Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.mft
File: I08I-kIiU1wK8moNc0fb8XJUcZY.mft (raw, json)
Hash identifier: MDfP9uCvbZfP1UM3AMlbIEE7OsuEz5+I4qG/h1T7hf8=
Subject key identifier: 37:71:A4:45:36:93:CB:0B:A5:CE:CD:7E:D0:A8:19:65:9B:76:5D:CF
Authority key identifier: 23:4F:08:FA:42:22:53:5C:0A:F2:6A:0D:73:47:DB:F1:72:54:71:96
Certificate issuer: /CN=234f08fa4222535c0af26a0d7347dbf172547196
Certificate serial: 019849D3B915ED1BB3F139020761DAEA28A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I08I-kIiU1wK8moNc0fb8XJUcZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.mft
Manifest number: EF
Signing time: Sun 27 Jul 2025 03:01:08 +0000
Manifest this update: Sun 27 Jul 2025 03:01:08 +0000
Manifest next update: Mon 28 Jul 2025 03:01:08 +0000
Files and hashes: 1: I08I-kIiU1wK8moNc0fb8XJUcZY.crl (hash: nljOdNY7r6YEswpibTakUA+Tl0XizjtjwR4OcFg43zw=)
2: PMihf48EDZLf86f7BmXfYmZbV4M.roa (hash: kAi2yEZhpDZ5dFlA+0hzmB2XiAS3L8tb6zCyB/FGwDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I08I-kIiU1wK8moNc0fb8XJUcZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:b9:15:ed:1b:b3:f1:39:02:07:61:da:ea:28:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234f08fa4222535c0af26a0d7347dbf172547196
Validity
Not Before: Jul 27 03:01:08 2025 GMT
Not After : Jul 28 03:01:08 2025 GMT
Subject: CN=3771a4453693cb0ba5cecd7ed0a819659b765dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4b:56:1c:d3:13:20:2a:f5:8e:4f:c8:12:43:
cb:42:a9:36:33:e5:85:87:0c:a5:62:a4:17:c8:80:
6f:3a:76:4a:b6:41:e3:e0:66:69:37:a0:02:fe:3c:
5e:f2:2a:dd:34:00:3a:3a:8f:18:7a:1b:00:5a:e5:
c0:25:d4:d1:b9:7d:44:30:ac:af:53:2c:56:f4:be:
ff:88:b9:21:0d:02:73:6c:ba:3e:95:32:fc:56:d3:
e7:74:76:ca:c4:76:ca:f3:3c:83:a6:38:f5:40:d2:
5a:6b:4f:45:83:82:31:72:aa:9f:96:0a:83:c7:e4:
0e:b8:8d:c3:49:01:8f:66:40:0d:cd:28:a3:59:e8:
da:79:d5:b4:ea:71:1e:df:16:e6:bf:b0:a2:dd:f0:
db:54:31:14:44:db:54:c2:58:de:68:ee:77:7b:85:
94:1f:fe:cd:c1:2a:35:59:09:96:9e:10:54:c8:93:
b0:2a:ea:18:33:0e:54:29:73:ad:ac:84:20:99:37:
cc:1b:5a:2b:4a:ed:33:cb:cc:f7:b7:e5:e7:63:d8:
20:50:e7:7f:25:e1:a0:78:12:fe:c6:e6:2d:a5:ff:
21:c8:29:9f:84:6a:c5:b4:6b:31:fa:04:ee:09:ef:
b4:54:dc:81:6a:ee:d6:66:e7:cb:be:f3:40:95:ba:
64:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:71:A4:45:36:93:CB:0B:A5:CE:CD:7E:D0:A8:19:65:9B:76:5D:CF
X509v3 Authority Key Identifier:
keyid:23:4F:08:FA:42:22:53:5C:0A:F2:6A:0D:73:47:DB:F1:72:54:71:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I08I-kIiU1wK8moNc0fb8XJUcZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/638a9c-ec64-45de-bc2e-2be7edc7932d/1/I08I-kIiU1wK8moNc0fb8XJUcZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:59:3e:37:d2:ef:d8:88:46:96:51:a9:9c:39:af:36:37:1e:
a9:79:ec:da:7e:ca:1b:79:9d:08:9e:ad:a4:84:66:a0:fe:98:
20:33:df:ec:5a:86:d1:65:25:db:3f:38:27:db:50:45:4a:bd:
54:f9:40:b5:21:af:38:d8:05:43:4f:30:d8:eb:21:89:9f:0b:
5f:9a:af:9c:29:03:cd:63:cd:2c:b9:d4:86:9b:77:61:e5:c5:
13:ee:54:d4:46:be:ca:0b:fe:c2:a7:e8:48:3c:5f:6b:4d:3f:
94:12:27:30:bc:cc:69:18:e1:64:d0:a3:5d:4b:34:4d:4a:52:
26:79:57:5b:e1:bb:81:04:90:13:29:50:a8:04:b1:98:c5:f4:
d7:60:88:e3:c8:4c:f7:05:e1:8c:d5:c0:f8:13:3a:22:b7:1a:
2b:59:72:33:ca:72:f5:6d:8e:6e:67:eb:8a:de:f0:c6:cc:d1:
28:75:63:09:ec:a6:d3:47:0f:4c:c4:d4:8c:e5:43:c9:ca:f8:
98:fd:e4:bb:69:0e:16:67:1a:52:07:04:7c:b8:21:aa:3d:f1:
c3:1f:6e:3a:ad:e4:0e:20:7a:52:2b:e3:fc:64:5c:77:ad:5d:
f3:a0:c6:a9:f1:d1:e0:9d:bd:2b:7f:fe:3f:9d:04:cf:b6:ea:
c6:42:a5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:26:14 2025 by rpki-client