Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
File: iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft (raw, json)
Hash identifier: TqUulyRD4BENq5XvenMYVRhEbsngllPuT35qbyh/YpE=
Subject key identifier: 52:F9:8A:4F:73:CE:66:8C:80:B5:F3:51:61:36:5F:E1:A5:EC:0D:6D
Authority key identifier: 88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
Certificate issuer: /CN=88a780738b853acffbabdb23914c50e36421f773
Certificate serial: 0198D54EA6D5D84F1ABE735C0CF36AD4DEE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 05:02:38 +0000
Manifest this update: Sat 23 Aug 2025 05:02:38 +0000
Manifest next update: Sun 24 Aug 2025 05:02:38 +0000
Files and hashes: 1: 0JBSKBByojNYZjOoZlphUB11hQs.roa (hash: 9bDpXvSUlNPWWMoYaJSQ0SO0EuZKnPkwfl5l8GKFytk=)
2: aKf7cpyzNQSyfw8b7-Pr38WCYnc.roa (hash: oRGD5ClevpyjAOYjV/aBq4YhQP42jPwVRjMhzooXQlg=)
3: iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl (hash: fJ2H4IDrlUGmanDP/Pywn9K9Ui2fqYHaiBXZ2taimTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a6:d5:d8:4f:1a:be:73:5c:0c:f3:6a:d4:de:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a780738b853acffbabdb23914c50e36421f773
Validity
Not Before: Aug 23 05:02:38 2025 GMT
Not After : Aug 24 05:02:38 2025 GMT
Subject: CN=52f98a4f73ce668c80b5f35161365fe1a5ec0d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:eb:4f:49:0a:1c:09:fa:a1:44:87:64:e1:96:
c0:d8:65:83:90:97:05:21:e1:d3:9f:d5:71:27:2a:
4c:38:e1:e6:f8:58:74:3f:81:e5:45:15:81:cb:fa:
22:f9:a9:39:ff:51:be:21:39:c2:39:6c:23:8f:6a:
28:2c:ee:5b:25:ee:b3:a6:19:53:52:15:49:3b:63:
c4:19:36:65:67:bf:c0:1e:3a:a0:83:fc:20:9b:ef:
a5:ae:38:e0:87:b5:43:5b:05:c3:5e:cc:60:75:58:
71:dc:9f:1e:70:ea:f9:0c:99:da:3f:91:b1:58:e8:
4d:c3:91:de:1c:2a:81:13:7a:22:54:b1:7b:65:2e:
c7:34:07:79:07:da:fa:5d:09:5c:61:53:e3:8c:3a:
fc:e7:18:23:49:ae:1b:e5:6c:ab:d1:3a:23:f1:9f:
e8:49:af:6c:c2:c9:cd:ef:df:58:3c:32:87:12:31:
8c:2f:d4:90:88:4f:ab:13:e6:70:8b:7f:47:38:3b:
d3:aa:b3:ef:a0:95:54:91:40:64:8b:02:e8:97:3d:
dc:45:3d:20:4b:36:02:3e:14:bf:8d:f6:f0:e6:f9:
c0:23:de:83:57:30:c8:e1:a5:2a:ba:0c:d1:2c:ac:
5e:14:1d:fb:08:a3:a1:18:ce:55:e3:25:a4:b0:0d:
b5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F9:8A:4F:73:CE:66:8C:80:B5:F3:51:61:36:5F:E1:A5:EC:0D:6D
X509v3 Authority Key Identifier:
keyid:88:A7:80:73:8B:85:3A:CF:FB:AB:DB:23:91:4C:50:E3:64:21:F7:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKeAc4uFOs_7q9sjkUxQ42Qh93M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b89704-4fd2-4e07-a039-66f56ef9ce26/1/iKeAc4uFOs_7q9sjkUxQ42Qh93M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:63:87:08:03:c4:e2:3d:43:3c:29:35:62:0e:0f:d9:9d:36:
1f:b4:23:f7:26:0b:56:00:28:ae:d6:72:4f:04:f3:68:2d:78:
59:b2:a0:30:8a:e5:2f:e2:18:13:64:64:ae:3f:54:2d:16:09:
70:39:f5:a0:6e:c2:31:ae:d3:33:e0:cf:a8:58:33:31:8c:07:
9d:be:a4:b9:e0:28:68:fc:46:52:45:38:35:3f:8e:04:10:c0:
bc:71:5d:9a:8b:9f:12:13:c5:ad:2e:d2:68:03:42:f3:a0:ab:
09:41:e3:9d:bb:01:ec:af:18:92:5e:d8:f8:89:bb:a5:a8:9a:
36:ca:30:5e:e9:d0:32:90:01:b0:26:a2:e8:10:37:92:23:02:
7c:a7:6e:4d:0e:61:db:9d:3b:37:af:01:fa:bb:26:d4:fd:8a:
4d:ba:94:61:9f:f9:a5:ac:73:c0:80:69:54:21:50:ff:52:d9:
b6:df:e8:9e:27:37:10:6d:88:5d:39:d3:27:4d:28:7d:2f:dc:
dd:95:4f:e9:c0:56:6f:28:74:e4:8b:0d:0d:b7:7a:d0:93:5d:
55:0e:da:d4:31:c3:97:b9:41:f7:b2:6e:e7:35:ec:fd:9c:7e:
66:91:3e:99:ae:dd:27:ec:fc:03:ce:47:82:b7:b9:60:03:1f:
90:aa:d5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:19 2025 by rpki-client