Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
File: i2E3lJJwULIlJatwCRg1QI7uTHk.mft (raw, json)
Hash identifier: OaLf0EOSH+rxcoGul0XENksHq99VzG0HE3deliOYSCE=
Subject key identifier: 53:26:1D:E2:77:7D:8F:6C:43:2E:AC:F3:32:0D:B5:81:1A:D7:57:9D
Authority key identifier: 8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
Certificate issuer: /CN=8b613794927050b22525ab70091835408eee4c79
Certificate serial: 01985456B5DC2AF1698061D423FED367472F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
Manifest number: 1607
Signing time: Tue 29 Jul 2025 04:00:25 +0000
Manifest this update: Tue 29 Jul 2025 04:00:25 +0000
Manifest next update: Wed 30 Jul 2025 04:00:25 +0000
Files and hashes: 1: 8d7VpoBO27aN3dak4lAaxGgmHlY.roa (hash: nh1zP1FVrxhSUv/TNCc0ZubqPf+syGRj5kTxf6jPWNk=)
2: i2E3lJJwULIlJatwCRg1QI7uTHk.crl (hash: sWjcMVM10WT5tfo7GyYZsWgGEg1V0CAbM357ncN/8OY=)
3: jr93hN4EhKSWYqIbECyoZXKfIBk.roa (hash: 73KNAqHLsWX0NkD2n0f2jQTbbkk8jmsVt6nVH9n8jm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:56:b5:dc:2a:f1:69:80:61:d4:23:fe:d3:67:47:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b613794927050b22525ab70091835408eee4c79
Validity
Not Before: Jul 29 04:00:25 2025 GMT
Not After : Jul 30 04:00:25 2025 GMT
Subject: CN=53261de2777d8f6c432eacf3320db5811ad7579d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1c:9b:95:13:83:e3:b4:8c:8c:30:68:a0:06:
e8:26:5a:9e:17:fe:e7:aa:a2:76:e1:bf:18:73:e5:
50:10:fa:29:a8:ac:a1:87:3c:c6:57:dc:71:65:49:
24:bc:74:e4:80:11:ff:56:2e:2b:22:cf:c6:96:70:
1b:e2:35:c8:4d:fe:53:68:c0:be:3a:7e:f6:dc:b2:
84:8a:40:cc:b5:08:f9:85:00:1c:43:d8:32:b4:4e:
ff:09:6a:95:88:17:2c:e3:f1:c2:4a:54:10:8f:3a:
44:41:42:a8:aa:b3:83:8f:cc:fc:f8:e9:c7:d7:6e:
4a:fc:05:02:63:ce:f1:10:90:de:e4:1f:e4:23:c2:
ca:39:0f:b2:c9:e5:87:9b:c6:c7:7d:5e:e7:5d:32:
a9:9c:bf:ff:e8:c5:67:5f:59:eb:b6:0a:51:ea:fd:
9c:a8:0c:00:cc:33:00:0c:82:71:3d:da:21:9f:60:
0b:3c:69:77:7d:98:c9:d0:62:62:bf:3d:a9:be:9b:
00:4f:71:e4:f2:09:d8:1d:b2:2e:48:3d:71:65:92:
cb:6c:0a:00:a0:e7:0c:e1:ef:af:aa:df:ad:41:76:
96:b7:bd:fb:e9:ef:01:ce:8a:ba:e9:50:f5:d7:cc:
93:2c:d0:95:d0:ae:4c:92:d3:fa:12:89:a6:d9:6b:
3a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:26:1D:E2:77:7D:8F:6C:43:2E:AC:F3:32:0D:B5:81:1A:D7:57:9D
X509v3 Authority Key Identifier:
keyid:8B:61:37:94:92:70:50:B2:25:25:AB:70:09:18:35:40:8E:EE:4C:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2E3lJJwULIlJatwCRg1QI7uTHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/18103b-b279-4de7-bc3c-ec05d0195036/1/i2E3lJJwULIlJatwCRg1QI7uTHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
fa:57:d9:2b:10:ee:cd:e4:9f:e7:fd:b6:0c:d0:86:65:fd:f0:
7e:77:71:c4:09:3b:c5:51:3b:55:8b:04:ae:fb:18:c3:6c:c1:
20:62:a8:97:53:08:ca:b8:f4:a1:18:7c:97:de:bb:de:a7:99:
ef:c0:18:55:d3:c2:73:ed:69:12:56:46:19:90:21:07:22:24:
ab:a3:67:6e:cb:b8:40:d8:82:56:4e:08:5b:8a:c1:a7:7e:ee:
fa:fe:56:ee:c7:3b:a6:41:1f:1c:02:e0:f7:13:47:55:c8:55:
cd:b5:2d:a9:37:fc:30:36:34:92:f8:8e:5a:b2:5c:0e:e4:6c:
81:62:21:9b:9c:41:e2:39:41:b9:7b:06:a0:60:5f:e6:3b:04:
98:be:a6:91:01:4e:59:0a:e6:96:6f:03:70:be:1c:99:7c:79:
7b:7a:ec:12:a3:88:8a:5f:be:5e:62:97:de:7c:46:ca:fa:40:
04:bb:91:57:61:de:48:62:79:04:95:ed:c2:e8:e7:d8:c1:d7:
bf:c3:2d:ae:5a:e0:fc:6e:c6:ac:fc:76:cf:cf:4a:3e:b7:a9:
a8:80:8f:99:7a:3a:7a:8e:4f:c6:ea:2f:bc:be:6a:6f:3d:4b:
ae:67:f2:f0:1c:ac:83:22:24:00:60:d1:0b:7b:fc:fb:a3:f0:
34:2b:a5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 10:54:08 2025 by rpki-client