Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
File: I90F63vZRcZd8Yc1UtzJDLLhdyM.mft (raw, json)
Hash identifier: 7uYWuEG0HTSQlmYf6pFiOoB+RX+U/Js/GyKjr0QarP8=
Subject key identifier: B6:94:47:E9:38:73:24:81:7F:24:78:0D:D0:6D:21:E8:C0:30:99:A9
Authority key identifier: 23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
Certificate issuer: /CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Certificate serial: 01992EC78C6815561F8949F08706EFBE183D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
Manifest number: 014E
Signing time: Tue 09 Sep 2025 14:00:53 +0000
Manifest this update: Tue 09 Sep 2025 14:00:53 +0000
Manifest next update: Wed 10 Sep 2025 14:00:53 +0000
Files and hashes: 1: I90F63vZRcZd8Yc1UtzJDLLhdyM.crl (hash: AsyxkMm9dlK4RySGzk3kI5WdIlrFxQY7XOzsU1WDXC8=)
2: jS5n1QIkV5a4mMLNQcvKPtlrQ-M.roa (hash: lelwm9WsLrqz4fINUrusZCHF/wAouDsWxQ/qaZbxy6o=)
3: kt9kY-16BQ4necIVFRgAtvjd9vU.roa (hash: 66gMsyaOtysX+kjpi4hM+Oe5TYeIKMy84VcIEuNL1pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:c7:8c:68:15:56:1f:89:49:f0:87:06:ef:be:18:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Validity
Not Before: Sep 9 14:00:53 2025 GMT
Not After : Sep 10 14:00:53 2025 GMT
Subject: CN=b69447e9387324817f24780dd06d21e8c03099a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:65:43:8c:7a:4a:36:86:62:57:66:9d:10:bd:
c6:e7:67:9b:29:a4:c8:c9:64:d1:38:ba:8a:62:41:
53:ac:d0:aa:f1:a5:f6:dc:69:c2:da:30:84:c5:42:
07:de:9f:e8:da:dd:12:79:46:88:68:eb:ca:82:28:
70:36:04:e1:a9:96:65:65:91:4a:13:7b:eb:80:e0:
b6:50:82:3d:b0:8a:6b:ad:2b:19:3c:c0:a9:e6:2d:
0f:77:ae:14:66:b4:16:a9:0f:94:b6:3c:87:4a:1b:
52:93:f3:a9:08:8b:d3:db:8f:f0:b9:25:2d:ca:7a:
6a:33:06:2b:f8:c0:9a:8d:6f:53:f6:89:1c:9c:da:
87:b1:01:3b:0f:53:ce:73:1a:f6:72:42:0d:ca:81:
6c:d3:35:a8:84:ac:27:c4:5c:d0:a0:b0:50:eb:53:
35:08:72:cb:ff:a2:64:ce:08:f5:04:d3:80:5d:c9:
a9:ee:f9:48:63:b7:ff:4e:a4:b4:f9:e8:4f:7c:d0:
a9:0d:03:75:d9:26:7e:87:0b:71:8b:77:d7:64:ac:
30:8e:1f:e5:c8:79:c9:45:71:d8:44:25:f6:0e:63:
88:1f:1e:25:9c:44:49:b7:a8:0d:32:b6:21:fd:0f:
b2:96:61:4d:a9:a1:52:c5:b4:94:97:e1:53:b1:db:
2b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:94:47:E9:38:73:24:81:7F:24:78:0D:D0:6D:21:E8:C0:30:99:A9
X509v3 Authority Key Identifier:
keyid:23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c4:cf:c4:11:c4:4a:9f:a8:32:3c:6e:05:9e:e3:91:1b:d3:
14:a7:68:da:d0:05:f0:fd:c0:cf:ad:96:e6:2a:5e:80:05:56:
65:52:03:b6:99:fa:50:99:35:99:bc:7a:7e:94:8d:2d:19:4d:
b1:ec:2b:4a:38:0b:39:06:2b:1f:7c:11:47:fa:a9:fa:35:bd:
54:6a:f7:4d:19:5c:e2:08:47:dd:e2:5b:7a:c7:25:4d:97:ff:
8b:12:ce:74:69:45:12:c1:89:c3:91:3f:a4:2c:bd:a1:eb:8b:
ac:5b:65:6e:7d:a3:49:62:aa:7e:30:33:2b:13:71:59:d5:34:
c2:39:3e:9e:e4:9c:8b:c5:95:b9:84:ef:75:b7:83:c8:66:9c:
f6:84:f5:3d:f6:0d:1b:f3:71:67:3c:dc:48:16:06:90:23:a1:
16:c4:72:7a:54:a7:5b:cf:61:c7:c9:87:0e:21:22:6a:75:bc:
25:1f:65:50:27:6c:28:54:4e:ec:dc:9d:f1:3a:6e:29:de:1c:
7b:71:5a:3a:f5:2d:8a:b4:9a:15:5d:ea:d6:0d:c0:46:3a:5d:
ef:eb:e8:b3:8c:d0:0c:98:1e:f9:08:e2:d9:c4:c5:86:cc:0c:
03:f8:93:aa:be:20:5b:31:e9:df:44:e9:ec:1c:35:d3:ea:b4:
48:df:63:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 19:21:15 2025 by rpki-client