Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
File: I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft (raw, json)
Hash identifier: CV9i028JFNA5GiQERc3ZDPFptbU3zs0uxAv9YgsbCAI=
Subject key identifier: B6:F9:CC:63:5E:D9:06:15:AE:47:3B:5A:96:55:AB:37:9E:CF:51:A5
Authority key identifier: 23:DC:D6:F1:71:26:D4:E9:51:D9:2B:C5:F4:C0:6B:A9:45:0F:C8:D4
Certificate issuer: /CN=23dcd6f17126d4e951d92bc5f4c06ba9450fc8d4
Certificate serial: 0198D54E6804F8513E4A8421EE08C44471ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 05:02:21 +0000
Manifest this update: Sat 23 Aug 2025 05:02:21 +0000
Manifest next update: Sun 24 Aug 2025 05:02:21 +0000
Files and hashes: 1: HLzZYAURdW7ECuJc4fBvkEOMPUU.roa (hash: HLSzvw8EJ6C84Lk+YNRBmj8BE3yMR8wKB5nstwpxKJ8=)
2: I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl (hash: /tYJasXxBRHWItdJwDYQ92icPmiav7MqPVyxKHNbB+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:68:04:f8:51:3e:4a:84:21:ee:08:c4:44:71:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dcd6f17126d4e951d92bc5f4c06ba9450fc8d4
Validity
Not Before: Aug 23 05:02:21 2025 GMT
Not After : Aug 24 05:02:21 2025 GMT
Subject: CN=b6f9cc635ed90615ae473b5a9655ab379ecf51a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:58:93:39:d4:05:e3:3d:31:4c:c8:fe:3f:0e:
42:63:74:77:71:83:62:a8:89:f5:11:6a:95:12:d8:
41:27:7e:c8:28:94:c5:d1:05:91:d2:57:a2:c3:55:
01:a5:53:2f:52:d1:28:99:86:0e:1e:e4:d0:88:aa:
d7:2d:93:0a:d4:6a:0f:4a:00:db:df:b1:36:4d:33:
aa:56:c3:2c:2e:38:c1:5f:93:20:ca:6b:53:25:8c:
f7:01:76:0a:e2:75:f9:1c:8b:5b:be:00:a0:75:f2:
4f:52:f7:97:3b:1e:c4:1a:d2:4c:64:f2:67:57:62:
82:28:16:c6:0e:06:49:53:86:e4:4c:0a:09:29:c7:
75:10:56:d2:83:65:76:c2:dd:49:1a:3c:66:b9:f6:
56:3b:87:5d:ce:27:e9:fa:bc:a9:1e:71:48:7f:00:
93:d9:1f:5d:72:28:f2:85:ab:f7:a0:4b:ec:61:40:
8c:5e:1d:40:dc:b2:cf:87:6d:c5:0a:e7:ac:3d:08:
26:9c:a9:d1:d6:ff:96:96:16:4f:04:cd:89:70:b2:
6a:4f:10:94:fc:7e:93:8b:76:6e:3d:b4:aa:f6:d1:
6e:36:8f:d9:07:12:c5:ba:62:5d:04:49:47:29:5d:
fe:67:f8:6c:e2:9f:43:80:bf:3b:4d:1a:bb:77:18:
a1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F9:CC:63:5E:D9:06:15:AE:47:3B:5A:96:55:AB:37:9E:CF:51:A5
X509v3 Authority Key Identifier:
keyid:23:DC:D6:F1:71:26:D4:E9:51:D9:2B:C5:F4:C0:6B:A9:45:0F:C8:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1f:16:f9:68:9b:e8:21:ff:9c:fd:54:86:27:01:cc:e7:73:
5b:e8:2b:f9:88:5c:22:d6:8d:5a:f8:7c:05:88:f6:f7:ee:7c:
d7:36:f7:02:da:3f:ae:3a:73:5a:e7:2d:e0:1d:0d:42:a0:82:
9c:91:bc:e4:73:a4:29:e7:c5:81:0a:f8:23:21:dc:b2:c3:55:
51:54:af:a1:18:0b:86:d3:e1:46:35:ce:2d:54:ab:91:75:e8:
42:94:22:84:26:3e:06:14:cc:50:f9:2b:b2:da:6e:ac:88:89:
74:76:48:d8:0a:da:d7:f1:3c:0a:92:73:60:bb:fd:09:d0:b2:
a9:b1:9f:f9:11:90:17:6e:24:76:a6:44:04:ce:5a:8e:4e:1f:
58:1b:2f:9c:e9:77:6e:52:19:2d:5a:bd:cc:2b:ac:e1:1b:2c:
0d:95:fd:3d:7e:1f:5b:83:01:4b:96:1d:fc:03:96:b3:b5:02:
0c:5f:f9:d1:b8:2d:2c:ea:a6:47:36:71:df:24:bd:79:74:73:
38:00:35:33:9a:10:30:5e:a3:75:6d:8f:b7:4c:c8:ce:e3:90:
96:b9:80:00:7a:19:32:0b:f5:dc:75:94:f9:1a:0b:3b:30:d1:
31:1a:2f:50:72:e6:f0:aa:a2:68:49:19:2f:83:13:ec:d6:b5:
3c:5b:5f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:51 2025 by rpki-client