Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
File: IPX_B2cEUj_2vogrh-76gHsYiqk.mft (raw, json)
Hash identifier: PaL6Ue08DbTzfEr3fwzLF/gsaEkIOOi9U2o0fOgyRVU=
Subject key identifier: 32:D8:3A:66:B4:AB:C3:C0:A0:34:2A:5B:D6:CC:E2:08:A3:F6:04:C3
Authority key identifier: 20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
Certificate issuer: /CN=20f5ff076704523ff6be882b87eefa807b188aa9
Certificate serial: 0198D5BBF95AC2858E33058547391186C67A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 07:02:02 +0000
Manifest this update: Sat 23 Aug 2025 07:02:02 +0000
Manifest next update: Sun 24 Aug 2025 07:02:02 +0000
Files and hashes: 1: GNNeHZyvG9VKvKXPSj2VAqX1Q4o.roa (hash: l5teIcaNt4zv8uIriCA79rj79r37yRmFeLrH41aNJJA=)
2: IPX_B2cEUj_2vogrh-76gHsYiqk.crl (hash: w9NCJiPv+GcQ2W39sWhIU58iJ2j5NIHg1DpefqHSX0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f9:5a:c2:85:8e:33:05:85:47:39:11:86:c6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f5ff076704523ff6be882b87eefa807b188aa9
Validity
Not Before: Aug 23 07:02:02 2025 GMT
Not After : Aug 24 07:02:02 2025 GMT
Subject: CN=32d83a66b4abc3c0a0342a5bd6cce208a3f604c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:aa:fd:e3:73:88:a4:c1:15:3e:77:1c:71:f4:
78:1b:23:e4:9e:67:05:5c:31:20:d4:f4:7f:a8:7a:
ff:5e:67:e0:fd:c1:80:f8:63:3e:12:7b:d7:4a:a6:
a7:61:aa:dc:85:67:e4:45:2c:55:f2:55:fb:c1:24:
74:d0:ae:45:9a:61:58:0e:70:94:2c:43:e0:e9:44:
1f:fc:1e:be:16:3c:c0:6d:e0:0c:fc:8d:91:27:09:
ee:50:76:f6:7d:d8:ea:61:6c:75:38:2f:6f:61:70:
00:30:50:6e:7c:9f:35:bd:41:f3:ed:62:26:78:49:
00:3e:77:d9:ac:51:55:15:39:f5:5d:10:00:2a:c5:
aa:9d:e9:d9:bc:38:5c:2b:fe:0d:fa:68:5e:27:f9:
fa:de:ac:31:53:c8:39:b0:e0:13:84:7d:af:e6:bc:
fb:05:64:74:74:1c:03:ea:3f:50:a6:aa:da:77:c4:
1d:18:9e:ba:e4:c1:2a:61:d2:da:bc:a9:99:f6:bf:
d7:35:27:a3:7f:71:46:b4:a3:6d:6f:2c:c5:10:c2:
f8:80:d4:f6:80:e8:1f:73:68:fe:63:4c:77:c9:cc:
ae:0c:c3:31:e9:95:c6:42:c7:eb:db:3f:4f:78:c7:
cf:5b:f7:14:f3:5d:75:92:e3:91:0c:6a:13:70:4b:
bc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D8:3A:66:B4:AB:C3:C0:A0:34:2A:5B:D6:CC:E2:08:A3:F6:04:C3
X509v3 Authority Key Identifier:
keyid:20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:9f:55:9e:42:76:03:1e:c5:d1:ef:f0:cb:cc:30:99:e1:5e:
3a:59:07:a4:df:84:31:6d:f6:e0:33:2b:f7:5a:5b:10:77:ce:
0a:a7:22:f1:67:38:eb:13:b6:0e:a7:d4:96:40:00:78:22:c0:
26:41:66:6c:af:e9:ae:c4:8b:70:28:3a:f2:c5:1b:ad:52:6d:
8d:cc:e4:98:88:f6:38:97:12:fd:09:43:52:70:3f:ba:c2:f3:
ca:bf:9f:6a:dc:e6:dc:7b:bc:a5:fc:57:10:78:c5:07:39:b6:
81:f2:18:74:47:35:ce:db:8f:75:14:44:a0:ea:fd:14:1c:3c:
86:50:aa:01:74:42:64:47:38:3f:a9:7e:35:46:53:ab:82:5e:
d6:a5:4c:14:ba:96:eb:03:e9:25:99:c9:86:a8:61:9d:d3:54:
1c:93:22:40:2f:d8:bd:51:de:88:ab:6d:cf:64:6c:c3:99:3b:
0d:e0:a5:83:3b:67:f0:38:5a:6a:0c:cb:50:56:b5:5e:6e:1d:
14:15:ad:07:90:f7:ab:a3:16:32:a4:e7:f6:9c:d8:5d:a6:6e:
df:2c:da:b5:05:0d:86:1b:ee:bf:12:8c:c1:fb:3d:72:62:9d:
91:a8:92:29:68:fb:62:47:1e:51:66:19:b8:c6:c5:aa:f7:c9:
51:ff:04:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:20 2025 by rpki-client