Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
File: 8TIZIhzAohMmzgBsQoJbrCvjHhc.mft (raw, json)
Hash identifier: zgSP2JfealfiHGAV1Rm4nZkr5tLNCam2IoWGaqSG/is=
Subject key identifier: DA:25:E9:C8:44:AE:EB:66:A0:A0:EA:17:DD:D8:17:6D:95:03:DD:5D
Authority key identifier: F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
Certificate issuer: /CN=f13219221cc0a21326ce006c42825bac2be31e17
Certificate serial: 0198D515D1B7552EBDF82581F3FC5ADB0807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
Manifest number: 176C
Signing time: Sat 23 Aug 2025 04:00:33 +0000
Manifest this update: Sat 23 Aug 2025 04:00:33 +0000
Manifest next update: Sun 24 Aug 2025 04:00:33 +0000
Files and hashes: 1: 5coTeAd-aLMthJSQLxXPGT8GP8g.roa (hash: JV4m21KyJq6w3riW2+SatJGrGhxDnh/MH0JOFrjMSE0=)
2: 8TIZIhzAohMmzgBsQoJbrCvjHhc.crl (hash: a3lobtjJ797a00eh63EwTNvM+mkmKSdomhrNTeoS4j0=)
3: ir7-RH8I6LOM7faVYPUvWtPtBkc.roa (hash: c3S12HvLqchLUsT4f7tqk56b2aJYvGDiRT3Sw4rhzw0=)
4: sioOqEQgSdt-Z2nuvjH-ipYeJ0U.roa (hash: e/yGVe5B1VqGg3IGxSr7CYJ11tiQj+M1xaKJk8xaUwo=)
5: wBll80eEVRcCiVNLyafIlwBJOvY.roa (hash: Vrtbp5BA+79ihdsDatt4sH3YRMZYNvpy4CEr3U+1Q18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d1:b7:55:2e:bd:f8:25:81:f3:fc:5a:db:08:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13219221cc0a21326ce006c42825bac2be31e17
Validity
Not Before: Aug 23 04:00:33 2025 GMT
Not After : Aug 24 04:00:33 2025 GMT
Subject: CN=da25e9c844aeeb66a0a0ea17ddd8176d9503dd5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5a:e3:b4:46:91:07:d9:84:e5:99:8c:f4:e1:
a5:2a:00:c8:c3:17:2a:ac:db:68:15:53:74:97:14:
44:fa:29:39:54:19:a0:56:48:69:20:93:74:60:04:
60:fb:30:75:8b:66:37:8a:5e:35:f7:4e:af:27:35:
31:d3:a9:d4:46:54:b8:07:60:90:d3:c5:8a:f9:fd:
03:13:34:e5:f4:b4:f6:b1:0b:21:59:e1:06:b7:98:
8d:09:3c:f2:43:93:9b:53:69:83:a1:e4:75:3d:8f:
c1:c3:3d:ef:bc:fd:ba:44:34:5d:c5:e9:66:e8:6f:
b7:70:cb:57:ff:25:c3:5b:16:53:6a:44:85:c0:fd:
33:9c:cc:27:4e:87:ab:9e:aa:c9:b4:f4:68:8a:40:
ca:77:5b:a5:3c:e1:22:20:bd:2e:e1:d5:4e:fe:c3:
73:fe:ac:22:79:80:50:fc:a0:a1:d3:65:75:1d:00:
08:6e:1b:de:af:42:61:7d:be:13:4d:0d:f2:3b:68:
91:d7:69:0b:d5:f7:92:b9:96:92:9c:2b:7a:d8:a4:
ba:28:70:8d:77:56:65:e0:8a:91:ab:7e:96:0d:78:
d8:56:8a:ba:23:92:58:94:a5:a9:f5:09:db:c1:05:
50:3b:10:65:7e:ca:7b:b2:88:a1:49:17:55:5b:c0:
5a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:25:E9:C8:44:AE:EB:66:A0:A0:EA:17:DD:D8:17:6D:95:03:DD:5D
X509v3 Authority Key Identifier:
keyid:F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:65:9b:7f:2f:ab:ac:59:fa:32:2d:3b:31:ae:7c:90:ef:2d:
14:f4:44:09:68:ff:1b:eb:89:8e:f3:72:ac:fb:7f:d8:59:e8:
2f:f9:75:0e:ee:ad:82:64:f2:aa:74:ef:ca:95:dc:7b:16:73:
b4:93:de:c6:6a:da:32:d7:3e:08:01:4a:1e:3c:82:72:75:ab:
7e:13:5f:e8:3b:3e:9a:c1:93:b9:55:e5:51:3c:5e:24:72:b8:
ba:71:7a:40:a2:43:03:4f:d6:a8:04:86:04:ee:83:ae:71:28:
cc:a9:83:50:88:9a:e4:e5:21:ee:0b:07:3e:23:3b:a6:4f:73:
98:32:c7:1b:88:92:7d:3e:99:18:e9:86:79:f2:ed:ad:fe:a9:
45:83:dd:64:b2:54:f7:ea:d0:42:a1:e4:15:2b:ae:d8:bf:e2:
31:91:ef:fc:d1:de:b5:7b:d6:32:a0:16:82:54:bf:81:33:14:
8f:9f:30:f1:23:8f:ce:16:2d:4e:7f:2e:b6:bb:44:d2:0b:99:
47:bc:52:01:80:b8:25:16:b5:85:bc:96:88:ac:08:ce:91:1c:
ec:c9:a9:3a:3c:1c:25:f5:e5:6f:73:ed:cf:30:4e:eb:44:1f:
a4:58:73:e9:75:91:ac:de:db:44:4d:0d:b2:31:60:8f:e1:4d:
f9:e3:a5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:27 2025 by rpki-client