Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
File: is3dXDDVgOsP7soqFs9cWoslaP0.mft (raw, json)
Hash identifier: Ti0M1T96cb2Iw5wS11fHU1OjbWZe45vOvH7IRKieoj0=
Subject key identifier: C8:B0:86:F1:AF:2D:2B:03:F8:A5:9E:6B:1E:05:F5:18:41:11:03:C7
Authority key identifier: 8A:CD:DD:5C:30:D5:80:EB:0F:EE:CA:2A:16:CF:5C:5A:8B:25:68:FD
Certificate issuer: /CN=8acddd5c30d580eb0feeca2a16cf5c5a8b2568fd
Certificate serial: 0198D773A5BF758BED2555A680F4D963FEE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/is3dXDDVgOsP7soqFs9cWoslaP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 15:02:17 +0000
Manifest this update: Sat 23 Aug 2025 15:02:17 +0000
Manifest next update: Sun 24 Aug 2025 15:02:17 +0000
Files and hashes: 1: 1-BU0QGGPOY6StLl6EjdaPUoRp0U.roa (hash: YErgeEfB3mK/ybWEoY6pFZ+o+6uteNHWASk7smyhzI8=)
2: is3dXDDVgOsP7soqFs9cWoslaP0.crl (hash: GfxikQHuTIiccfSqhsdB00TQJIea440IO5SJll8QQOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/is3dXDDVgOsP7soqFs9cWoslaP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:a5:bf:75:8b:ed:25:55:a6:80:f4:d9:63:fe:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8acddd5c30d580eb0feeca2a16cf5c5a8b2568fd
Validity
Not Before: Aug 23 15:02:17 2025 GMT
Not After : Aug 24 15:02:17 2025 GMT
Subject: CN=c8b086f1af2d2b03f8a59e6b1e05f518411103c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:95:b8:97:fe:25:88:c5:bc:61:b6:cf:32:87:
44:de:7c:2d:5f:41:fa:a0:24:5b:c8:22:4d:d4:31:
8f:a5:18:98:fc:a3:cc:68:0c:b8:47:6d:d0:b8:59:
f4:f9:6b:53:e8:ad:b1:f2:64:f1:a0:0e:52:d2:e2:
94:e9:08:3d:37:46:1e:f6:d8:19:3e:4a:5f:46:36:
6a:34:7d:32:03:66:d5:6e:3a:af:e7:58:84:62:0c:
0a:3f:b3:5d:65:e3:c7:e1:a6:15:70:83:8d:df:62:
cd:ee:70:13:12:5f:20:00:4e:45:9b:55:a2:fa:22:
94:02:90:a2:73:45:86:fb:35:e1:1f:12:c8:7b:25:
e7:a1:53:24:73:e5:fc:0c:cb:a3:32:d4:65:90:62:
52:60:34:51:c0:df:e8:9d:8b:1b:4f:91:dd:53:99:
7b:df:d1:84:d0:cd:06:4e:0e:9e:ed:ba:3a:e8:bc:
c6:a6:d4:ec:e5:54:36:4c:83:18:e1:3c:3d:f0:44:
b5:a5:19:5b:03:93:7a:92:2e:10:59:f9:dc:80:92:
ec:a4:dd:5a:0e:8e:29:f4:2a:70:16:39:ff:ef:ea:
63:24:14:b6:9c:e9:89:be:38:56:0d:34:dd:e5:c4:
1e:2a:60:6b:77:48:69:d4:19:10:32:b6:63:49:4b:
82:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B0:86:F1:AF:2D:2B:03:F8:A5:9E:6B:1E:05:F5:18:41:11:03:C7
X509v3 Authority Key Identifier:
keyid:8A:CD:DD:5C:30:D5:80:EB:0F:EE:CA:2A:16:CF:5C:5A:8B:25:68:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/is3dXDDVgOsP7soqFs9cWoslaP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/25aca7-7e28-487c-86d2-17b1c7379300/1/is3dXDDVgOsP7soqFs9cWoslaP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c0:82:15:01:1c:65:b2:48:63:d6:60:b1:f2:9b:9f:4d:ae:
1d:97:14:aa:8f:ec:83:71:df:62:07:ef:9b:2c:dc:54:24:ed:
b2:7c:38:e5:de:a3:f5:99:a9:90:5a:41:72:b0:00:90:8a:d6:
a7:d7:9f:97:76:86:65:ea:68:e9:ac:fd:eb:d4:f0:ca:c0:04:
3c:d1:d7:d7:9d:2b:3c:c6:8d:e5:5e:74:c7:9c:d1:ec:b9:1c:
3c:af:44:79:7d:61:0e:a4:c1:b0:72:84:3a:9b:9e:7a:99:e6:
1b:53:ab:58:6e:f2:92:7d:c1:9f:b9:c0:df:d3:da:7b:98:70:
00:e7:45:1c:51:75:aa:af:f3:fc:8c:7d:14:6d:e4:7b:e6:ba:
61:56:47:cf:8d:bd:ff:40:73:09:ed:08:35:5f:8d:b4:8e:ed:
d4:ca:9f:c6:ba:d2:1b:6c:4e:c0:57:b9:94:66:b6:25:fc:b5:
aa:7a:fa:4d:62:d2:34:c2:6a:93:e8:ae:ce:8f:be:08:57:b1:
75:cc:1c:c9:19:18:00:70:48:26:28:ed:21:39:e9:fd:81:12:
34:c8:33:79:79:d0:98:3e:64:dc:88:d4:29:7f:d6:fd:19:6c:
e3:d1:79:aa:e3:39:7b:3b:ab:4c:3d:79:60:ce:d5:3d:d0:08:
f7:f6:22:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:54:01 2025 by rpki-client