Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
File: i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft (raw, json)
Hash identifier: 78q8cX420UU7dSCW5vGnWENb65LE4jbTR1B0boS4IG0=
Subject key identifier: EC:BC:EF:C7:22:23:47:A3:E5:71:3B:00:8C:40:9F:67:B9:D2:D1:84
Authority key identifier: 8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
Certificate issuer: /CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Certificate serial: 0198D65F9AE01B9B89BB44BD5A997100402E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:00:46 +0000
Manifest this update: Sat 23 Aug 2025 10:00:46 +0000
Manifest next update: Sun 24 Aug 2025 10:00:46 +0000
Files and hashes: 1: FE1p8xqk22ZLL8TtVpBgIJ5HCYk.roa (hash: EEjSbBj9sFsFeIYvGJ66Mb2B5f9wjNh8P6NHIHv03o4=)
2: Nj_g5XagzgChnaGJmyAjIxliPxQ.roa (hash: 2T2yAo36kvnreO/zfmG7HDMPjTZHcC33NYqG6yteeqQ=)
3: i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl (hash: JA8NEcvfkGejJFIeC8GAzMP/jlhx6R8q5liF0ZKpBMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:9a:e0:1b:9b:89:bb:44:bd:5a:99:71:00:40:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6a23a2fd1a0956378a37d4fce259df2bd794a7
Validity
Not Before: Aug 23 10:00:46 2025 GMT
Not After : Aug 24 10:00:46 2025 GMT
Subject: CN=ecbcefc7222347a3e5713b008c409f67b9d2d184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:39:66:b7:d2:ea:1e:4a:cb:44:da:a5:5c:aa:
a2:4a:37:42:e1:67:c7:f3:9a:3f:7b:d6:f3:45:c5:
1c:29:51:21:68:ad:a3:12:c6:62:91:b3:10:a5:97:
70:5b:d0:05:d4:3d:4a:a3:31:47:24:6e:cd:98:1f:
d5:cb:eb:b7:4d:94:c5:30:94:8b:fe:bb:ae:69:68:
70:65:73:5b:3f:b6:07:da:a2:7a:9c:92:30:cb:a6:
1d:ad:f1:c3:eb:7f:47:9e:06:33:d2:fc:2a:61:cf:
2c:cb:08:94:0b:34:00:de:f7:bd:20:ba:73:13:0a:
3f:ff:92:64:81:b6:2d:03:39:88:f7:5b:37:60:97:
93:b6:8d:c2:6c:37:33:01:2d:76:7b:19:2c:ca:69:
13:ff:c3:60:04:fc:cb:ad:65:70:bc:c9:45:ae:0f:
34:7e:f4:27:5f:86:2e:bd:39:f5:a9:84:ab:00:05:
52:65:52:6a:a1:32:1b:ea:95:6a:da:8b:f6:64:a9:
7d:cc:8a:2a:ef:15:11:f8:90:e4:df:10:11:c6:3c:
03:5f:e8:5f:61:03:1d:ef:c7:15:a0:b7:4a:39:68:
35:8a:36:e2:6a:78:d4:e6:1f:c3:44:2c:c9:70:28:
3f:da:b2:0c:1f:c3:10:f4:33:bc:0b:b8:1f:8f:ef:
c2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BC:EF:C7:22:23:47:A3:E5:71:3B:00:8C:40:9F:67:B9:D2:D1:84
X509v3 Authority Key Identifier:
keyid:8B:6A:23:A2:FD:1A:09:56:37:8A:37:D4:FC:E2:59:DF:2B:D7:94:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2ojov0aCVY3ijfU_OJZ3yvXlKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f91b2c-c5fe-4625-a180-9a46ed5b42db/1/i2ojov0aCVY3ijfU_OJZ3yvXlKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:91:c0:e7:8f:ea:b6:1e:f6:6c:d7:00:45:6e:45:54:c6:15:
93:f5:a0:ca:4e:7c:8c:bd:6d:3c:1a:60:40:a2:90:0e:8e:4a:
64:18:53:3a:19:c1:97:d8:d1:25:c1:a7:1c:02:18:29:0b:77:
04:97:af:f4:09:c8:de:2b:07:5d:b7:2d:f6:ef:27:d4:bc:91:
ff:57:66:0c:76:32:25:c7:86:87:81:0e:25:ba:04:df:d4:e5:
c8:34:27:03:30:9a:90:7d:7e:df:da:77:18:ac:4d:a9:35:85:
48:27:26:40:1c:e2:e1:a4:00:6c:33:55:6a:2f:c2:e2:bd:5e:
ca:33:87:13:c4:3c:ee:d8:c3:86:d7:d9:f3:e7:ad:f0:14:3c:
f6:a0:ee:b0:f4:88:4f:97:36:50:7e:c8:ec:79:cc:af:7a:ad:
e4:f3:56:0d:54:5a:71:d2:4c:68:55:4b:62:e1:c6:9f:4c:de:
5f:47:70:10:c5:47:cc:0f:55:79:5a:f6:49:19:b0:66:77:fb:
33:c9:9d:29:f2:16:8b:52:88:ec:5a:71:62:bd:68:87:ec:38:
1b:50:b6:e7:c3:71:99:b4:48:e3:4a:08:b2:40:f2:9b:cd:59:
6d:5a:65:a2:4f:3f:cb:27:0b:dc:92:80:64:70:9e:26:66:07:
79:08:27:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:09 2025 by rpki-client