Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
File: I02TlaK6I5y50njrWJty7VyWctE.mft (raw, json)
Hash identifier: pWhm/NnbQF+YcTPRBH+ElK4erDAZ4KtekRn0nEczhFs=
Subject key identifier: BE:37:94:3F:A0:23:8A:DB:8B:53:65:41:D9:BD:87:F0:45:55:79:50
Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
Certificate issuer: /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Certificate serial: 0199228C5F2724CB45E7428FAF1C766A190D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
Manifest number: 10BA
Signing time: Sun 07 Sep 2025 05:00:48 +0000
Manifest this update: Sun 07 Sep 2025 05:00:48 +0000
Manifest next update: Mon 08 Sep 2025 05:00:48 +0000
Files and hashes: 1: 1rz_9CUxf9DVS-YE4VuUc49q_EU.roa (hash: UNeHGEwryJnNi0oicKcUP2+AX+MdC5294S5To8LCDxA=)
2: I02TlaK6I5y50njrWJty7VyWctE.crl (hash: rQGCKLUbT9u0t8LlCL4NUGlS231JrTfTIZm9N5XajY8=)
3: JuGf7pzc4HCrM3We2--OeQqSX4U.roa (hash: H4A47OUP6tLe0HcSGtfbX99Pdjm0iQtczsTWsqdmMN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:5f:27:24:cb:45:e7:42:8f:af:1c:76:6a:19:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Validity
Not Before: Sep 7 05:00:48 2025 GMT
Not After : Sep 8 05:00:48 2025 GMT
Subject: CN=be37943fa0238adb8b536541d9bd87f045557950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0f:b0:d8:d8:eb:43:6d:16:19:86:4f:a0:99:
94:73:96:19:8b:1d:03:72:d6:ec:49:d3:58:27:ee:
72:20:74:d1:5c:94:45:51:b5:c7:ca:45:76:50:22:
8b:b8:bc:b7:6d:7a:98:b9:0e:c7:45:4c:06:60:0c:
89:11:ef:05:a7:ad:21:5d:53:04:40:0b:38:95:30:
68:6e:fd:0f:4c:24:bc:b3:fe:13:62:aa:70:4d:36:
1c:3f:b1:3b:e0:a8:fc:74:f1:17:04:6a:02:f8:d3:
29:e9:ed:79:3e:6d:fa:a3:c3:dc:bf:40:ff:95:99:
0f:ef:8c:87:2a:9a:f4:5c:b0:7d:d1:d6:f9:45:a3:
2b:dc:70:55:61:29:62:ad:ee:46:43:15:4e:5e:ce:
d3:21:e5:77:80:7b:ff:21:b0:b3:70:26:f6:c4:1f:
e8:78:30:13:3c:89:50:2a:36:df:54:86:8c:c6:09:
8c:63:99:e6:a8:50:f4:94:b2:c1:25:ea:4c:69:0f:
2a:ef:52:fd:ab:7c:e0:2c:0b:54:5b:8f:c8:01:49:
74:ef:29:e6:96:d9:c3:fd:07:92:23:0e:43:8a:15:
f3:25:67:fd:35:65:a9:02:29:23:d4:aa:b2:c0:8c:
9c:b8:8e:ce:d9:5e:cc:f3:c2:5f:49:b7:24:1c:93:
96:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:37:94:3F:A0:23:8A:DB:8B:53:65:41:D9:BD:87:F0:45:55:79:50
X509v3 Authority Key Identifier:
keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:84:34:35:6d:d4:eb:bf:31:36:ce:78:7c:30:71:98:59:3b:
1d:79:a5:14:2b:d7:e0:3a:fb:59:f4:85:3e:0f:4c:b9:2a:7b:
ed:4a:e9:64:71:91:db:21:6d:8b:de:17:08:ca:a1:c6:2c:dd:
76:5f:20:d0:11:f1:f8:4d:4a:e1:ee:5a:e7:48:f2:10:69:08:
81:de:a4:cc:fd:6a:86:fd:c5:f6:7b:f0:03:5e:ba:db:d5:76:
f4:e0:07:86:66:e6:ec:1a:a9:85:f6:2b:32:d5:eb:c2:1e:5c:
27:43:07:df:74:d5:34:01:a0:85:52:4a:a4:6f:b8:a7:cd:da:
d4:45:6a:05:0a:59:bd:09:a9:90:e7:e1:ec:9e:64:67:de:0f:
5a:c6:6f:7a:3a:56:74:6e:9a:9c:da:75:fe:47:68:f1:3d:57:
65:02:f9:ca:08:d3:5a:b9:f3:b1:e4:fb:cf:c7:f2:70:88:07:
c5:19:46:92:a2:0f:bc:bc:61:31:03:f5:2b:57:72:da:54:4b:
1b:78:61:3e:1a:c5:7a:8c:3f:93:8b:59:2a:60:f6:a9:58:51:
15:c6:ff:bf:ea:07:66:81:fe:df:e5:ed:3b:dc:cd:e8:26:26:
4c:0f:f4:c1:64:fd:e8:84:b0:f5:c7:c4:17:81:c0:25:b8:c7:
16:85:f4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:53 2025 by rpki-client