Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
File: I6xIaAc5isHO7Akh0E1Amk9_R5s.mft (raw, json)
Hash identifier: uJ4J3d0An69QfutMnhmjFDUoC09BTjq2YXK2ckcOgDo=
Subject key identifier: 91:28:1D:D0:B2:E2:CF:97:C6:FE:DF:DF:A8:B3:2F:21:BC:74:F8:2B
Authority key identifier: 23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
Certificate issuer: /CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Certificate serial: 0199239FF50D699D12B4DFCAB97B590AA362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 10:01:49 +0000
Manifest this update: Sun 07 Sep 2025 10:01:49 +0000
Manifest next update: Mon 08 Sep 2025 10:01:49 +0000
Files and hashes: 1: I6xIaAc5isHO7Akh0E1Amk9_R5s.crl (hash: 2VQydXGqT8LQ9bNYr4kONgaxLy8Stfa8gM6bshZU4wU=)
2: bjCXA7rp-GRMTkdMkg_zXfKYrW0.roa (hash: FxnvNnw+IOeKtHJC0KTXpxkTr4pA05J6vavAi4HV2BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:f5:0d:69:9d:12:b4:df:ca:b9:7b:59:0a:a3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Validity
Not Before: Sep 7 10:01:49 2025 GMT
Not After : Sep 8 10:01:49 2025 GMT
Subject: CN=91281dd0b2e2cf97c6fedfdfa8b32f21bc74f82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:38:77:bd:53:cd:79:1f:bc:e0:bc:13:d4:
b9:55:2c:dc:9d:4c:9d:a0:17:d5:a9:15:40:27:8d:
db:7d:8f:ec:87:97:a8:99:9a:6a:cc:c2:64:48:e7:
13:36:54:23:c1:3e:11:43:d8:60:ef:ed:4b:7a:a2:
dc:e5:f4:87:97:0a:64:39:9a:da:4e:81:fd:e9:ad:
ad:46:c3:ac:ee:dc:d4:72:d9:c8:9b:ce:36:b0:e0:
71:b0:25:e6:dd:48:a0:92:7b:be:3a:a2:c8:b7:1e:
d7:0c:a9:f3:c8:ea:eb:ff:c4:0c:7c:01:38:c7:ff:
f0:40:3b:7c:c2:24:53:6b:bf:be:94:71:de:cf:2e:
a7:17:0e:3a:43:07:03:c5:42:4b:ff:05:26:c2:37:
0b:98:8f:c1:7f:82:3f:92:a8:1d:f9:b8:b0:63:b4:
31:fc:5d:0a:fb:da:b7:cb:30:3e:24:97:3a:73:61:
a9:01:e1:72:70:f5:c6:93:48:11:b5:7f:0c:93:e6:
7e:f9:35:a0:43:9c:0b:cc:fd:cc:56:2e:90:9c:f8:
ba:aa:9e:f7:ed:0e:42:f9:4f:ae:91:35:cf:19:7c:
ee:8e:32:44:6a:65:c2:21:1e:b4:b0:92:58:3d:cf:
8a:5b:a9:b2:c1:6f:08:d6:33:7b:d7:28:87:51:4b:
81:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:28:1D:D0:B2:E2:CF:97:C6:FE:DF:DF:A8:B3:2F:21:BC:74:F8:2B
X509v3 Authority Key Identifier:
keyid:23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c1:1e:95:58:4c:15:a9:42:fd:3c:27:b5:bd:06:a7:03:bf:
1f:c5:13:00:88:7e:ee:6e:5f:b4:fc:b2:e0:e9:c0:28:35:05:
ba:4c:5b:ea:da:e7:8b:c2:22:fa:e5:fa:b1:c7:8d:44:7d:4b:
1a:47:e5:12:ec:90:7f:27:b7:b8:a3:2b:61:90:91:67:17:cf:
6b:d6:06:8d:4e:19:7b:88:94:3a:f6:0f:94:98:40:0e:05:3d:
97:17:55:d8:83:a3:c2:0a:87:b9:94:51:bd:07:b9:7a:ab:d6:
75:ae:ae:09:12:9a:4f:e7:d5:dd:61:01:22:c1:8f:90:c4:a0:
ea:3b:9c:2e:01:8d:a9:7a:bd:e8:c1:52:3c:51:17:06:e3:03:
37:5e:52:4e:c6:ed:60:5b:46:19:19:38:e4:29:17:cd:67:e3:
c8:8e:b1:2c:c5:2c:fe:c4:90:6d:29:5c:9d:51:62:56:88:b0:
ff:eb:dd:d0:0c:89:42:41:3f:f7:77:fb:bc:9b:a4:ed:a4:0e:
76:1c:bc:ce:cf:4e:88:2d:67:bd:bd:5c:07:da:64:d3:1c:f0:
e9:d1:9a:62:91:b8:1f:94:00:09:fa:43:35:7d:55:15:22:fe:
aa:7c:ba:91:e5:b4:88:0b:17:a3:16:7f:d3:3c:90:2b:4d:61:
80:d6:a8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:36 2025 by rpki-client