
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
File: ilZohaHW1VRFRs0oXYbE7_6qPCw.mft (raw, json)
Hash identifier: Fq21vrfes5I1Nnvg93Obzz2mXyKmWVVrdbjQtNh2nig=
Subject key identifier: FA:78:44:87:A6:CD:7C:39:BC:C9:08:E8:42:8B:E2:02:7A:5E:07:64
Authority key identifier: 8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C
Certificate issuer: /CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c
Certificate serial: 0198D583DADAE22FA146F4C338336C832B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 06:00:44 +0000
Manifest this update: Sat 23 Aug 2025 06:00:44 +0000
Manifest next update: Sun 24 Aug 2025 06:00:44 +0000
Files and hashes: 1: Lb8vbukOa5hlTRoTkAdj0qnnj8o.roa (hash: gDIkSUwNSGV5eKv6/1wqJs7MzcoYqV9u1fGfL9hM0j0=)
2: ilZohaHW1VRFRs0oXYbE7_6qPCw.crl (hash: WTtQ8ExPtnp3AeksFI7Dangocoku6/ASs5EqJCyNhlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:da:da:e2:2f:a1:46:f4:c3:38:33:6c:83:2b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c
Validity
Not Before: Aug 23 06:00:44 2025 GMT
Not After : Aug 24 06:00:44 2025 GMT
Subject: CN=fa784487a6cd7c39bcc908e8428be2027a5e0764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:86:d9:df:cf:7e:9f:e9:4e:a2:4d:ab:26:1c:
b1:64:35:8d:90:c6:f5:81:0d:c9:8e:ab:17:28:3d:
a1:39:73:0f:6a:1a:23:7d:f3:13:4a:2d:3d:c0:af:
c8:72:29:72:42:38:52:b3:a1:2e:ed:f6:d9:54:0e:
60:c3:d0:54:67:b4:43:c1:f6:d0:df:a0:06:19:7a:
22:57:5c:fc:ab:c9:6a:e9:22:9a:df:f0:9c:2b:35:
bd:3f:1d:4c:8e:8d:7d:32:5c:35:c3:21:65:5a:38:
51:3a:c3:15:b4:0e:38:6b:6e:dd:df:6d:64:a2:ac:
d7:1f:9b:d3:28:d8:b6:de:88:52:85:dd:ee:a6:01:
db:5e:ee:ed:93:ec:99:62:5e:3e:0d:ab:d1:aa:6a:
ed:24:db:9e:93:12:ce:44:db:a4:92:66:01:e6:1e:
a7:48:de:99:94:f7:09:e4:02:1c:7d:df:e4:5e:4a:
7c:ca:16:df:b2:62:7a:b2:0e:dd:6e:6a:cc:17:67:
12:12:14:94:14:2d:b1:27:bc:1f:9a:c3:e7:0e:da:
af:06:f0:24:d1:8f:a9:48:f5:ed:11:97:58:57:4c:
83:9d:e5:c4:c7:3b:f3:ea:9a:8d:f1:6e:84:fa:0f:
b3:42:33:01:1f:b9:5b:e6:21:af:ab:6b:6f:7e:e6:
ad:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:78:44:87:A6:CD:7C:39:BC:C9:08:E8:42:8B:E2:02:7A:5E:07:64
X509v3 Authority Key Identifier:
keyid:8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2f:dc:f4:68:a2:91:fc:c2:2d:2f:65:e4:9e:ef:b5:b3:a6:
05:b0:3f:f2:0d:3b:9f:63:62:22:f4:d2:10:d9:e7:22:80:33:
8f:85:62:66:34:ba:de:76:f2:3c:9e:d0:62:81:4d:f1:2a:7a:
c9:a9:27:1e:56:48:b3:1a:4a:36:72:90:16:47:f1:a4:7f:22:
dc:f5:a3:94:4a:e6:22:e0:55:49:f4:0c:c1:45:50:2c:7d:66:
4f:17:4e:0f:99:00:0d:27:9d:20:d8:dd:c8:56:c6:1d:31:52:
65:b0:16:79:18:c6:04:97:6d:38:01:57:22:2c:0a:5b:09:b3:
2a:67:c1:08:f9:6d:5b:ba:65:33:85:ce:82:c4:63:5d:46:41:
a3:89:08:dc:89:1f:e2:2c:b9:d7:4f:c9:38:3e:b1:11:0b:bd:
60:39:31:12:cb:0b:f3:dc:df:29:6a:f5:ec:87:c0:5b:39:00:
ae:7c:32:35:ad:8e:b0:3c:f6:ad:ad:57:9e:fe:b5:e3:29:34:
4c:a1:54:d1:ed:6f:5f:ab:36:4a:f0:d3:7a:6f:90:e5:4e:d3:
9a:08:66:e0:65:99:93:72:2d:ad:13:ab:ae:64:36:d3:3f:46:
10:08:48:82:49:9d:f6:8e:08:81:7d:b7:d8:19:4d:e2:68:b3:
42:ff:e2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:57 2025 by rpki-client