Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
File: iBr4X4HdPzskqxTtH0LHzEZlAvA.mft (raw, json)
Hash identifier: cKwHMsfrhVMJTSfKS9vj0TQ43EzHWh6puedJPNcqQJg=
Subject key identifier: DA:36:62:95:13:57:8E:83:F0:8F:9F:1E:04:74:F6:D2:ED:2E:A2:6B
Authority key identifier: 88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
Certificate issuer: /CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Certificate serial: 0198D4DFDC0284234A98E693C0E13416D0B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:01:37 +0000
Manifest this update: Sat 23 Aug 2025 03:01:37 +0000
Manifest next update: Sun 24 Aug 2025 03:01:37 +0000
Files and hashes: 1: ThUJ8aSmMtP4aHcJCzzypfLa8ic.roa (hash: dNkVlGDZVTIktuBX7rmx/RdrVxwALHhLlc8K3va90zE=)
2: iBr4X4HdPzskqxTtH0LHzEZlAvA.crl (hash: MN6NEDdB512C0zc13bZLpGhc1xJFi92Me37JhPjna8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:dc:02:84:23:4a:98:e6:93:c0:e1:34:16:d0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881af85f81dd3f3b24ab14ed1f42c7cc466502f0
Validity
Not Before: Aug 23 03:01:37 2025 GMT
Not After : Aug 24 03:01:37 2025 GMT
Subject: CN=da36629513578e83f08f9f1e0474f6d2ed2ea26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:b1:0a:9d:cb:57:70:2c:e1:93:ea:78:90:
7b:ed:91:ef:af:62:90:07:fa:6a:e1:3a:54:20:5f:
5f:92:5e:e8:38:81:50:f7:50:0b:e0:a9:d2:99:8a:
82:7a:3f:6b:0a:e6:6c:a6:da:f9:ac:a3:57:d0:12:
fd:48:9d:ae:4c:e0:47:78:33:c5:9c:c9:87:01:e6:
8e:e7:64:95:30:65:9c:73:1d:1a:d1:98:e5:e2:ca:
04:92:2f:fb:0d:77:30:12:55:fa:9c:f4:d5:7e:db:
65:82:11:a5:05:d7:2b:3a:66:91:60:a3:5b:3f:d2:
61:ed:a6:52:2b:38:76:c9:ca:d2:52:3e:0f:47:6b:
83:e7:93:44:85:ad:ea:87:c3:9d:8b:ea:4e:1f:2e:
68:5a:6e:99:95:72:03:76:99:62:01:dc:60:68:54:
9d:f4:a4:47:9c:23:ec:1c:69:dc:80:fd:30:6a:c6:
88:30:c5:be:84:38:b8:e8:1b:de:85:92:2f:fd:df:
e8:a2:f1:c8:9b:bd:ef:86:9f:6d:94:92:c1:9f:71:
a6:94:fd:4c:19:b8:7b:36:79:27:bf:ed:49:57:b3:
47:8a:a1:df:f1:87:b5:f0:08:35:1f:5c:d5:f5:da:
33:cf:9f:00:fa:69:05:18:43:88:e1:5b:8a:2b:68:
ad:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:36:62:95:13:57:8E:83:F0:8F:9F:1E:04:74:F6:D2:ED:2E:A2:6B
X509v3 Authority Key Identifier:
keyid:88:1A:F8:5F:81:DD:3F:3B:24:AB:14:ED:1F:42:C7:CC:46:65:02:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBr4X4HdPzskqxTtH0LHzEZlAvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d442a7-74e6-476a-8755-f255658bb881/1/iBr4X4HdPzskqxTtH0LHzEZlAvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:6d:8c:2d:5a:a8:f5:cb:d8:ca:ef:60:72:86:35:9e:92:15:
a2:4f:c0:2f:ec:7e:16:ee:54:57:d8:9d:9f:ce:aa:19:92:c0:
b5:ff:d1:6b:f6:aa:39:09:2a:36:a9:e4:68:54:25:2e:0a:a0:
73:5e:67:a7:e1:5b:b4:35:4d:9c:df:b5:30:cf:f2:f6:9b:d2:
db:bd:45:0a:ff:0f:44:51:c6:02:97:6e:b5:25:00:9f:94:6d:
96:c9:ea:90:19:45:20:3b:34:25:32:19:7d:ce:c0:8d:a8:1d:
4b:f8:cc:90:01:f6:be:ef:29:93:78:87:8a:b7:9c:64:ed:db:
5c:8e:de:e2:9d:41:f6:c4:9e:8b:1b:1b:1a:00:4d:2c:c4:82:
f0:dd:fc:1b:9e:3f:5a:3e:a3:67:e6:98:97:9b:d4:de:e1:ad:
d9:4b:3d:d1:51:39:6c:b2:77:85:b5:66:20:2c:bb:b2:3c:11:
f8:75:5c:b2:60:1c:68:18:5c:43:be:51:2a:24:a3:2e:71:80:
a0:13:ad:15:a7:ec:63:b4:af:89:de:db:86:6f:2c:c6:ca:ea:
91:30:6f:50:7f:68:db:ad:39:50:ad:e1:b7:75:d2:1c:9f:cd:
80:69:de:2c:30:23:e7:c7:f6:41:13:ca:c0:d7:9b:98:bb:34:
0c:29:a1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:29 2025 by rpki-client