Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
File: I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft (raw, json)
Hash identifier: q5s5p8jgMLfS7ALyFl1IYX8zw/JyMXMsy1Q5G04yZb0=
Subject key identifier: B8:E5:BF:0C:9A:12:DE:C2:87:F4:B7:45:2D:14:40:E0:9D:B4:15:DC
Authority key identifier: 23:7B:2B:50:BF:0C:18:A5:31:E6:DB:15:66:7B:E7:ED:76:BB:28:21
Certificate issuer: /CN=237b2b50bf0c18a531e6db15667be7ed76bb2821
Certificate serial: 0199228CFD00D7F5DC8D273CF1CEB33CE4A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
Manifest number: 15C6
Signing time: Sun 07 Sep 2025 05:01:29 +0000
Manifest this update: Sun 07 Sep 2025 05:01:29 +0000
Manifest next update: Mon 08 Sep 2025 05:01:29 +0000
Files and hashes: 1: I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl (hash: muIeCB3lBV4tjfZKFOPngG0JfiF0rpCHTCCrmSy7oQE=)
2: ytASscQl-jcvF2Td7QzFghuuoNE.roa (hash: H19QKz9GlVTgCFc+7rr/9vdcrrvYDR0hpeCGpVF7EE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:fd:00:d7:f5:dc:8d:27:3c:f1:ce:b3:3c:e4:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237b2b50bf0c18a531e6db15667be7ed76bb2821
Validity
Not Before: Sep 7 05:01:29 2025 GMT
Not After : Sep 8 05:01:29 2025 GMT
Subject: CN=b8e5bf0c9a12dec287f4b7452d1440e09db415dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:af:22:ee:a9:1a:11:1e:36:b5:72:9a:3d:
cc:7c:83:d5:d8:1f:ec:1e:4c:79:34:b5:56:1e:26:
1f:de:4b:0a:8b:9d:5e:9d:a0:42:4c:ae:4e:13:d8:
6a:75:7f:ba:d5:db:26:35:b7:42:3e:46:72:33:e6:
ca:ff:16:2e:61:c0:1f:43:28:ac:02:c4:89:c6:8c:
9d:6e:9d:6e:76:bc:30:08:28:b2:1b:21:5c:94:d6:
f6:19:5f:e0:3c:27:d8:9e:b3:27:96:29:67:76:9d:
78:42:0c:53:e0:bc:36:e0:5e:94:98:b1:f8:46:c1:
6a:73:61:69:7b:55:63:f0:61:92:a8:d4:f2:7d:75:
bd:3a:1f:11:81:a0:19:fe:aa:89:dd:12:a9:bb:83:
f6:e4:d2:77:29:df:90:57:51:0e:4b:dc:55:79:3c:
b5:96:98:89:66:d8:88:20:14:e6:ee:7b:51:c1:7b:
76:06:03:5d:83:c7:31:5d:51:55:33:4a:aa:97:26:
4b:8d:9b:a5:10:26:3f:c5:6d:c5:78:7b:85:7e:c7:
ea:c8:31:67:2c:bd:98:98:eb:72:f1:14:e1:33:d7:
27:cc:76:e9:06:47:0b:6a:c9:0f:6b:5c:58:fd:2c:
b0:ab:98:c1:d3:f9:c1:2e:2e:6f:20:27:93:af:81:
55:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E5:BF:0C:9A:12:DE:C2:87:F4:B7:45:2D:14:40:E0:9D:B4:15:DC
X509v3 Authority Key Identifier:
keyid:23:7B:2B:50:BF:0C:18:A5:31:E6:DB:15:66:7B:E7:ED:76:BB:28:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:aa:b2:41:2e:c9:db:5e:00:98:70:c6:83:94:23:99:63:5f:
4f:fe:ce:71:44:99:34:95:63:63:84:7c:06:6f:9b:ea:18:b1:
24:e4:84:36:7b:0e:f1:19:11:46:a7:ef:e6:f0:26:d8:d0:af:
f4:14:4d:a0:a1:4a:5a:8a:a2:5b:ad:be:cf:43:43:9d:08:db:
31:73:95:f1:f0:ca:ca:2f:71:bc:91:b6:e6:93:cc:e1:16:60:
06:27:08:2e:c9:8e:3f:08:bf:25:39:c4:51:9b:e9:d7:53:fa:
29:87:ae:0b:5f:94:2b:98:13:b5:08:1d:ba:ba:b8:97:11:28:
75:74:91:b0:67:2b:3c:b7:14:60:86:24:24:8d:94:8e:b0:37:
9f:07:22:91:d0:17:2a:48:fe:63:d5:89:b0:4c:42:1e:21:72:
95:f2:c0:de:6c:17:b0:52:bf:30:17:2d:c1:5b:81:a0:4f:9e:
78:7f:2f:fb:d3:9f:49:1f:2c:9c:8d:7a:bc:29:42:da:c9:b7:
3c:cc:70:a4:fb:72:92:00:8d:dd:95:24:b1:df:55:18:ed:4a:
c5:76:a5:56:84:b8:62:be:77:ac:49:39:75:ff:38:17:b3:4d:
da:92:a5:b2:4d:20:12:3e:55:87:c9:6c:0a:b1:f3:62:a3:2a:
21:b0:9a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:42 2025 by rpki-client