Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
File: IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft (raw, json)
Hash identifier: 5XJ6rN0eIYObxLvByV3QUvDWlt8ugqvpn4jizXJx6FU=
Subject key identifier: 8C:B6:DC:6B:4D:B0:2D:D8:45:FB:C5:A0:61:20:7D:B1:50:AE:D1:1E
Authority key identifier: 23:16:2B:BF:02:46:CD:A2:28:0A:29:34:32:AE:6F:0B:D6:82:61:31
Certificate issuer: /CN=23162bbf0246cda2280a293432ae6f0bd6826131
Certificate serial: 0198D5F1A29E3BC76F25C2F69AC2E4445E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
Manifest number: 090D
Signing time: Sat 23 Aug 2025 08:00:39 +0000
Manifest this update: Sat 23 Aug 2025 08:00:39 +0000
Manifest next update: Sun 24 Aug 2025 08:00:39 +0000
Files and hashes: 1: IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl (hash: aabVImZLMGuAo87eE/uSynBRUzMENNXW66gULZOybE0=)
2: _Ya9SawdjIbplJ2DDMKFuiItpWw.roa (hash: D98XW56rnTmNC9SFO3Lu162y4j8aooITvkhCs2VUjc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:a2:9e:3b:c7:6f:25:c2:f6:9a:c2:e4:44:5e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23162bbf0246cda2280a293432ae6f0bd6826131
Validity
Not Before: Aug 23 08:00:39 2025 GMT
Not After : Aug 24 08:00:39 2025 GMT
Subject: CN=8cb6dc6b4db02dd845fbc5a061207db150aed11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a1:6d:ac:b2:1e:3d:83:35:22:11:1d:f6:d2:
9d:f8:a4:ea:19:fe:a9:fd:5f:5c:0c:b9:37:c7:43:
da:ec:05:9e:a5:df:1c:43:17:80:dc:2c:8f:04:5b:
ab:50:15:91:fb:3a:06:a0:81:42:3c:8b:db:b5:a3:
76:f3:66:57:59:3f:72:76:21:ac:f0:42:7f:64:bf:
0f:f8:d5:59:47:59:e3:3a:bc:7b:2a:b2:ab:3c:f3:
bf:51:fd:d3:7b:74:da:1d:8e:6b:02:c4:34:b6:ab:
e5:28:08:56:51:62:35:e7:c2:91:0e:87:ca:da:24:
1f:d5:1a:d5:ba:a0:fe:9e:63:35:9e:4c:ed:2e:26:
1f:15:56:d5:c7:65:3f:7b:5f:20:66:b0:47:d5:32:
58:e7:a5:a0:cc:a4:00:a9:8f:32:6b:1d:34:27:11:
fe:60:52:9e:b2:62:f8:ec:d3:61:28:53:7f:f9:8f:
6a:64:1d:cc:95:77:6b:91:80:ac:87:a5:a7:0d:c5:
db:91:8a:a9:4b:60:6f:e9:68:a8:81:70:22:2f:68:
c7:c4:6f:14:97:d6:b8:49:ab:14:3c:e8:a9:ba:a9:
21:24:92:30:92:b1:db:81:64:c7:30:fc:96:35:bd:
ee:78:18:0e:68:d2:8e:7d:df:08:ca:a3:ef:4f:4c:
e9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B6:DC:6B:4D:B0:2D:D8:45:FB:C5:A0:61:20:7D:B1:50:AE:D1:1E
X509v3 Authority Key Identifier:
keyid:23:16:2B:BF:02:46:CD:A2:28:0A:29:34:32:AE:6F:0B:D6:82:61:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:06:17:a4:be:c1:71:ff:7e:8f:58:ed:38:a1:2e:61:9e:b9:
cb:9e:9a:82:8a:1b:62:ae:93:74:24:67:08:62:06:b5:f1:10:
27:f1:f1:49:7c:9a:56:71:87:fb:44:f0:0d:f6:1d:ac:a4:af:
a5:ac:20:e1:e5:3f:d3:1f:a5:c5:75:4c:08:9c:88:3b:b7:3b:
a7:81:a0:14:17:d5:e5:2c:06:dd:ec:15:ea:c1:62:7b:b5:b6:
bf:42:da:d0:39:23:0a:df:32:6f:d7:ff:90:bb:32:f0:c5:60:
e6:71:87:ed:b4:65:ea:fb:ac:b8:84:8e:c8:db:0d:f2:73:0c:
03:cc:bc:68:f5:f4:ef:56:44:59:31:d2:b5:90:66:7d:03:6f:
b0:0d:a8:e8:bd:68:8e:41:ea:d3:2f:af:ed:6c:85:87:12:47:
2f:7b:98:be:ec:23:8d:48:ad:cb:70:46:36:1c:8c:c8:a6:47:
12:f5:d3:31:d1:f4:ec:3f:36:04:bf:77:7f:25:2e:7a:b1:0d:
5b:89:d3:80:d4:ea:0d:55:8c:79:d4:be:ef:f8:5b:e8:6a:03:
17:a1:82:51:51:8f:51:18:ef:3e:bf:5f:40:98:d5:34:c8:d5:
de:4e:f0:df:7b:88:b8:1d:ed:9c:b9:62:94:aa:3e:82:d7:48:
2a:39:bc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:27 2025 by rpki-client