Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
File: I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft (raw, json)
Hash identifier: AMPycflx/3zT4ow2FoF5WkRvt5bujGo9HmqfYoABOqQ=
Subject key identifier: 8F:CA:4E:96:F3:39:DA:54:84:9F:3C:6D:4E:94:45:A6:90:D9:39:79
Authority key identifier: 23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
Certificate issuer: /CN=23607105955c764a813fd9524a7e41b940c56832
Certificate serial: 0199244406926991203AFF5EBE41C711DBB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
Manifest number: 0275
Signing time: Sun 07 Sep 2025 13:01:01 +0000
Manifest this update: Sun 07 Sep 2025 13:01:01 +0000
Manifest next update: Mon 08 Sep 2025 13:01:01 +0000
Files and hashes: 1: I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl (hash: RDy/QMeznfUEwpypqgFjl9/5/xOd/wLdbF6x4KOHLxI=)
2: pL8DPUuY6V_LTawy1OdUwrIg01c.roa (hash: yxyfBx5vs5Lhayo07nTfHgtEaPhrWIe0WeuncjCeyYo=)
3: rPtueqwAgjU2IUHv5A02J4kLlys.roa (hash: vDBPmEjKrFXU2lnK2ZWnREJRhpJ1uOnxEsPQx6QBwFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:44:06:92:69:91:20:3a:ff:5e:be:41:c7:11:db:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23607105955c764a813fd9524a7e41b940c56832
Validity
Not Before: Sep 7 13:01:01 2025 GMT
Not After : Sep 8 13:01:01 2025 GMT
Subject: CN=8fca4e96f339da54849f3c6d4e9445a690d93979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:65:4f:7b:ae:67:86:d7:c6:1d:44:89:c8:da:
75:be:52:04:d5:bb:af:1b:45:70:53:e2:80:70:79:
45:82:9d:f2:24:2a:52:9d:3a:d0:d9:75:89:4a:94:
2c:bc:9c:7f:f8:9e:c8:bf:af:35:7e:38:82:4a:f1:
b9:a6:07:25:03:28:b6:76:f0:36:c6:dc:0c:c0:82:
36:da:3a:03:d6:be:5f:88:3d:50:fb:1f:f6:b8:29:
9f:08:40:fb:67:c0:f4:e6:54:6d:59:7a:e6:fd:c2:
b5:77:fd:a1:9f:56:7c:71:9f:2f:98:b7:84:02:89:
47:fc:85:7e:c8:25:b5:00:5d:c5:9f:43:cc:30:af:
e4:58:65:50:48:a7:0a:a8:2a:5b:66:76:62:78:e2:
82:03:9c:6c:c6:4a:d8:bf:bb:3d:d4:bb:a2:23:a4:
2a:0f:97:70:2d:46:09:aa:49:cc:21:3e:e3:f8:5f:
2d:02:8d:a1:8b:0c:33:9c:f9:5e:54:87:0a:d0:40:
83:06:03:b1:1f:2b:9c:6d:75:62:57:b0:7c:1b:92:
80:74:68:9e:09:78:36:e1:84:cd:c2:ef:99:66:b9:
65:43:72:f2:e9:fa:ce:70:27:a1:98:e0:de:a6:a2:
5d:2e:b1:52:4e:e9:3d:a5:de:86:e4:6e:33:39:35:
96:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CA:4E:96:F3:39:DA:54:84:9F:3C:6D:4E:94:45:A6:90:D9:39:79
X509v3 Authority Key Identifier:
keyid:23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e6:52:41:ea:53:88:2e:31:88:43:3e:44:b3:99:00:af:88:
9e:70:51:78:f1:26:29:dd:cc:4e:1e:51:2d:f8:9e:01:61:bc:
6e:d0:e1:54:7f:16:2b:08:c9:a6:6d:82:fa:f0:db:b5:ce:89:
9f:df:79:63:59:49:a7:80:a9:bb:14:ff:07:74:da:51:13:93:
9d:a1:8c:d3:db:6e:33:ee:e5:97:62:ef:02:88:1d:89:7c:92:
16:91:fe:4b:40:43:87:8b:62:2e:54:f3:f5:50:3d:8a:95:8e:
47:6a:b0:59:a9:6f:81:13:4e:2b:97:7d:28:1f:e7:51:a0:a2:
9b:87:f6:be:b2:6c:3a:7b:74:40:ab:5a:46:08:23:14:62:e2:
b2:cf:de:e4:00:6b:6f:b6:27:df:2c:01:db:ee:ff:57:43:d5:
25:47:2b:2b:b4:a0:2f:8f:54:b5:6c:c5:1f:5a:bd:e6:e1:bd:
67:d0:e8:07:04:bc:3d:4d:e3:01:85:fe:5e:8e:4d:4a:c0:5e:
71:f2:81:c6:ad:5d:38:68:4e:b3:e0:85:69:22:da:b8:d3:b3:
7b:d9:6e:f6:7f:04:c1:b9:a6:18:fe:fa:f0:d8:ad:62:0f:73:
5c:7f:c2:ed:85:62:6f:80:e2:16:09:2b:2f:a4:ae:87:d1:62:
a0:6c:26:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:49:38 2025 by rpki-client