Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
File: insJq1RYUceJ0sqolCujnOoT6T4.mft (raw, json)
Hash identifier: ThC/jEmujQeXUxDfofNNMmPaYgy/o2v1eYJmx/5uMXU=
Subject key identifier: DE:E4:E3:06:36:B0:69:4B:DA:60:9B:B1:59:3E:1A:D3:5C:39:A4:08
Authority key identifier: 8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
Certificate issuer: /CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Certificate serial: 0198D583AEB99C10F772A3066EED6464F7D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 06:00:33 +0000
Manifest this update: Sat 23 Aug 2025 06:00:33 +0000
Manifest next update: Sun 24 Aug 2025 06:00:33 +0000
Files and hashes: 1: GSXQP-yJ0oWFWG7SiFPS52SpSgY.roa (hash: yWv48sy81gH1KSMrgFDXRAC5wY8B4250+tW5tBvtQ4E=)
2: TZjDxa0WLxZ4-HRGPSFJK9LraZg.roa (hash: mYc2KZGGYZLCnNBNUhGV4DJVMUhPM50/TitGKZaaJPU=)
3: insJq1RYUceJ0sqolCujnOoT6T4.crl (hash: npVaJvDi3vGNHsHgx2jzwiRZxnLdI4PS7L89LwRlMbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ae:b9:9c:10:f7:72:a3:06:6e:ed:64:64:f7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Validity
Not Before: Aug 23 06:00:33 2025 GMT
Not After : Aug 24 06:00:33 2025 GMT
Subject: CN=dee4e30636b0694bda609bb1593e1ad35c39a408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:b9:f1:58:bf:6d:29:1a:76:c4:43:42:bb:
21:fe:f5:c3:16:91:40:00:a3:fd:68:be:63:35:d4:
19:68:bc:48:3d:3b:1d:14:bd:0e:97:2b:b2:2e:25:
78:80:88:ac:27:78:c8:65:03:a2:b3:73:97:df:1e:
95:08:81:9b:54:cf:04:9e:94:96:d1:f5:e3:6b:c1:
3f:bb:2e:3a:1f:0b:a5:64:e8:54:14:91:dc:57:78:
f5:74:c2:f0:e3:4d:2b:75:ca:55:0e:7b:60:24:48:
a9:37:fa:46:ca:3b:77:fb:7d:39:ac:11:f9:c7:4a:
7d:4f:0c:d7:63:91:7b:71:75:e6:35:c4:86:9a:88:
52:d5:99:22:e8:a4:5b:b1:e8:3a:5b:42:26:64:2c:
0b:01:7a:81:aa:3e:ce:18:b8:78:c8:6f:f7:b6:64:
b3:60:66:ef:69:71:a2:77:66:71:e4:d9:8e:37:e9:
3b:2d:6a:14:52:6f:53:cb:80:4b:da:7c:5b:f7:e8:
21:fb:f7:40:07:85:ac:07:96:bf:d2:bb:c9:2c:70:
5c:f8:50:30:31:76:30:5e:50:8f:14:67:8f:ec:ba:
f8:5a:0e:b0:df:1b:c7:97:f0:c2:49:a9:c4:50:50:
fd:99:d6:9b:13:55:15:c6:4f:f3:88:53:9d:93:3b:
a9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E4:E3:06:36:B0:69:4B:DA:60:9B:B1:59:3E:1A:D3:5C:39:A4:08
X509v3 Authority Key Identifier:
keyid:8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:98:d5:56:ff:08:05:84:55:6a:3e:ca:60:4d:1d:79:8e:e9:
0a:50:65:ca:c7:ef:4a:bd:87:70:f0:1e:ba:5c:d1:b7:08:f9:
84:e4:a0:3e:84:f3:1d:da:a3:1c:a5:62:a4:df:4a:da:b5:a7:
18:f6:96:1a:53:8c:53:58:f9:02:85:7f:3d:b9:fa:d6:1a:ec:
95:c8:df:7e:a3:10:68:70:37:f2:d2:a0:d0:a5:52:df:43:dd:
ec:c4:36:29:15:1e:58:56:b1:47:27:73:90:de:cb:55:6d:6f:
cc:e6:8c:29:9f:5c:de:4e:a7:60:3b:2c:a1:41:fc:57:38:60:
7d:8a:e2:7e:2a:b1:a7:09:40:a7:3c:1f:55:64:43:83:68:d1:
d2:7f:b9:bc:15:15:29:7b:b8:dd:16:54:be:de:d4:df:eb:31:
2c:5d:ac:78:a9:2c:81:e7:56:79:bc:27:81:68:51:49:49:98:
ad:c5:b1:2d:e1:5f:12:a8:d4:3a:24:2c:1b:10:4f:7e:6b:b5:
dc:65:48:af:ad:42:c2:a2:ca:49:13:df:71:03:e6:6b:2f:8c:
43:91:c1:e3:df:70:dc:e2:c2:d6:53:87:b3:ff:60:67:ed:53:
38:7c:c3:9e:97:60:6b:3c:45:53:12:62:f8:2c:46:8d:27:19:
5d:ef:fe:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:39:58 2025 by rpki-client