Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
File: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft (raw, json)
Hash identifier: qFaRXLnExl9FSKfRc2yLF6GUuIonzlT9IfpGFxfRBPQ=
Subject key identifier: 99:28:37:F5:AC:64:42:6F:10:A9:B6:58:A4:27:82:2E:E5:3F:37:9C
Authority key identifier: 23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
Certificate issuer: /CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Certificate serial: 0198D5BB7D7BC58E52D37A48FC69AB98C0C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:01:30 +0000
Manifest this update: Sat 23 Aug 2025 07:01:30 +0000
Manifest next update: Sun 24 Aug 2025 07:01:30 +0000
Files and hashes: 1: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl (hash: uSUzjdYgS5k0cCRKcP2XECIilgANVthQAmtf10hGA44=)
2: Tp4BAItGYlXYP71Yl1jvkjdBkns.roa (hash: BUC2R1hzU4lwEDEogKCUTPLUZZa/Hz8pj9j9ce25uwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:7d:7b:c5:8e:52:d3:7a:48:fc:69:ab:98:c0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Validity
Not Before: Aug 23 07:01:30 2025 GMT
Not After : Aug 24 07:01:30 2025 GMT
Subject: CN=992837f5ac64426f10a9b658a427822ee53f379c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f3:48:cb:79:c0:fa:c1:94:21:f3:ed:d6:c4:
ce:e7:c9:c8:49:07:b1:8c:6c:9c:04:f4:64:6e:f4:
29:86:ca:ce:80:c2:20:e9:76:36:fa:33:27:e4:f4:
98:e3:4d:86:28:c3:3b:e0:eb:95:8a:fe:64:59:f0:
18:f1:19:17:1d:36:63:41:dc:9d:8b:9b:28:bb:d7:
8a:f8:f5:2a:40:17:02:1f:03:0f:ef:3f:58:99:15:
0b:da:ca:1d:9e:c6:0a:c9:ee:8b:f3:97:96:57:fa:
52:40:6f:ae:64:67:a5:81:21:20:ef:28:67:f2:34:
84:e5:3f:4b:b1:b2:67:d3:50:37:fe:05:4f:a3:d2:
aa:1a:74:72:b1:f9:39:25:e0:f8:37:c0:2c:f7:5a:
83:28:79:8e:3c:60:4a:79:d8:ca:fd:e5:ed:ab:f0:
12:a4:4b:f9:a6:b0:6f:85:34:05:db:7b:64:b8:12:
22:ca:bc:f8:9f:18:ff:25:63:96:2d:50:6f:5b:15:
e7:cd:5c:26:a5:c4:aa:52:67:1f:07:08:fe:e2:ea:
41:8b:13:ba:2b:50:c1:4b:e1:01:68:f9:8e:61:03:
b6:b0:a7:a7:7e:41:d6:05:d8:33:1d:c9:56:64:9b:
97:c2:a8:f6:29:c8:07:64:49:1b:09:12:a7:bc:a8:
5e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:28:37:F5:AC:64:42:6F:10:A9:B6:58:A4:27:82:2E:E5:3F:37:9C
X509v3 Authority Key Identifier:
keyid:23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:01:b3:74:ca:3a:ee:ff:b3:57:54:4e:3a:14:81:8b:a2:dd:
6a:3d:e4:2b:6a:14:44:f2:16:7c:cd:c0:12:98:68:66:f0:10:
bd:3a:64:b9:35:e2:86:d1:5d:60:69:d0:73:52:22:f8:d2:7f:
2f:b3:20:a3:b3:72:94:15:38:d0:6f:75:d5:7c:b5:76:87:45:
27:58:8a:6e:0c:45:84:5c:b2:a0:01:f7:7a:c2:99:84:93:00:
a6:a7:15:aa:08:bd:3f:e8:38:14:8d:64:80:46:4f:9e:93:18:
0c:21:95:d3:01:a5:26:56:fc:1d:8b:47:be:86:c1:5e:4d:dc:
06:0b:11:f0:6d:70:a3:f3:0c:ff:67:c3:80:64:0d:84:f0:4c:
7f:9f:57:65:d7:e1:d8:48:a5:79:ab:f5:b8:02:65:00:12:af:
ef:c3:9d:18:a6:6c:28:df:92:ba:4a:45:7d:1d:08:e3:1a:b3:
80:8d:19:b4:a7:54:bf:06:74:38:87:d6:08:00:20:88:29:57:
eb:6b:07:65:00:d1:12:a1:1b:26:a5:24:93:7f:42:e8:be:dd:
68:2e:fa:e0:eb:be:00:e7:09:12:24:c7:04:74:a2:39:2e:17:
f2:4d:d7:0e:52:a6:b8:6e:5f:18:db:cd:cd:71:6d:37:0a:23:
ef:f9:c6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:06:35 2025 by rpki-client