Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
File: IoNxG9erE9o9EfJbtXpPSDwfmaw.mft (raw, json)
Hash identifier: UtQFBxf+2l08H4oHOTMctpOKxY57xszfxMLdSCdaBQg=
Subject key identifier: 7D:A0:81:64:02:11:2B:9B:9C:74:EE:0A:4C:50:DD:A0:B3:40:04:AD
Authority key identifier: 22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
Certificate issuer: /CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Certificate serial: 0198D4A7C592BE0C44C39B109A0C7242142D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 02:00:21 +0000
Manifest this update: Sat 23 Aug 2025 02:00:21 +0000
Manifest next update: Sun 24 Aug 2025 02:00:21 +0000
Files and hashes: 1: IoNxG9erE9o9EfJbtXpPSDwfmaw.crl (hash: D+Xae/59gex6pTGSvnMyIMxv7TXyduP8fIXiN7eEf9g=)
2: UsxT3pcVojJYP9Cu4db5XHBOA_A.roa (hash: IuC4o8xqUNTxh+TkbcEBFveFUP/SyyaXqWJ5U0z84Vw=)
3: uCJs3VfOd9XlMzz8RlxYwm6JR8g.roa (hash: aQ8GGeLzceXoLXJ/X0KURkE7J4DP5Ck+ioxtdgiJTwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:c5:92:be:0c:44:c3:9b:10:9a:0c:72:42:14:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2283711bd7ab13da3d11f25bb57a4f483c1f99ac
Validity
Not Before: Aug 23 02:00:21 2025 GMT
Not After : Aug 24 02:00:21 2025 GMT
Subject: CN=7da0816402112b9b9c74ee0a4c50dda0b34004ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1e:18:b8:a4:b4:91:4e:f0:4c:26:99:fd:28:
3c:cd:23:14:e6:06:a8:3d:16:08:ca:eb:f5:01:dc:
1a:07:36:4d:ed:ca:b8:c3:18:3f:de:b9:58:23:fc:
b9:70:8e:d7:be:e2:de:37:83:17:de:1e:f3:d3:ad:
2f:cc:67:bd:1c:b2:55:91:56:40:b7:42:81:76:9a:
24:8b:77:d3:27:96:c3:8a:03:b5:0e:62:0a:27:52:
1e:8a:f7:dd:f4:ce:8c:ab:cc:bd:44:35:69:04:e7:
b2:9f:f2:e9:3a:27:6f:d6:73:b6:5f:9e:88:6c:8e:
5d:cd:5e:19:a6:01:3d:b7:58:ab:10:7c:4a:93:7e:
fd:b4:bc:ac:db:c3:ff:8b:fc:fc:91:f1:dd:21:df:
d0:7e:31:6c:3b:19:53:9b:6c:14:7a:ea:56:4c:49:
ec:2a:79:9b:e9:a1:3d:3c:9f:4b:82:08:24:1f:8c:
ba:73:ef:96:08:7f:b3:5d:e0:46:62:45:08:8a:ef:
15:71:5b:6b:2c:d9:32:66:de:6e:83:be:d0:03:c4:
b8:3a:2e:ff:fb:b4:83:18:dd:22:6e:83:4a:c1:12:
c7:5f:86:7e:07:14:f1:ca:ab:bd:62:04:a2:fc:2a:
c6:28:71:d7:57:ef:d5:ad:b0:d3:59:e1:7e:16:dc:
9d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A0:81:64:02:11:2B:9B:9C:74:EE:0A:4C:50:DD:A0:B3:40:04:AD
X509v3 Authority Key Identifier:
keyid:22:83:71:1B:D7:AB:13:DA:3D:11:F2:5B:B5:7A:4F:48:3C:1F:99:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IoNxG9erE9o9EfJbtXpPSDwfmaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9cbe88-3e75-42ef-b871-5ee76f0f64e2/1/IoNxG9erE9o9EfJbtXpPSDwfmaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:59:01:71:fe:66:5a:12:bd:c6:67:06:7b:25:f4:95:f2:d3:
48:01:67:eb:42:67:c5:b9:72:13:e5:66:d7:d6:b8:a6:95:75:
98:b4:85:d0:e1:39:9f:92:54:84:05:e7:a2:39:d9:63:db:c4:
6d:94:93:48:d9:d5:f1:92:e8:70:54:06:e3:fb:7b:07:37:ac:
7d:c3:7b:ba:d8:e1:a1:0f:3d:77:93:6f:21:0c:f8:90:2f:4b:
32:36:5f:18:aa:f2:05:19:cb:b5:76:2f:11:75:7b:79:5c:e9:
6a:e3:27:0f:82:4e:73:b8:6c:a8:54:7d:e8:30:d4:95:d9:3a:
15:cf:7a:e9:3b:b1:44:39:d1:04:22:8c:a4:20:30:d5:e4:25:
72:c6:63:a2:db:33:20:14:6d:51:3d:31:65:92:6b:05:a8:75:
e5:47:e0:6d:64:9a:28:69:51:d8:d7:71:82:f5:3f:dd:06:09:
af:2c:b5:da:ec:05:ed:60:b0:14:73:e8:1e:33:2a:02:0a:dd:
6f:32:00:8b:c7:cc:fa:20:67:b3:3e:5f:20:e1:0e:10:ab:49:
f8:00:6e:d6:af:8b:1b:13:c2:28:82:03:2a:fb:bb:0a:ca:8a:
1b:cb:4d:f2:f4:26:f8:ff:f3:20:a3:63:93:a6:c0:f9:35:8a:
9d:79:f6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:25 2025 by rpki-client