Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
File: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft (raw, json)
Hash identifier: yVffywMrkryBzFRV5oaMrmubmQ5T7v3e+br8r059yn8=
Subject key identifier: 6A:19:AD:13:4A:A8:A9:EF:4E:37:FC:F2:EC:8F:0A:3B:AF:EF:E0:C1
Authority key identifier: 88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
Certificate issuer: /CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Certificate serial: 0198D6602117C7F26A6F9241F2776497D530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 10:01:20 +0000
Manifest this update: Sat 23 Aug 2025 10:01:20 +0000
Manifest next update: Sun 24 Aug 2025 10:01:20 +0000
Files and hashes: 1: YOyr4rKnnzDrXdmtMOktrTLMhdg.roa (hash: 9XaoEGH44aifrIE9gnosDm/sLWWt90nSBonwPhD6BKU=)
2: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl (hash: psS88K9h3ofTxHQH67V5Kokk1LZ5Nu3gUntYOlLa8qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:21:17:c7:f2:6a:6f:92:41:f2:77:64:97:d5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Validity
Not Before: Aug 23 10:01:20 2025 GMT
Not After : Aug 24 10:01:20 2025 GMT
Subject: CN=6a19ad134aa8a9ef4e37fcf2ec8f0a3bafefe0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ed:17:00:d2:27:11:66:b5:54:70:7a:4b:af:
82:7f:6a:a0:2f:3e:65:45:17:65:29:b4:f7:96:75:
64:ee:04:23:81:ca:9b:85:7d:92:b7:c3:e3:63:be:
26:a6:98:f0:73:0f:c4:60:85:38:33:3d:36:0a:26:
8a:f1:49:5c:85:17:23:2c:66:2e:4c:19:92:3f:b9:
ba:3c:d9:d6:51:be:6e:8c:93:11:f8:44:22:95:ba:
6f:40:2d:d2:87:ff:2f:cd:56:4a:88:eb:86:2b:b6:
05:94:b6:e8:91:af:70:5a:ca:df:7f:b8:0d:a4:fb:
0a:ce:76:cf:9a:33:cb:8a:b1:21:86:38:1a:c6:0c:
59:b6:e9:ab:bf:61:42:bf:a3:14:cc:37:a4:4a:79:
41:dd:11:ad:9e:7f:9c:ae:cc:c0:96:b2:31:71:a0:
78:07:3a:43:52:26:bd:cf:fc:37:2f:5b:e0:9d:ba:
41:64:8f:9c:0d:67:f0:f9:3a:22:3a:05:43:cb:b2:
64:48:ca:cd:05:89:12:12:c4:44:5b:0a:0f:39:be:
b3:b6:9a:69:ae:38:d5:8a:75:9d:26:3b:40:f4:3b:
0e:63:37:b7:a8:d1:71:d9:c1:50:7c:2a:a3:d2:ec:
45:f3:b8:3d:81:df:70:50:6a:c9:ac:6d:83:73:e5:
d8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:19:AD:13:4A:A8:A9:EF:4E:37:FC:F2:EC:8F:0A:3B:AF:EF:E0:C1
X509v3 Authority Key Identifier:
keyid:88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1e:1c:18:f0:55:ca:d9:6e:c3:78:64:07:e6:ea:7e:d3:cd:
31:5f:6a:c2:a3:75:0d:8e:e2:94:7b:cf:e0:60:33:0b:11:f6:
81:86:27:5c:19:d8:9f:f6:d3:37:e3:90:9a:92:81:f2:ff:12:
02:ba:b4:52:a6:ba:31:dd:5d:cd:15:de:e0:83:4d:50:50:1c:
b0:50:7c:37:40:4c:bf:a9:6c:d6:d8:5d:be:bf:10:27:39:05:
14:fc:3a:37:b1:f6:7f:d5:00:06:8b:f4:4d:07:85:3b:84:d7:
69:b4:5a:a3:b9:b5:be:9b:b5:9f:18:b0:d3:70:cf:f0:b7:00:
7d:08:50:0e:88:03:fb:df:0e:ec:ba:96:68:ee:eb:5a:05:e4:
60:87:07:1c:bb:93:cc:70:4e:da:a1:b5:17:58:6a:5b:4b:cd:
90:5f:a9:c5:c2:b0:0d:2e:42:b0:65:f0:dd:b9:22:a7:b1:38:
32:06:cf:84:cf:25:c0:29:6b:73:76:37:39:2f:b9:20:e5:12:
d4:99:3c:03:f6:54:af:ab:be:64:5a:2b:07:71:b6:35:ac:d2:
ca:a0:d0:0f:51:02:e8:64:5c:3e:5d:fe:15:08:79:5d:9a:56:
76:1d:e3:59:9e:50:d5:dd:cd:30:a9:9f:e4:08:c5:73:d6:4d:
e6:9a:e2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:53 2025 by rpki-client