Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
File: lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft (raw, json)
Hash identifier: EKq22i3oArWoM5dVjd/7mu7UEi9256BpSLO09JWKf6Q=
Subject key identifier: 57:F8:DC:17:F3:F9:16:7B:48:2D:45:C8:4D:B0:69:EF:AC:43:92:6C
Authority key identifier: 94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
Certificate issuer: /CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Certificate serial: 0198D660BC455DEBFD283436CF0E49B8A28C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 10:02:00 +0000
Manifest this update: Sat 23 Aug 2025 10:02:00 +0000
Manifest next update: Sun 24 Aug 2025 10:02:00 +0000
Files and hashes: 1: 5UBdfwa59JnO3TC0RbPoMbXcwMI.roa (hash: BXAoKRzIsnGpyUD97PKhyGWEISH1mZLvzMgOl4ru7To=)
2: DyQE1mAMz0-Y555bTSVvXkqEC1U.roa (hash: hwRt5mho9M1lkKLFQYJUnV8/sYmEs4QQ4EstdFb/mZk=)
3: lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl (hash: 4sOBgSb/+LZeZSljozkaFNvR6CxHDxhHMFtSscLKDtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:bc:45:5d:eb:fd:28:34:36:cf:0e:49:b8:a2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Validity
Not Before: Aug 23 10:02:00 2025 GMT
Not After : Aug 24 10:02:00 2025 GMT
Subject: CN=57f8dc17f3f9167b482d45c84db069efac43926c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9e:e2:7d:96:0e:8d:78:73:a2:4e:3b:10:bd:
b4:a0:42:19:e1:24:32:6d:a9:a6:9f:19:29:9e:d5:
c0:c1:17:12:52:06:bd:fb:8e:bb:d9:48:3f:e5:48:
b9:b1:a0:25:31:66:bc:6a:b4:ad:fb:b6:41:c9:b0:
31:06:6e:ac:d4:dd:b3:94:54:39:1a:d5:e6:69:85:
78:30:10:f2:4a:da:8d:95:00:bd:39:fe:43:5c:21:
3d:3e:10:a7:10:20:83:5e:ef:0d:3a:85:97:a4:59:
8f:31:66:1c:78:3f:f1:82:69:ba:3f:63:85:ef:3a:
63:f4:05:15:17:92:4d:43:6d:a7:bf:c7:1d:d2:e3:
d7:b1:7f:d0:95:8f:6d:57:87:a1:a6:9c:45:7f:e8:
89:68:b0:fa:fd:69:78:0d:06:07:69:36:1b:80:04:
6f:f4:2a:fc:d8:95:d7:ae:00:b3:23:30:dd:f4:e7:
39:e2:72:35:99:9e:43:7d:4e:2e:1f:06:b3:ca:40:
cc:cb:90:70:9b:43:22:15:56:51:cb:50:81:af:86:
22:f0:43:bb:a9:b7:f5:21:3d:2f:5c:ba:16:ff:ba:
13:80:b7:eb:f2:44:72:e2:fd:d3:71:94:ad:17:2b:
a5:7c:56:25:59:33:cf:06:c0:b1:b6:4b:53:34:ee:
3b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F8:DC:17:F3:F9:16:7B:48:2D:45:C8:4D:B0:69:EF:AC:43:92:6C
X509v3 Authority Key Identifier:
keyid:94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:bb:81:e6:5a:4a:6e:5e:0b:22:45:c3:8e:d3:10:f9:7c:41:
a4:0d:8d:ba:17:88:d2:0f:8e:21:64:74:e4:23:07:cc:4c:72:
b0:8a:d9:d8:3e:22:0b:57:5c:fa:94:52:c5:c1:9b:2b:1d:7a:
88:e8:6a:71:6d:47:18:d7:d1:b2:ef:e1:41:ba:c0:6a:a1:f5:
0c:ff:7e:59:db:f0:b6:09:0f:48:3e:68:93:4c:b7:9e:61:fb:
93:0e:0c:e5:c7:50:b3:1c:15:df:66:b4:13:d5:08:e1:de:d2:
68:bf:1f:0c:6f:52:fc:31:f6:4f:fe:0b:8f:5f:ee:96:e6:f7:
24:f4:76:1e:cf:b3:57:30:ab:9e:7a:f5:7d:72:6c:cb:9a:c0:
ff:93:c7:64:38:5a:67:55:1d:7e:37:4d:ad:19:9d:0c:44:83:
83:5a:bc:c7:22:a8:43:d3:82:74:fe:b6:03:6c:4f:80:1d:ef:
aa:be:c2:61:19:40:16:45:87:3f:33:0a:0f:7c:e1:4e:1a:3d:
51:26:66:a3:e9:51:61:ec:5c:4b:01:6c:b7:a3:74:12:9d:c1:
58:54:5b:52:1a:c3:c6:4b:18:d4:5d:64:46:06:6e:b7:62:f9:
94:bb:2d:15:31:52:97:c7:44:06:f3:56:5f:a7:72:9f:dc:cb:
09:81:02:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:29:28 2025 by rpki-client