Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
File: IAxw024BOwfk5tjsPqTuQTtKqpg.mft (raw, json)
Hash identifier: 97LQx8iXmSq56Xpa7emPgbVj1tLZi1IOvCoo3+ImD9Q=
Subject key identifier: 00:39:4D:59:8C:29:0E:FC:68:AB:93:69:B2:F3:6D:80:CD:7F:2F:D1
Authority key identifier: 20:0C:70:D3:6E:01:3B:07:E4:E6:D8:EC:3E:A4:EE:41:3B:4A:AA:98
Certificate issuer: /CN=200c70d36e013b07e4e6d8ec3ea4ee413b4aaa98
Certificate serial: 0198D7057AAD5146DB2D667E7E849CD332FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 13:01:57 +0000
Manifest this update: Sat 23 Aug 2025 13:01:57 +0000
Manifest next update: Sun 24 Aug 2025 13:01:57 +0000
Files and hashes: 1: IAxw024BOwfk5tjsPqTuQTtKqpg.crl (hash: gZb4gxpj5a0xMDrK/NX/4lbbVd9QJ+T+uxqtiBB7eFM=)
2: xInhnEQ1Wnjyaeg0NstEg1xaXmc.roa (hash: v0sQzu+7Kta5k4gVJi492esLH7WHwA4RWeUkfyAHe34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:7a:ad:51:46:db:2d:66:7e:7e:84:9c:d3:32:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200c70d36e013b07e4e6d8ec3ea4ee413b4aaa98
Validity
Not Before: Aug 23 13:01:57 2025 GMT
Not After : Aug 24 13:01:57 2025 GMT
Subject: CN=00394d598c290efc68ab9369b2f36d80cd7f2fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c5:1f:3a:cd:17:d7:f7:58:05:66:ea:94:cc:
fd:71:d2:60:2c:07:b4:1d:3a:2c:2f:12:02:e1:cf:
1b:16:1c:83:bf:36:cb:80:88:cc:46:a3:e9:c0:9d:
cb:14:d1:ee:fd:a4:b7:96:cc:38:ed:49:2c:e0:57:
b2:bf:c5:2b:83:80:72:4a:10:06:c3:bb:52:2d:a9:
5d:8f:ee:d8:50:a8:b7:3c:92:62:de:fb:29:12:06:
9f:85:7a:1d:79:7a:81:11:ce:d3:39:42:a3:7c:f5:
82:71:17:7b:2a:85:da:9c:1e:49:7b:29:fe:fa:62:
19:d6:2d:ec:55:73:d3:cb:56:4f:3b:50:b7:d2:33:
af:d9:67:35:a4:21:af:02:38:31:03:f0:1e:f5:9d:
7d:46:fd:48:4a:ee:69:f6:6f:f6:5a:f2:24:96:9c:
ab:31:dc:f3:1f:df:c0:fb:a9:24:2f:58:28:a5:c1:
70:c5:52:24:0b:3d:d9:c2:74:55:ac:91:2a:7a:29:
54:88:f9:7e:2c:a1:d8:38:e3:2a:b8:c4:1f:38:de:
ee:67:d8:65:3f:8e:0e:2b:8c:d1:af:06:4d:90:be:
78:6e:cd:5f:83:6a:99:6a:5c:f6:3e:6e:d9:c4:d6:
35:26:e4:1a:bc:f5:0c:11:8d:06:ae:f4:ef:09:d9:
f4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:39:4D:59:8C:29:0E:FC:68:AB:93:69:B2:F3:6D:80:CD:7F:2F:D1
X509v3 Authority Key Identifier:
keyid:20:0C:70:D3:6E:01:3B:07:E4:E6:D8:EC:3E:A4:EE:41:3B:4A:AA:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAxw024BOwfk5tjsPqTuQTtKqpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d5ee0d-475f-41d7-9c25-15803ffb1746/1/IAxw024BOwfk5tjsPqTuQTtKqpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:6f:d1:bb:f0:b5:9c:65:3a:70:a9:46:13:96:83:7b:39:97:
7c:f7:0c:d3:e9:bc:b1:13:45:95:b9:f6:e1:a8:4e:31:19:00:
1c:6e:33:62:75:35:e1:15:b6:51:63:8b:14:2d:5f:a8:2b:7f:
dd:40:3c:78:af:89:51:4d:17:48:de:e7:77:69:e6:b6:65:00:
a7:1e:f9:4f:b5:b2:b4:13:27:d3:33:2f:09:93:c7:96:32:eb:
40:19:15:ef:3a:a7:93:7d:5d:f2:53:7d:c9:49:2c:9b:ce:09:
5d:09:fe:5a:f3:a3:49:c2:76:dd:3a:c4:0c:e8:b9:d7:b2:5a:
49:cf:27:96:fe:8a:7b:18:20:8f:28:0a:82:97:59:01:3c:d8:
62:58:23:2e:ba:c1:b9:c7:1f:44:13:11:55:37:fd:a9:8c:f8:
96:36:42:47:cb:39:ff:82:c0:4c:1b:36:a9:0a:42:db:7c:cb:
86:6d:d7:ff:aa:bb:ce:56:7a:2f:9a:e1:10:9c:22:43:e5:dc:
72:b4:4d:71:11:8f:19:d6:55:a0:28:bc:7e:9a:e8:87:19:4d:
fe:92:28:5a:78:71:cf:20:1a:de:c0:78:c7:a5:97:26:e0:e0:
f9:1c:bd:2f:26:bc:e0:eb:e0:93:28:8e:af:fb:84:f5:87:1a:
64:8d:ee:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:40:00 2025 by rpki-client