Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
File: iDHWIdGS-S2wk9kzCSweI2tNSXs.mft (raw, json)
Hash identifier: ARg4DFxAYrRhYbvd3reKg3LDUzoqElVeKh5hseMlWKY=
Subject key identifier: 06:72:8A:E7:23:2E:48:20:07:E3:8A:48:C9:16:31:CC:4B:28:C8:2E
Authority key identifier: 88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B
Certificate issuer: /CN=8831d621d192f92db093d933092c1e236b4d497b
Certificate serial: 0198D54EB6783E6B3440C45D78A8B5685369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:02:42 +0000
Manifest this update: Sat 23 Aug 2025 05:02:42 +0000
Manifest next update: Sun 24 Aug 2025 05:02:42 +0000
Files and hashes: 1: 1-6XFLoPOdCVTnXJMZNU0hBiKubk.roa (hash: OxkphaRHymUnb8SN18Gdla2SO6vLVqs5y/4vbMpFmm4=)
2: iDHWIdGS-S2wk9kzCSweI2tNSXs.crl (hash: n9yguvkK6x/S+1sqokPbL1UrNfMU1nb1hbCrQTkeNmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:b6:78:3e:6b:34:40:c4:5d:78:a8:b5:68:53:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8831d621d192f92db093d933092c1e236b4d497b
Validity
Not Before: Aug 23 05:02:42 2025 GMT
Not After : Aug 24 05:02:42 2025 GMT
Subject: CN=06728ae7232e482007e38a48c91631cc4b28c82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c6:7c:7b:4c:f3:a4:f4:ee:c2:f8:88:0b:de:
ee:04:de:1b:1f:94:86:d5:ce:40:ef:fd:4b:95:74:
db:2f:e5:c1:e0:3a:b1:31:d1:10:0e:bb:c6:18:8f:
2d:db:12:c4:8e:dd:ce:24:7c:e4:94:fe:12:08:63:
16:ca:86:49:9c:ed:89:69:e6:27:3a:d8:e8:fa:23:
a6:24:5d:8f:e4:5d:c2:5d:1d:15:3f:14:16:17:65:
3d:d8:99:e7:91:2c:3d:63:d1:1c:20:19:19:1d:f6:
62:95:4e:ad:6b:e8:3c:26:68:72:6e:45:50:44:5c:
7f:da:e7:e0:c3:97:a4:2b:b7:a2:88:52:4e:b0:93:
bc:e5:74:b2:ff:ea:f0:79:9c:e5:26:47:93:6b:f5:
dc:25:44:43:36:92:80:31:63:48:4b:be:99:fd:9d:
48:67:a3:cc:cc:4c:de:c2:fd:98:c0:95:00:2c:88:
67:52:3b:b7:3b:93:ca:93:01:08:7e:01:66:a4:54:
fa:9b:6b:ad:82:3f:1e:7e:bb:88:c5:51:5a:38:eb:
cc:69:88:f3:96:dd:a2:ac:c8:0e:fa:c3:48:36:0b:
07:6a:95:19:31:48:b1:40:78:24:25:22:49:70:b9:
ee:26:8a:ca:43:9c:40:ed:1e:6f:2b:d5:ce:71:37:
b3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:72:8A:E7:23:2E:48:20:07:E3:8A:48:C9:16:31:CC:4B:28:C8:2E
X509v3 Authority Key Identifier:
keyid:88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:bb:e1:b4:e0:ac:f9:cc:21:59:ed:b4:49:fb:4b:70:43:e5:
0a:75:57:b1:d6:12:f1:7b:fb:24:73:18:9b:f4:df:e7:37:94:
0f:fc:1d:1e:b8:5b:a7:fb:25:07:31:ea:9a:01:3c:1e:88:43:
0e:c8:b3:57:e5:09:4c:e0:a0:e1:05:44:81:f0:b2:5e:fd:85:
a5:c3:99:59:0b:b8:78:8b:e6:27:e8:de:49:82:f8:7e:c8:c2:
81:aa:c3:03:45:d4:e8:db:1e:b2:93:38:68:25:df:50:3f:35:
91:75:ec:8d:30:14:1b:a5:ad:b2:b3:d6:9a:b6:01:1e:9b:bf:
54:cc:2b:96:af:be:e0:06:c3:7e:30:f2:25:f6:36:08:bb:a2:
ea:c3:23:45:ff:31:1d:3f:57:80:34:5f:4c:6d:cf:87:e6:ee:
b9:6f:93:10:2e:af:31:67:1e:cf:d5:89:fd:b0:e9:26:95:e5:
67:f0:5d:e4:04:28:4b:56:89:f8:f3:53:4f:96:a7:ca:86:2a:
37:34:89:39:01:8d:a2:bf:86:8a:8a:46:3b:1f:db:65:df:91:
c7:78:f9:73:fe:36:03:5f:e3:44:8f:00:42:e0:53:35:18:55:
2a:dc:89:cd:a1:c3:fe:80:f7:7b:db:92:6e:7f:1a:dd:81:4b:
29:c7:94:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:32 2025 by rpki-client