Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft
File: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft (raw, json)
Hash identifier: FhdCRPegVZJWC5jVJZBxdChPJ7uFi2qzVO5FV0UZhY0=
Subject key identifier: 6F:AA:16:71:10:0E:54:0B:00:7F:3B:64:E2:42:37:B2:AC:ED:68:70
Authority key identifier: 23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62
Certificate issuer: /CN=23259da3b1b38ca0939f490fb9043fcd89cfd062
Certificate serial: 0198D47452314AC7267F8105EF5A965390AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 01:04:09 +0000
Manifest this update: Sat 23 Aug 2025 01:04:09 +0000
Manifest next update: Sun 24 Aug 2025 01:04:09 +0000
Files and hashes: 1: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl (hash: mSnRUqz+A+TpSHvq0XvUbSl1p7Hw0Eu2L25mpnOvz5I=)
2: JqGjYzJUHlyPRNKT7Gdae1GdJUA.roa (hash: /ZlOeq2y9fIyqYcQI5TRRc+qHPMMjEQDsJbQfMP47Os=)
3: KP1-R8Ozo5sN8i5g7eaE07K0eTQ.roa (hash: mLvAtndHxWdPvRVZIiOq/nwf/VdytfBFv0z3meNar9k=)
4: W08HMn4p6kVqze5MDixmPqgVV3Q.roa (hash: jlOVPZJCuEAwn3iEzzJNLFkpo/PRQpHf+dW9CA2qsug=)
5: ZaM9jNyw62egtMMXYnGxszrNY3k.roa (hash: IjXCT+wQnlaMHMU5neUWgppwJ+IMB7wimw7ZMxVicdg=)
6: cf3WHfeWDYu7TWnELnXzycteCaY.roa (hash: TcxuwVKWwTiShtI0Unrv/gZ/YwHGK8T1H3ocBzBxMZk=)
7: fuo8dYdaswIRyEIz4oPsApWqGJc.roa (hash: TgHuzsK6LNwJZxHjJiXaEYIfR/pJeI5Px7YOwniHSmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:52:31:4a:c7:26:7f:81:05:ef:5a:96:53:90:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23259da3b1b38ca0939f490fb9043fcd89cfd062
Validity
Not Before: Aug 23 01:04:09 2025 GMT
Not After : Aug 24 01:04:09 2025 GMT
Subject: CN=6faa1671100e540b007f3b64e24237b2aced6870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:23:27:fb:60:65:cc:57:1d:f0:5e:02:51:6f:
6d:e4:41:2d:14:4d:20:ed:8b:f3:5b:d8:7f:fe:72:
ea:39:17:03:f2:cf:af:bc:5b:67:7c:42:49:0b:58:
ff:59:5f:36:64:f5:5d:7e:43:fb:a6:e1:9c:e3:c1:
ec:f3:ba:0f:fb:23:5b:ea:d0:df:6a:51:a0:34:e1:
b4:0d:ce:e2:61:b7:f8:38:fe:fa:42:63:97:1c:ee:
5c:fb:e4:85:9c:c5:d4:9f:88:24:a2:c8:88:85:16:
32:1c:02:8f:78:ce:4d:d0:a6:65:fb:1f:a6:3b:62:
9c:43:b7:49:f4:7b:1e:b1:23:38:b5:80:b2:72:d9:
b8:50:05:42:12:aa:17:11:8b:10:d3:0f:cd:f9:ce:
de:7a:65:6a:20:06:4c:b3:e5:ea:29:f9:fb:1e:8f:
9a:44:e5:bc:48:a0:09:07:e4:29:3b:4e:6a:7b:f3:
89:a5:f6:52:67:de:9a:04:c1:36:25:ac:36:28:dc:
e4:ff:2a:02:fe:16:79:86:e4:a4:5d:8a:ef:36:d3:
43:58:70:77:74:7e:1d:ae:c2:92:b5:e9:5b:60:e0:
de:73:4d:5c:22:be:d9:44:7f:29:f6:5d:aa:f2:ad:
cf:c9:b5:c0:5e:33:a4:a6:f9:39:57:a4:c4:02:62:
08:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AA:16:71:10:0E:54:0B:00:7F:3B:64:E2:42:37:B2:AC:ED:68:70
X509v3 Authority Key Identifier:
keyid:23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1f:c3:2d:df:c9:cb:ed:29:72:e4:6f:e0:ed:25:33:71:76:
ff:a3:ca:37:e5:c4:84:56:f4:f9:4f:70:ec:7b:a9:9f:74:4c:
eb:8b:52:cd:68:88:71:6c:a9:62:09:8b:66:44:8e:0e:f4:46:
e0:fe:0e:d1:f8:00:10:d6:b5:19:d7:35:ed:4e:31:d5:88:99:
2c:fe:6b:cf:0c:33:20:c2:85:41:41:75:07:13:28:44:d4:4c:
5c:51:2e:92:9d:03:ce:d8:c0:5c:41:f0:04:1c:b9:f9:2b:d5:
f3:b6:76:6b:28:5b:b0:cb:c2:48:a6:05:cc:d2:97:13:72:10:
a6:20:a8:b6:17:ec:97:72:8c:40:0a:3f:48:bc:ba:6e:23:82:
3a:b8:24:d0:5e:86:4e:2e:6b:bb:4c:4d:19:ad:ec:87:ec:cc:
5a:70:99:c0:2a:9f:ae:c9:5f:42:78:38:4f:63:1a:a8:df:8c:
49:ce:94:ce:3b:16:85:f2:6c:c2:13:31:9f:2b:48:f0:77:94:
54:23:ab:3e:2b:12:74:d3:de:1c:0a:d8:0f:a2:4d:2b:59:33:
53:11:f4:f4:d5:f3:5c:78:df:83:78:1a:d8:ae:8a:0f:87:80:
bc:68:bf:52:0e:71:e3:88:ad:a4:04:d3:97:fa:fd:f2:f8:e6:
b2:e5:d1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:21 2025 by rpki-client