Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
File: I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft (raw, json)
Hash identifier: GCXSpQqLLYAiD32gInrwJp4jJOn8aDl1CZQ3GEyTmYY=
Subject key identifier: 04:38:DB:B7:F5:56:19:C8:E5:84:E1:DA:00:47:3F:4A:E7:03:E4:FC
Authority key identifier: 23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
Certificate issuer: /CN=234cd34911cfce946a22ea84663738cdcc076d45
Certificate serial: 0198D6CD7F8FC8CFCA401A7295C15321F9F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 12:00:48 +0000
Manifest this update: Sat 23 Aug 2025 12:00:48 +0000
Manifest next update: Sun 24 Aug 2025 12:00:48 +0000
Files and hashes: 1: I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl (hash: u/Ry6ynZi6XTNMKL/Lmiiflm/GiIpBN64k4Pxzvn64g=)
2: h4MNBNIqF_ThX6XaH2WdhshuJOA.roa (hash: rTGzgorMfX1eun7k8wcYtv0yi00PmZQby+9ZEZuIh7g=)
3: nJekGUdzLnW-TjQjig7_IehTMxo.roa (hash: 7EP+L4VTl9fIN/VTMWiTcp215tfBsK8IFYr8aaBuzJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:7f:8f:c8:cf:ca:40:1a:72:95:c1:53:21:f9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234cd34911cfce946a22ea84663738cdcc076d45
Validity
Not Before: Aug 23 12:00:48 2025 GMT
Not After : Aug 24 12:00:48 2025 GMT
Subject: CN=0438dbb7f55619c8e584e1da00473f4ae703e4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b2:36:82:16:15:19:a4:6d:d1:e9:be:88:d1:
3f:fc:73:07:24:14:d3:89:08:d9:f3:ed:74:72:70:
5c:53:87:53:7f:75:55:ff:f7:04:fc:ab:b5:5b:cf:
6f:0c:42:6c:f2:29:fa:1a:11:5b:b2:5a:8b:36:73:
2b:ef:5c:0f:31:c8:aa:43:4c:1a:ef:26:4e:2e:94:
a2:82:6f:21:bf:f2:34:a4:d1:be:0d:7c:21:3d:78:
2b:80:e6:1c:07:89:f7:ce:83:eb:31:a3:b8:83:95:
13:14:dc:c3:db:09:7a:2a:e2:e7:9e:75:4a:3d:6d:
ff:8b:79:ad:e5:b6:e7:1b:c5:30:38:3c:f9:cf:cb:
2c:aa:5c:1a:bd:31:f6:e7:63:ea:1d:3d:ed:d0:f4:
c5:6a:1b:f4:f1:67:1f:47:48:12:94:9b:e2:70:c0:
70:30:42:af:e4:45:c7:ff:1d:df:98:08:53:8c:78:
44:a9:80:9e:88:a7:55:21:1a:be:e4:35:ff:aa:92:
3d:fa:e4:47:4e:0f:c1:b3:4f:33:1c:7d:e1:fb:4f:
24:4e:78:ae:89:c8:f5:6b:3c:14:af:27:d9:2a:70:
84:c0:5c:90:f8:78:ea:b9:57:58:37:0d:99:92:d4:
28:9e:79:ec:9c:b7:a6:f7:9e:de:b1:13:8a:00:43:
4b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:38:DB:B7:F5:56:19:C8:E5:84:E1:DA:00:47:3F:4A:E7:03:E4:FC
X509v3 Authority Key Identifier:
keyid:23:4C:D3:49:11:CF:CE:94:6A:22:EA:84:66:37:38:CD:CC:07:6D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0zTSRHPzpRqIuqEZjc4zcwHbUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f536f-38fe-45be-b8f9-125500d2be94/1/I0zTSRHPzpRqIuqEZjc4zcwHbUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e8:9c:fd:99:2e:9b:84:da:f1:25:99:e1:85:73:81:04:b3:
ce:2a:3c:7c:06:dd:88:af:f3:ce:f9:34:36:76:66:1a:76:27:
e2:7b:43:66:a3:a6:80:b5:0b:40:22:ed:9e:55:4f:51:3a:f9:
b1:d6:ae:91:c0:d1:ca:aa:67:a0:f3:98:1f:3f:5b:3a:f3:b4:
06:2a:a1:2b:94:28:68:36:9a:0c:9f:bb:7b:22:03:e6:3c:b3:
71:3d:bd:a8:b1:1a:71:8b:4a:0f:49:29:e9:3e:30:62:a5:2d:
7b:f7:cd:e3:ff:f7:c8:f8:b7:c2:03:ad:d7:85:0d:28:c7:a6:
e8:31:99:4a:c8:4d:5d:57:1b:6a:a1:c0:de:15:8d:a9:fa:9b:
9a:1c:12:07:c3:5c:21:93:f4:cb:b9:a1:ba:43:11:1c:82:6e:
83:02:34:b0:db:2d:0c:d1:7c:62:8a:ed:27:ed:b7:1c:de:b2:
d8:53:6d:d2:e3:0c:fc:c7:0f:d8:b0:c0:03:a5:ba:83:0c:36:
d2:b4:fe:3f:3b:5f:b9:4a:d3:ab:5c:02:4a:41:60:8e:3f:51:
5f:0a:7e:71:06:56:45:6f:24:c8:bd:d1:1c:1e:64:87:72:ef:
a8:15:af:c2:09:ca:dc:67:4d:36:47:bb:02:84:46:94:ba:48:
e8:18:81:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:36:17 2025 by rpki-client