Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
File: iH0wEZNRUA8lmlfi_2hQeX0bTho.mft (raw, json)
Hash identifier: I2HeveXGcgi+APNWSlEYrm0KFSH4BVDfS4acCQdTwhw=
Subject key identifier: 9F:F9:A5:27:34:A2:66:17:90:31:72:36:A2:74:89:3F:EF:AE:4E:4F
Authority key identifier: 88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
Certificate issuer: /CN=887d30119351500f259a57e2ff6850797d1b4e1a
Certificate serial: 0198D65FB84F6594A2A4BAC1E0A3158D4959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 10:00:54 +0000
Manifest this update: Sat 23 Aug 2025 10:00:54 +0000
Manifest next update: Sun 24 Aug 2025 10:00:54 +0000
Files and hashes: 1: iH0wEZNRUA8lmlfi_2hQeX0bTho.crl (hash: 0RI0U7LWwBAKUmrsSdZMJuJCwWj4zHH2uycDeSuN5Zc=)
2: qABhsOLWjcCV2-NCnGtwC8QlYyU.roa (hash: md9z/89P3sn3nXo5h/larqHDUL4eXCPfvLewxfl/iTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:b8:4f:65:94:a2:a4:ba:c1:e0:a3:15:8d:49:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887d30119351500f259a57e2ff6850797d1b4e1a
Validity
Not Before: Aug 23 10:00:54 2025 GMT
Not After : Aug 24 10:00:54 2025 GMT
Subject: CN=9ff9a52734a2661790317236a274893fefae4e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:60:4d:ea:c1:1b:18:93:48:e0:c0:23:fd:
13:b3:c8:b2:d9:f2:d1:f3:8f:bb:60:83:25:a8:31:
7c:ce:2d:e3:6f:2f:95:eb:1b:07:6d:7c:59:1f:a0:
ae:87:3a:0e:93:9a:99:45:25:59:e3:d0:9d:b1:42:
01:f5:7f:19:28:da:bc:95:09:48:2b:90:73:80:c1:
e3:f8:6a:a4:cd:9b:4d:2e:60:dd:21:a2:90:3e:2a:
27:d3:f6:14:96:b4:5d:70:5b:d5:74:21:14:75:95:
19:86:9c:fd:4d:ba:77:c4:00:4e:84:c0:c2:9c:e5:
1a:17:65:dd:e7:a1:3d:4e:ee:91:51:1c:2a:2a:19:
bb:21:12:58:2c:9a:e3:b9:e5:0c:ac:27:23:64:eb:
50:75:78:31:80:86:0b:24:7f:e1:07:0f:9b:d1:11:
aa:e9:bb:e6:21:f1:96:9a:36:a9:55:8a:00:29:5e:
e5:4e:e9:a8:e3:83:bb:ed:d3:e3:e9:00:d8:6b:bc:
08:ae:d3:60:42:17:e3:c6:93:df:e6:2b:2a:95:81:
fe:da:3d:82:d3:92:62:9a:35:e5:89:40:a4:46:e6:
6c:3e:55:ba:06:ea:12:19:7a:00:b9:29:6c:80:15:
88:31:eb:ac:8a:ed:b2:39:a6:cf:79:4d:e4:b0:d3:
08:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F9:A5:27:34:A2:66:17:90:31:72:36:A2:74:89:3F:EF:AE:4E:4F
X509v3 Authority Key Identifier:
keyid:88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:12:00:0f:66:10:68:56:8c:e5:77:c9:14:eb:a5:31:a0:41:
53:23:9a:7b:f8:c2:dd:75:17:35:a5:e8:25:d6:b3:ca:8c:65:
c5:15:86:fd:55:bd:04:e4:c1:dc:5a:b5:db:97:bc:d3:72:8e:
be:6d:c4:ea:a0:be:e8:71:9d:e1:f3:ec:a3:ba:dc:d5:61:f6:
4a:ef:56:76:74:ed:29:a5:6f:c6:6f:28:81:91:d8:99:a2:db:
0f:5c:77:87:26:fb:c6:73:6b:a9:f0:3d:87:fa:94:e9:05:dc:
10:83:b4:5d:2c:b8:6b:cd:d6:6c:96:d7:4e:d9:a1:53:a2:cd:
89:b0:0d:c2:c2:21:a5:65:7a:bd:6d:72:19:f0:35:90:ea:35:
c5:c1:34:46:57:85:90:fd:8d:1b:46:e5:51:59:18:a5:34:4e:
15:ae:df:a4:84:b6:9d:9b:0d:56:8b:48:c0:a4:93:8a:d7:3d:
b3:52:de:52:fa:87:3a:76:f5:25:0b:eb:83:3c:76:76:ca:95:
d0:6e:b6:93:a3:4c:97:1e:25:a4:a9:7d:a1:6a:29:0d:43:45:
c4:3c:90:6b:97:1b:d8:b8:d5:a4:9f:46:d5:95:c3:51:dc:b8:
66:11:6a:ae:91:30:42:f5:20:13:7d:ba:7e:e9:53:a2:70:60:
3c:02:b0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:58 2025 by rpki-client