Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
File: IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft (raw, json)
Hash identifier: rgW2LoEtsuBtEeYf6RTMTP5e/KeGMXL+bXecQ17FEfY=
Subject key identifier: 14:C7:4F:B8:9E:D8:C7:33:AE:8A:68:9A:3F:E0:EC:65:63:D8:8B:07
Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
Certificate issuer: /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Certificate serial: 019932A3888CB082D5339BB81FF2A15CC7A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
Manifest number: 13EB
Signing time: Wed 10 Sep 2025 08:00:02 +0000
Manifest this update: Wed 10 Sep 2025 08:00:02 +0000
Manifest next update: Thu 11 Sep 2025 08:00:02 +0000
Files and hashes: 1: IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl (hash: K4LQVqI4bTryLCh9zh9ZzndOAQsNgg0fmzc2bFZX2Aw=)
2: Tj1VT7s8ilnWaRH5FDEx4ErgOfw.roa (hash: EAnVAxYXeZnLn3O7V7JRGZpaiw9YJLofd+adf3s7hWw=)
3: z8gJT3mWJvoCjNtGavez3w-sptI.roa (hash: rAtA37xRZ8BRiEnR3BviWDsE+vEFga17zSGIolCXdPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:a3:88:8c:b0:82:d5:33:9b:b8:1f:f2:a1:5c:c7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Validity
Not Before: Sep 10 08:00:02 2025 GMT
Not After : Sep 11 08:00:02 2025 GMT
Subject: CN=14c74fb89ed8c733ae8a689a3fe0ec6563d88b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8d:c9:5f:26:48:32:3d:85:cc:7f:bc:30:06:
1e:22:e0:d4:0d:01:cb:2c:cf:a6:bf:e1:00:ec:9e:
54:1b:31:9c:27:e5:f9:29:28:a8:ab:32:89:ba:fd:
55:03:69:be:78:c6:20:fc:49:3f:88:49:29:df:30:
c8:a4:7a:61:d1:33:c4:5d:7e:bf:9f:2d:a2:96:2c:
ea:1b:cc:e9:54:5e:38:de:7b:17:53:2a:c5:d2:c8:
a8:4e:c1:fc:9c:72:9f:bd:bf:9c:f0:ed:1b:1d:2d:
4c:86:1d:31:82:aa:30:68:1e:c9:ab:76:72:83:27:
bf:ad:ce:94:77:0c:df:0f:6a:b4:5f:20:50:f6:f0:
b7:e8:58:24:c3:57:0f:ff:98:4c:44:a1:86:a3:61:
2e:32:bd:ab:cb:3a:69:92:e4:b5:db:18:f1:d9:6b:
dd:a9:a6:5d:56:95:6c:3e:23:5e:86:ae:02:43:e1:
16:c8:42:d4:4c:ac:15:22:98:34:25:48:81:b3:d6:
3a:86:f8:f0:3a:04:3f:1b:be:39:73:0f:85:bc:b0:
35:1e:9e:b5:ca:fc:b1:ac:3a:85:e4:db:1d:99:d8:
9f:5d:42:7d:e6:f7:b8:15:d6:66:fb:39:b9:3e:05:
15:5d:c7:dc:24:2c:90:b8:b3:cb:ad:9e:17:06:0a:
be:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C7:4F:B8:9E:D8:C7:33:AE:8A:68:9A:3F:E0:EC:65:63:D8:8B:07
X509v3 Authority Key Identifier:
keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:41:f5:e3:a5:5d:97:04:38:83:d3:f2:01:95:8c:0a:df:25:
b3:82:3d:42:af:ed:d5:43:f4:4d:c2:a2:5f:28:21:37:4e:f1:
56:b8:a8:a8:58:89:dd:57:84:15:c0:9c:2e:55:76:a3:98:f8:
30:01:f0:33:f8:27:ce:4b:ff:15:12:68:a5:59:6a:fc:69:27:
26:1a:c9:92:59:88:b4:8a:1f:f3:54:db:58:59:83:b5:59:f6:
75:36:9b:53:71:f2:9b:34:f1:12:6d:c7:16:04:59:ea:e2:b8:
ef:94:cf:ea:81:ee:8f:21:9c:45:3c:39:73:d7:e6:a2:9c:ae:
4f:5c:f6:0f:4f:87:9b:64:4d:1e:b8:a9:a3:ef:ed:7c:f0:7c:
bc:ba:45:7c:35:d8:af:43:a7:da:83:0c:38:80:33:b6:4a:04:
50:6b:0f:87:28:39:a2:33:33:f5:7c:69:75:85:0d:a1:3c:40:
d0:b3:18:d1:84:39:8f:c0:29:42:66:e7:29:9a:5e:bc:ce:5d:
67:b0:a5:cd:26:b9:08:3a:61:68:41:57:7e:9d:2f:85:7f:5d:
06:41:d0:53:de:3f:5d:52:48:2d:65:2e:23:fd:1a:ac:b9:ff:
24:e5:33:3a:87:4d:a5:1c:7c:62:55:a8:4c:54:bf:db:1c:59:
97:4d:2d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 09:45:37 2025 by rpki-client