Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
File: I_IfcxbhvXj4bupkJdXCKbmA-aw.mft (raw, json)
Hash identifier: j7n4DIu2FNpIqGYHCF49uBFXBuFaMUIP96Z/2xBampo=
Subject key identifier: 9D:7A:AB:8F:1D:4D:1D:6E:C0:41:BC:E1:6B:90:0C:93:FA:F6:AE:0A
Authority key identifier: 23:F2:1F:73:16:E1:BD:78:F8:6E:EA:64:25:D5:C2:29:B9:80:F9:AC
Certificate issuer: /CN=23f21f7316e1bd78f86eea6425d5c229b980f9ac
Certificate serial: 0198D4A834E98947067CFFF9A1110728217C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 02:00:49 +0000
Manifest this update: Sat 23 Aug 2025 02:00:49 +0000
Manifest next update: Sun 24 Aug 2025 02:00:49 +0000
Files and hashes: 1: 15gQ3l_CTz5DpsQh5tCstrbwJks.roa (hash: NBh6zaBQW3FImxNGTreLJET3gJwOeBKW+FttZU4GhEA=)
2: I_IfcxbhvXj4bupkJdXCKbmA-aw.crl (hash: MpBm/scy4aWMquoATNsovG3ig1b6QEtDqIc9Cv3lkuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:34:e9:89:47:06:7c:ff:f9:a1:11:07:28:21:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f21f7316e1bd78f86eea6425d5c229b980f9ac
Validity
Not Before: Aug 23 02:00:49 2025 GMT
Not After : Aug 24 02:00:49 2025 GMT
Subject: CN=9d7aab8f1d4d1d6ec041bce16b900c93faf6ae0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6f:63:4a:71:00:f9:03:5b:e7:f8:ed:39:7a:
7e:bd:58:f2:95:72:33:cb:35:43:cc:3f:7d:ba:19:
08:18:48:51:c7:71:76:67:1a:e5:b1:db:b7:b0:2d:
9a:fd:ad:6d:17:24:92:f0:2a:5c:cc:ca:cf:17:b4:
ad:7c:b4:0b:f9:c5:b8:5b:3a:53:2e:f6:56:e8:46:
47:dc:bc:b4:8a:ba:ce:5d:68:eb:9d:fb:cb:30:c6:
0c:4a:15:6d:43:a1:3a:b1:ed:9f:d0:7b:9e:15:86:
05:67:f0:8d:d5:ea:d6:de:dd:1f:25:6b:39:ff:ad:
bf:37:e3:83:05:13:b6:01:b7:10:a8:6e:d0:91:f7:
f8:19:5f:b1:46:ed:dc:2d:92:fd:af:19:16:f3:38:
b5:c9:a6:6c:a3:58:82:f7:c4:05:04:f5:d1:0d:96:
b3:51:a7:a7:55:be:43:8f:a0:58:4b:78:66:b1:9b:
44:9b:9e:ca:40:8f:90:8a:ef:ec:92:c6:69:de:b8:
ae:e6:6e:24:e2:61:e1:62:dd:76:87:42:be:0d:9d:
5a:33:28:ff:b2:74:aa:c7:8b:fa:17:54:8b:0a:1d:
f9:8a:e1:53:e2:a4:a5:9d:95:ad:de:8b:51:6a:7f:
59:00:98:05:43:a6:3e:9f:06:cd:1a:e0:31:7e:5f:
d7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7A:AB:8F:1D:4D:1D:6E:C0:41:BC:E1:6B:90:0C:93:FA:F6:AE:0A
X509v3 Authority Key Identifier:
keyid:23:F2:1F:73:16:E1:BD:78:F8:6E:EA:64:25:D5:C2:29:B9:80:F9:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:5c:0a:66:7c:33:6f:b6:f0:74:34:9b:54:f0:45:82:a2:e5:
85:eb:83:fe:ce:4f:b3:77:69:b5:b3:4b:4f:ce:bf:d1:a3:01:
23:8a:d9:dd:d4:67:c9:d7:07:3a:8a:8e:a9:25:ea:0f:63:8f:
73:58:a3:77:62:de:b8:80:47:d8:d3:3c:49:32:ed:d3:54:db:
bd:a2:bc:43:0a:be:3c:73:99:ba:c9:ce:59:82:09:39:25:51:
09:28:89:ac:6b:75:79:a3:16:da:a4:75:71:bd:ce:ac:a2:cd:
58:2c:0e:1f:79:15:81:b2:61:e0:ff:dd:ad:68:c4:2e:49:0c:
69:2b:da:8e:06:53:de:33:fc:fd:b4:e8:5f:0d:e2:05:f2:7d:
22:ae:3a:a2:2a:5e:19:eb:1f:d9:bb:95:12:b1:6a:7a:af:3d:
96:e6:42:4d:90:ac:a7:82:4e:0b:b0:68:5a:27:fe:18:b6:d7:
2f:14:70:2f:ee:fa:1e:59:c0:31:06:b5:8d:65:7f:42:b8:34:
73:9d:2d:d0:c2:5d:58:e2:a3:64:0b:ae:03:12:17:01:41:c7:
2d:52:73:08:8b:a7:c8:a5:51:5b:69:01:37:22:bd:48:63:22:
e7:03:e1:00:3c:1c:4a:ce:64:39:8a:a2:e9:1c:e8:c2:2e:5a:
cc:53:b7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:19 2025 by rpki-client