Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
File: cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft (raw, json)
Hash identifier: Ww0no/7EZW84LXsNdXdBGLXWiT8qwa4r4t4CqCJczsc=
Subject key identifier: 20:01:0C:88:24:3E:45:AD:9C:B2:1A:84:EA:5B:7E:58:A3:32:F2:79
Authority key identifier: 70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
Certificate issuer: /CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Certificate serial: 0198D515DD4FB1B6DD30220378F9E40EDCD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
Manifest number: 165C
Signing time: Sat 23 Aug 2025 04:00:36 +0000
Manifest this update: Sat 23 Aug 2025 04:00:36 +0000
Manifest next update: Sun 24 Aug 2025 04:00:36 +0000
Files and hashes: 1: 39yOXWjYZyS68AzfLeyRW_eBtf4.roa (hash: Mz12/qdbJKM8FU8F8+Lk+lMxeg4aXuhF1UCiM+rDIsI=)
2: 6l5M-x5AVCV2PGZr6_l_DZJOTeg.roa (hash: 0TyUlVfVnh7he1NVofYJh+27mbZ/WYA8ViwMyPgm6t8=)
3: PvXxIOTmhlDT8Zjl8pOjVtbUjqs.roa (hash: cEmlEEf5hdAMQxuyDOcKJwVECyiRzY+P8vKK1P563lo=)
4: cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl (hash: 5bDRSM1boS5QrkDRQj8U1SDGIDnRoUZMestQHNPAvnI=)
5: fUQV7hcWr8wDftL_A0d4dRPlV5Y.roa (hash: W1gOWwQgZ2lfD/yK9uLmMV4EF6iXlGj32IeijexRu80=)
6: iRLaERPVRzV8PJ2a_5pZoHTAhfc.roa (hash: MJRfnp4Z+bQNLko611lWRkdCj1xLm4ibkbl4u7vmmHY=)
7: s6g2qeenxmDkGrPs5BM25xHO8xU.roa (hash: BC1HJ2/1smBeQKjZhdC/Dii9NT9VDbWsnbk1hLUwmhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:dd:4f:b1:b6:dd:30:22:03:78:f9:e4:0e:dc:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Validity
Not Before: Aug 23 04:00:36 2025 GMT
Not After : Aug 24 04:00:36 2025 GMT
Subject: CN=20010c88243e45ad9cb21a84ea5b7e58a332f279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:f8:0e:cb:cf:09:44:90:08:12:e3:c7:3b:
0e:43:ba:0c:b2:a7:a9:6e:60:cd:b8:a3:66:3b:98:
05:c4:bd:7b:35:5f:80:9e:bb:c0:8d:7b:73:bf:e2:
90:91:92:70:fa:84:5d:d7:95:08:69:9c:11:2e:7d:
83:2c:03:94:7f:a6:36:16:54:55:54:da:8a:25:fe:
49:d0:55:d6:11:06:82:af:26:5d:a0:49:b7:8c:40:
86:92:6b:04:83:fe:a0:1f:44:b2:b1:b8:ab:75:ef:
59:c6:98:64:5e:de:89:2b:85:f1:9a:e8:3c:2f:90:
73:61:3c:10:b4:1a:34:7e:1b:5c:f5:37:8c:51:ee:
d2:59:60:8c:67:a8:af:16:19:3f:f3:b4:cd:a2:81:
ad:69:5d:16:53:06:aa:8d:c7:ba:44:4e:9b:42:cd:
b1:c9:65:66:69:13:41:b5:23:67:34:59:3c:9c:10:
31:40:80:dc:da:98:c5:d6:bb:05:ad:f7:d2:d8:cc:
f0:03:42:0c:c2:d7:98:32:20:27:5e:22:ca:a3:10:
1f:db:f7:8d:98:64:32:c4:ab:c4:ba:09:bc:36:b7:
d7:a1:9f:d6:27:b7:ff:55:73:74:9d:ba:de:f9:10:
f0:89:89:29:61:1f:a9:8a:69:c8:62:f1:70:3a:ae:
48:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:01:0C:88:24:3E:45:AD:9C:B2:1A:84:EA:5B:7E:58:A3:32:F2:79
X509v3 Authority Key Identifier:
keyid:70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ca:a3:c6:83:a0:9b:f5:2f:4e:d0:a6:88:71:8c:c0:16:ee:
bf:0c:4c:cd:bf:88:ad:f2:2f:b0:f2:6e:21:24:c6:a4:92:67:
99:a2:78:7e:87:55:2d:36:6a:2e:ba:14:14:12:b9:73:47:d4:
71:dc:eb:3f:ce:01:6f:1a:0a:46:5b:81:84:44:e4:b6:90:48:
3a:b2:a8:66:b0:82:01:3f:73:5a:c9:d4:a9:89:cb:38:d4:b1:
ff:64:f1:09:07:b8:19:e7:1b:c2:b3:7c:90:29:52:e5:2b:d5:
9a:6f:6c:b2:77:16:6c:e8:23:23:9b:44:35:10:f4:8f:1d:42:
29:2e:91:47:a2:1c:a3:58:6e:3c:0d:f2:08:41:87:66:24:51:
62:93:22:8a:da:5b:3e:92:3b:d9:da:c5:0f:ff:51:c8:de:a0:
8f:25:61:50:1d:2f:42:d1:09:44:56:80:19:ce:bd:85:5e:49:
3f:11:88:6c:3e:a3:73:ef:21:26:95:25:2e:a3:8e:65:e2:75:
cf:66:c6:a3:bd:73:a7:d1:1b:70:81:26:7f:b4:d3:16:fb:52:
5e:b9:f1:48:d8:01:09:93:62:6a:6f:38:22:a1:8f:fd:e1:9a:
65:8d:31:78:7d:92:bd:1f:31:4c:f2:4b:b5:cb:26:8d:55:c9:
00:90:53:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:32:54 2025 by rpki-client