Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
File: I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json)
Hash identifier: YQdkdLDAwqisd2NP94mTGbv/2+uixI48wpz3QPxbNx4=
Subject key identifier: E2:DE:89:4F:67:2D:E9:F5:6F:46:CB:34:AC:FD:C7:9B:7C:D2:66:42
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial: 0199179B2C61E06DE018C543D66E61A5DDBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
Manifest number: 1258
Signing time: Fri 05 Sep 2025 02:01:09 +0000
Manifest this update: Fri 05 Sep 2025 02:01:09 +0000
Manifest next update: Sat 06 Sep 2025 02:01:09 +0000
Files and hashes: 1: Ai_jhfn0i9Wvxs1dcGNuIQFRbQw.roa (hash: Gw+sAwziSiWdDJ9jEjQB+Xypl/VPbgg3IFN9iDAN1Ok=)
2: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: 3FT03XLNP8Ej2E/Eledr+uedIVDz32nl3XRvirgA8X8=)
3: U3XsaJj-IFBktG-dXYEuz5kV62s.roa (hash: kenyyNekJ/vibROkcjE9SyGPN68bhSkOSO66LaGuIH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:9b:2c:61:e0:6d:e0:18:c5:43:d6:6e:61:a5:dd:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
Validity
Not Before: Sep 5 02:01:09 2025 GMT
Not After : Sep 6 02:01:09 2025 GMT
Subject: CN=e2de894f672de9f56f46cb34acfdc79b7cd26642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c5:11:c0:61:cf:ce:9d:6f:49:71:54:b1:98:
67:82:3c:75:d5:d4:22:5b:89:dd:74:25:00:dc:ca:
e1:08:a6:aa:09:22:1e:f8:99:bb:32:e5:88:a1:f0:
e2:6a:3f:5e:cc:22:bf:42:97:c2:0a:4a:86:4d:84:
e5:a9:ff:7b:27:a3:7b:e1:42:df:f5:15:de:72:dc:
4a:09:d5:0a:7b:4b:89:1f:19:d2:bf:35:c0:a0:58:
43:dc:62:cd:1d:a5:cc:cb:6e:00:bf:f2:e6:0a:fe:
42:2f:23:60:19:d0:77:f7:63:c0:61:3c:84:fa:e5:
3b:85:41:18:53:c8:4e:9c:43:db:4d:e2:90:ed:25:
bf:0f:67:c3:6f:1b:e6:e8:02:eb:f4:49:ae:d1:04:
e0:62:20:60:7a:f5:c6:d8:af:30:46:07:66:bc:42:
bc:46:bf:5c:76:db:8c:c4:75:e9:a1:c5:f2:62:41:
45:47:a8:41:2d:3a:45:e9:5b:69:77:28:5d:ee:d8:
cf:71:40:d6:74:e5:4b:5e:ff:92:7e:7b:90:c9:a7:
93:71:c7:2a:a0:d2:3e:19:11:2d:08:59:4b:42:57:
40:f9:40:98:87:f0:40:86:86:9d:a5:16:b5:28:82:
e9:aa:13:82:2e:b5:4c:6b:e0:39:3e:b2:8f:60:8a:
97:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DE:89:4F:67:2D:E9:F5:6F:46:CB:34:AC:FD:C7:9B:7C:D2:66:42
X509v3 Authority Key Identifier:
keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:23:a2:79:63:5c:3f:b5:af:63:a9:eb:fc:2f:93:61:4c:fd:
86:b1:cd:1d:12:9e:5f:95:f3:fe:12:9b:0e:e2:bb:50:0d:ef:
92:86:eb:a7:bc:56:6a:a2:ee:b4:8a:ef:c0:df:3c:43:4e:69:
a3:76:ba:a3:c5:7e:fc:0b:b1:1a:c5:15:21:31:67:e6:63:7e:
24:ce:f4:dc:d8:52:36:40:70:b8:a2:ef:5e:6f:97:f5:a9:1c:
b4:64:d9:33:e7:de:ae:6d:a9:64:b7:09:be:d8:e0:07:04:f1:
42:0c:b7:13:28:34:c9:e9:c6:60:8b:3b:1d:b1:74:f1:af:1b:
55:60:06:c2:74:4b:7c:1f:1d:12:31:63:1f:6b:cc:33:19:0d:
7a:24:62:ed:57:55:e1:af:e4:c5:d1:cf:29:48:18:83:de:9d:
94:26:45:c0:70:07:c6:f7:e0:f2:c3:50:aa:c1:74:ea:dd:fe:
4f:bd:92:50:17:3c:0a:2c:c3:44:25:96:eb:68:fe:a5:64:54:
20:60:05:49:45:d3:2d:c7:45:ba:33:43:ee:97:2f:79:b4:51:
4e:1e:dc:43:5a:5d:2c:f3:42:9b:06:9a:34:82:a0:a1:f2:0d:
60:b3:29:f8:9b:5d:a9:e8:f8:9e:5a:9c:5e:3a:89:70:37:94:
4c:c0:92:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:50:40 2025 by rpki-client