Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
File: i3-BpueC4hEYnE805Fm0Imx19KY.mft (raw, json)
Hash identifier: RA1vXA3zwVFHF/zLegrU9vaGQHejzffCt5JhYXCLt0o=
Subject key identifier: 87:64:DF:54:96:1B:34:91:73:48:21:55:DC:3B:72:BD:23:52:D6:F3
Authority key identifier: 8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
Certificate issuer: /CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Certificate serial: 0198C6EF1A367F5ABC0226C78C4B0BB1F766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
Manifest number: 1647
Signing time: Wed 20 Aug 2025 10:03:35 +0000
Manifest this update: Wed 20 Aug 2025 10:03:35 +0000
Manifest next update: Thu 21 Aug 2025 10:03:35 +0000
Files and hashes: 1: CPJvfKG9AEorpsEiz1e05zSo0sY.roa (hash: NjB+IttX3MugwGYS/PHLAC82z3nIjH+wrKBqWV/iJTI=)
2: I_z7vCGW6xyHTeNvbDKPhdARG-M.roa (hash: 8r7UrdzqYCx67NNR1NUCqQusmj+6qkdlQ4GFbuJ8L+s=)
3: P2LC5eQJryM958-FLkXKkEDZeLw.roa (hash: QpIfoLa+fmj9YdQlV+XdklTrRRwRDMjjOVtTi9BX00s=)
4: i3-BpueC4hEYnE805Fm0Imx19KY.crl (hash: TMcTCLCXGHk+AraETWAz6BC3u+AVOYo27XB0PObjqUU=)
5: uvd1cKCOmqZYi8L4xtWD1skpDvw.roa (hash: +e/+widvxtIhard+pWDd7C4vDgFDP2T3458Wltd2Nbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:ef:1a:36:7f:5a:bc:02:26:c7:8c:4b:0b:b1:f7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Validity
Not Before: Aug 20 10:03:35 2025 GMT
Not After : Aug 21 10:03:35 2025 GMT
Subject: CN=8764df54961b349173482155dc3b72bd2352d6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1b:fe:30:6d:78:af:02:bb:fd:c8:8d:3a:de:
69:d1:e6:ac:d6:e1:7e:04:93:b7:a0:e7:f4:6f:34:
46:17:c5:25:fa:83:5d:da:55:d4:29:3a:44:52:5c:
14:e6:75:cb:12:fb:68:39:39:eb:42:20:63:82:01:
9f:fe:80:04:e4:40:2e:a5:b9:c4:45:ba:5f:53:6b:
09:4d:2f:e2:c8:7a:c4:2f:7e:04:e7:4f:85:2d:a0:
ea:82:1a:50:81:ff:d3:c0:e1:94:9f:f9:b5:7f:f7:
bd:c5:88:73:c9:f5:2f:d5:4f:dc:76:94:8d:12:05:
59:21:1f:75:b8:e8:ce:a2:34:c4:a2:aa:d7:e2:cd:
5c:37:cd:78:6b:43:0e:b0:29:a1:97:9b:5b:58:82:
48:2a:80:9a:57:36:1e:1d:49:ec:88:8b:09:ca:97:
f0:3e:02:e7:12:35:3b:d9:c6:4d:62:19:4f:d1:83:
00:f8:5d:17:ad:d1:55:45:09:fc:f9:af:3a:26:07:
da:7c:80:2c:a2:d8:e4:a2:f3:c6:a2:0b:50:4c:ea:
d8:a3:a7:1f:cc:76:08:15:c8:1d:d8:e7:a5:31:9e:
ee:bd:96:4c:3b:62:77:1b:c0:88:0d:3e:6f:36:6c:
90:f8:49:81:fb:c4:4e:95:aa:af:88:36:a7:58:b0:
c0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:64:DF:54:96:1B:34:91:73:48:21:55:DC:3B:72:BD:23:52:D6:F3
X509v3 Authority Key Identifier:
keyid:8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:5b:0a:70:b9:19:ff:4f:e8:4c:d3:34:63:ea:7a:87:5b:8d:
13:93:42:7e:a1:31:b7:67:3c:1e:04:be:3e:99:7b:f9:fb:c3:
da:21:71:15:80:db:6a:52:cd:fe:c6:71:aa:17:26:e2:0f:9a:
7d:2b:2a:af:fb:17:a8:38:31:26:ba:aa:99:d0:38:af:50:b4:
f4:3d:dd:73:61:6a:c5:10:eb:49:e3:82:b2:58:1c:0a:ea:a4:
b5:27:61:5d:32:e9:8c:bb:13:28:5f:2e:5e:0c:f9:10:43:7f:
fe:bd:8b:35:9a:d4:48:6d:6a:26:ab:29:29:5f:37:a6:87:f0:
7b:15:a2:2c:ff:d8:2c:7f:40:27:77:ca:4f:18:c0:1c:0b:3a:
f7:4d:8a:10:ec:f6:7d:78:8e:55:b7:ee:5e:a3:d9:0e:33:e2:
6f:67:19:72:22:39:13:7d:40:35:58:e5:f0:de:c3:b7:fe:71:
3a:84:d8:c9:38:cc:33:31:2b:a3:b3:fe:81:dc:d3:b1:04:b5:
d7:8f:da:73:82:5d:61:c3:f7:7d:56:96:53:d8:c7:2c:11:d7:
62:83:6e:ba:a7:a9:a5:a5:25:9a:59:be:5f:0b:e1:b2:de:79:
97:e9:73:fd:fc:4c:8d:15:ac:f8:86:91:7e:24:d8:15:b6:8e:
48:17:d3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:50:13 2025 by rpki-client