Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
File: i4GUQccJMDSp1GVqL202qyQDP-Q.mft (raw, json)
Hash identifier: 6MajPDsG2Dwusx8vTt7vhzUZ7eww2pGGJLFux4QsrLc=
Subject key identifier: 75:8F:90:CB:86:E3:04:5E:9E:9C:EC:39:9A:C5:29:44:5E:25:D9:59
Authority key identifier: 8B:81:94:41:C7:09:30:34:A9:D4:65:6A:2F:6D:36:AB:24:03:3F:E4
Certificate issuer: /CN=8b819441c7093034a9d4656a2f6d36ab24033fe4
Certificate serial: 0199228CB9DE9D8D12D7D08B2CDAE88BFA66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
Manifest number: E7
Signing time: Sun 07 Sep 2025 05:01:11 +0000
Manifest this update: Sun 07 Sep 2025 05:01:11 +0000
Manifest next update: Mon 08 Sep 2025 05:01:11 +0000
Files and hashes: 1: Dm667XnaRqtK2i3UfsThVeXTWc4.roa (hash: 8yEFF1MNlsRKs74/fi+3dMb5d+dLJ3drU0IwlTP+fus=)
2: i4GUQccJMDSp1GVqL202qyQDP-Q.crl (hash: xwiLZBvuq7EUbOY77mmnKFLuexg24zeUTVp+r596XWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:b9:de:9d:8d:12:d7:d0:8b:2c:da:e8:8b:fa:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b819441c7093034a9d4656a2f6d36ab24033fe4
Validity
Not Before: Sep 7 05:01:11 2025 GMT
Not After : Sep 8 05:01:11 2025 GMT
Subject: CN=758f90cb86e3045e9e9cec399ac529445e25d959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:23:65:90:c6:82:f3:46:40:9e:c5:1e:af:b2:
16:6b:01:a4:f4:ee:8b:22:18:e0:b6:ed:16:9a:67:
93:5a:d9:8f:33:d4:95:fb:43:eb:4f:03:8b:b6:df:
fa:0e:cb:78:7d:7e:2b:de:79:d2:a7:5b:a4:a8:96:
9c:70:7b:77:22:b9:47:ef:2c:02:3b:9c:db:6c:1d:
53:85:76:16:54:a4:95:78:2d:74:ce:16:a6:dc:30:
3f:b5:35:61:3f:71:4e:eb:5e:d8:91:a0:3d:d1:87:
cd:71:67:15:d5:5d:7c:36:a2:3a:01:fb:85:96:14:
74:52:7f:ea:5f:8d:63:49:39:9d:67:cc:8e:a2:de:
d1:6e:6f:26:83:fa:c0:45:1e:c7:3d:f8:18:b4:b0:
c3:4c:3e:51:b6:93:5d:90:56:89:b5:80:43:38:92:
04:f2:92:37:60:46:44:1c:e5:ba:d3:b4:cc:ac:6f:
51:3e:51:bf:64:0d:fb:95:66:03:10:fe:fd:18:c8:
ba:dd:b5:8f:33:84:b0:c4:73:8c:dd:5b:ed:b6:e1:
5c:32:50:1a:a5:7d:39:32:5a:d5:98:4b:29:d3:7a:
c2:d4:fb:a9:6f:bc:e5:5e:e1:c9:94:30:ce:14:ab:
2f:a3:6b:b2:09:0a:f2:27:fc:13:b5:62:41:d0:0e:
b9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8F:90:CB:86:E3:04:5E:9E:9C:EC:39:9A:C5:29:44:5E:25:D9:59
X509v3 Authority Key Identifier:
keyid:8B:81:94:41:C7:09:30:34:A9:D4:65:6A:2F:6D:36:AB:24:03:3F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4GUQccJMDSp1GVqL202qyQDP-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dffb19-d467-4ee5-8cf6-f63d20a78f75/1/i4GUQccJMDSp1GVqL202qyQDP-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e0:ea:21:29:94:7a:08:e4:76:5f:5e:2a:bb:95:e8:a6:48:
69:62:2f:0a:4d:04:b5:1f:85:c0:7b:64:a4:f3:d5:9c:a2:90:
e9:93:84:ba:79:af:a0:65:c5:f5:ed:64:e2:c0:4a:ed:31:0f:
ea:f2:e1:0a:f1:bf:cd:15:62:1d:7d:d1:d3:44:5d:15:e7:66:
e2:e4:9d:aa:4b:15:35:36:66:6c:94:32:c6:28:92:21:e5:13:
81:f2:21:c7:e3:d0:3a:ea:70:24:64:5b:d7:99:6a:0c:8f:f1:
88:20:64:dd:d3:96:66:04:03:c1:5a:79:17:2d:a6:5e:ee:34:
da:7b:7d:23:2f:5d:5d:df:19:88:8a:46:6a:50:a5:02:4c:e5:
f1:e3:18:85:14:b5:42:d7:b3:9b:79:68:a6:03:35:91:85:71:
a0:36:7f:5f:fc:82:7f:a6:3e:33:f3:fe:2b:10:c7:75:30:32:
d3:76:cc:c9:32:09:8a:d8:78:28:db:69:93:30:15:59:92:94:
72:04:b2:f1:bd:cc:b5:2b:1a:91:a2:52:5e:79:32:bd:bf:fb:
8e:c1:e7:f5:f5:7e:65:a1:22:36:2e:bb:76:71:58:3c:fd:e2:
b1:62:ed:a4:a9:ac:90:a5:8a:0b:61:f0:5c:b7:be:42:30:3f:
9a:dd:c8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:14 2025 by rpki-client