/NSx7MrE9hWNojPQY4uzww9f4sCyhdmuyFesadGMw=)
2: JLTWHRuvioIZeiPuQHITq0nguEU.roa (hash: bk5yHjHsl6C1xvyULuJt1KQ0iqgopaEeKAR0yVznkzo=)
3: plwZ9l0lVtWa8erZq6nE-HfiL5Y.roa (hash: pvnWu+3SngeR8hyMQVNUkiZf5MAZJKgs78KtEduSXvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:92:99:57:4b:70:9d:93:a9:d7:2e:76:d4:6d:d2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ee5e71409b21fd5c820f3d3ac3fdc0fce75a0b
Validity
Not Before: Aug 20 13:02:09 2025 GMT
Not After : Aug 21 13:02:09 2025 GMT
Subject: CN=45434c5e50930dd4b7ebf6b1b314c9dbbfcbcfd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:7d:1f:cb:2f:f9:a0:db:9b:95:77:70:67:
b1:4c:e7:9f:aa:55:c7:aa:95:24:37:03:0e:3c:fe:
d8:a6:2e:4e:49:f1:f3:09:ec:21:25:90:e8:68:48:
db:6f:fc:56:6f:6b:af:99:8f:a6:3b:5d:63:f0:3c:
42:4b:59:ac:90:bf:d6:fe:70:90:a1:69:1a:bc:6f:
a5:27:7b:8d:d9:c7:77:86:d3:d7:3a:62:48:d1:7b:
e8:4d:71:7c:97:bc:d6:b5:aa:53:e5:64:71:ff:9e:
db:7c:37:fc:22:84:7c:8e:5b:39:46:1b:b3:6c:d7:
3f:dd:87:0c:b8:07:44:07:12:85:ae:1a:e4:f0:38:
f8:17:bd:15:bc:8a:07:e8:8a:92:f1:07:b0:42:a7:
9d:10:95:46:d8:4b:80:b7:75:ec:90:9a:99:5e:cd:
d2:23:ed:e1:d8:2d:33:d7:df:6e:43:30:3b:02:55:
2d:da:c5:de:d4:28:a8:1a:bf:4c:bd:e1:09:54:75:
f7:77:d6:17:db:53:82:b4:a7:82:98:d1:0f:24:59:
e2:cc:69:15:8c:8f:b5:5c:af:8a:d4:8a:94:7f:22:
15:17:ec:0d:44:21:b2:eb:2c:40:64:b0:0c:ca:c7:
02:1b:bd:7d:37:e0:2f:9a:a8:8e:79:ce:03:39:da:
c2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:43:4C:5E:50:93:0D:D4:B7:EB:F6:B1:B3:14:C9:DB:BF:CB:CF:D9
X509v3 Authority Key Identifier:
keyid:23:EE:5E:71:40:9B:21:FD:5C:82:0F:3D:3A:C3:FD:C0:FC:E7:5A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-5ecUCbIf1cgg89OsP9wPznWgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/34b93c-a03d-4ada-83fc-bc637a8512b1/1/I-5ecUCbIf1cgg89OsP9wPznWgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1a:22:ce:aa:3f:52:63:0b:fa:3e:9f:4b:e2:2e:14:59:b6:
09:28:ab:8f:3e:e9:20:c8:d4:54:d0:4b:81:77:21:2a:44:90:
82:68:76:97:b2:bb:ee:50:df:7a:04:68:ff:30:5a:35:07:ef:
b6:f6:a6:21:b9:b5:30:63:00:84:3d:c5:f1:11:d7:45:72:bb:
68:76:52:ba:30:35:13:a1:83:1f:15:06:75:79:2e:4e:d3:61:
ea:f7:82:b2:cd:54:ef:78:be:53:1c:7f:62:d7:c7:50:cc:0f:
5b:40:d9:40:09:41:d9:d5:d7:74:44:11:3f:e5:e1:01:f7:1e:
e1:b8:b1:23:5d:03:0f:0c:a1:73:be:7f:f1:af:af:95:9d:20:
a6:76:16:c3:db:c9:cd:18:1a:aa:61:ad:dd:03:45:2e:3a:09:
4e:5e:d2:e3:93:62:22:23:25:a8:2a:3c:80:54:85:48:f1:28:
97:f2:cb:9d:a2:da:50:4f:85:59:99:92:b8:78:9e:97:89:15:
a2:63:62:24:a9:db:c1:ed:45:29:15:f8:ec:93:c4:db:ba:d8:
6d:34:0c:3d:1d:fe:27:7b:ae:cd:2d:ab:d1:88:a2:f1:85:b4:
5f:e5:c8:bc:37:87:52:56:97:a7:96:ce:13:dd:d1:9e:14:df:
6e:5d:e2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:25:07 2025 by rpki-client