Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
File: IjayuK-mA20sjoMXc2-qpy2AxPI.mft (raw, json)
Hash identifier: BTq3oRoywp95tK3c9kXai/Y1wx7rZ+47Zbag4yYY5bc=
Subject key identifier: 46:E6:90:1D:AE:B4:2F:A1:DC:68:E6:2E:5A:0C:A4:D6:7C:9E:98:AE
Authority key identifier: 22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
Certificate issuer: /CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Certificate serial: 0198D5833FF0B620DDDE332637D63B4730E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 06:00:05 +0000
Manifest this update: Sat 23 Aug 2025 06:00:05 +0000
Manifest next update: Sun 24 Aug 2025 06:00:05 +0000
Files and hashes: 1: IjayuK-mA20sjoMXc2-qpy2AxPI.crl (hash: NunbvD+CcghW8KDhVDmhfuhxonU2v79k7v5xOFPBaiw=)
2: b2NrS79baNCWt7CG0X8Vv_sUMl8.roa (hash: Q1DMA/fao+0mavfnJZ9O2x4iQmJQmqUT84da1WRhc7E=)
3: spimqMKhC9PB1IAAapTxgzK4qRM.roa (hash: Uoz42yC9AHKp3g+1i18MCMkNcCBemOpgqQDvUXFhvIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:3f:f0:b6:20:dd:de:33:26:37:d6:3b:47:30:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Validity
Not Before: Aug 23 06:00:05 2025 GMT
Not After : Aug 24 06:00:05 2025 GMT
Subject: CN=46e6901daeb42fa1dc68e62e5a0ca4d67c9e98ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8d:2f:37:11:b3:58:5f:86:3e:25:e1:95:8d:
47:36:6a:55:85:c0:fa:9a:30:26:c7:b2:54:cf:5e:
3f:22:3c:af:3c:25:fa:7c:64:b1:11:20:0b:ad:1b:
8d:bd:b5:d9:59:56:a1:b5:7a:8f:4c:3b:db:5b:71:
75:ae:da:9b:85:59:7b:13:47:44:36:c4:e3:4e:6a:
10:04:8d:cd:5a:c9:92:19:da:03:3c:2c:d5:17:3b:
e8:26:d5:65:eb:ed:d8:d2:d2:9d:6c:39:b4:ac:c1:
b2:c6:a0:a3:47:dd:d7:af:21:82:26:e8:4b:8e:03:
ce:90:b7:7f:59:39:e0:b5:e1:8e:4f:7c:a4:8c:af:
0c:5a:85:ce:43:6d:e3:96:34:f1:41:59:98:a2:5a:
22:fa:40:80:4d:a7:04:05:52:35:91:b6:fb:9b:4e:
d9:e6:73:17:4d:1c:5a:9f:fc:c8:44:69:14:23:d9:
35:d2:f3:17:1d:42:5b:e1:d3:7b:c1:be:09:0a:e9:
6f:03:98:c0:b9:cd:0f:5f:d1:7d:4a:75:3c:5e:99:
07:64:eb:0b:07:88:61:2d:bc:7a:89:74:b5:69:fa:
4f:ea:af:9f:c4:e4:9d:60:af:a4:ab:81:8a:f4:ac:
b2:91:53:b0:70:b0:3f:2b:c3:6b:bb:4a:2b:4b:ce:
c6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E6:90:1D:AE:B4:2F:A1:DC:68:E6:2E:5A:0C:A4:D6:7C:9E:98:AE
X509v3 Authority Key Identifier:
keyid:22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b2:ff:d9:bd:80:81:9d:35:df:ac:5a:26:24:08:4a:40:f7:
9b:75:a1:6e:a9:74:a1:b4:53:6d:8b:91:28:69:55:2b:02:27:
6d:b3:e9:46:ca:d7:ed:f8:0b:fd:f5:8e:f5:65:48:8e:03:3e:
d4:39:3b:92:84:90:2a:fc:aa:19:dd:ed:2b:e4:23:85:40:06:
fd:88:d2:1c:2a:da:85:43:72:19:bc:9d:64:cd:30:0b:d6:49:
cf:9a:38:a5:21:0b:61:20:4b:c4:3a:60:cd:b8:9f:e8:91:90:
02:cc:8b:3d:5a:14:aa:05:54:51:be:79:c5:78:f4:8d:c8:ae:
a0:5f:a3:6e:7f:da:fa:20:0a:99:a8:91:3e:e6:8e:a5:58:54:
ed:cb:ce:25:57:f0:e1:53:b8:21:7b:a3:31:c8:8c:e5:e1:c3:
0f:c7:c8:ba:d1:38:55:d0:c3:d8:bd:9e:d4:fb:9e:64:01:b7:
18:95:f9:dc:23:ae:69:c4:68:ea:44:f0:61:ba:c2:30:c5:6a:
a8:d8:51:a9:2f:51:0f:b5:93:d2:e3:52:89:6e:33:b5:7a:6b:
bd:a9:f7:c9:62:4d:0d:2f:2f:4d:0e:44:a2:ed:06:c6:87:e7:
c1:0d:dc:5f:8b:5c:46:03:00:16:a1:4b:90:aa:48:80:c9:c6:
77:af:01:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:38 2025 by rpki-client