Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
File: iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft (raw, json)
Hash identifier: AHLmI/ZZgeSpuNUit0frQPz0cYQr+uGkICVIAeMS11w=
Subject key identifier: F6:ED:C4:80:46:CF:EA:79:C8:5D:25:65:5E:3B:10:55:40:F0:DC:54
Authority key identifier: 89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57
Certificate issuer: /CN=892d21566ccfc3bb079ec5854b044ab809804157
Certificate serial: 0198D5BB83D5BE649504DD2B6B81AAB0AB3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:01:32 +0000
Manifest this update: Sat 23 Aug 2025 07:01:32 +0000
Manifest next update: Sun 24 Aug 2025 07:01:32 +0000
Files and hashes: 1: _xlkfnRMKnsNclJVExLAcIhA2l8.roa (hash: yd6Q3aFKUFt1tUH23Si46a/9sl4TuzKnFUmsDxLLaqw=)
2: iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl (hash: tj+DRKoDz8FWFwrBFuCdzDXyNlttusm0dQvYakak/BU=)
3: zlNvNdUfJ603zOBB38DPZ-NzG8o.roa (hash: gEXJj7MnEC8VWadeJK9z3p3E0Dv26srWKVnkmAOkpEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:83:d5:be:64:95:04:dd:2b:6b:81:aa:b0:ab:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=892d21566ccfc3bb079ec5854b044ab809804157
Validity
Not Before: Aug 23 07:01:32 2025 GMT
Not After : Aug 24 07:01:32 2025 GMT
Subject: CN=f6edc48046cfea79c85d25655e3b105540f0dc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ff:ad:ea:12:2b:2a:89:ea:28:cb:db:5e:a0:
c3:2b:4b:35:3e:02:ed:70:a5:14:a4:05:64:75:b8:
81:97:04:4c:0c:b0:2f:3a:44:57:b6:88:c3:9f:8c:
5e:e6:e8:2e:ce:9b:1d:d2:5c:98:d4:cd:99:b1:1e:
fc:f9:07:89:d1:58:72:6a:7d:2c:2a:d8:3c:fd:cf:
79:8d:9a:67:a3:ee:ce:c9:fd:b6:41:43:ea:7e:e0:
b8:50:3e:67:53:46:80:81:72:d0:e6:0c:a8:87:65:
0a:8a:96:e2:b4:97:72:90:60:a8:a3:59:38:8a:11:
a4:9b:36:a9:4c:54:8c:23:58:b2:8c:dc:98:67:17:
af:c7:d7:75:49:3c:c8:97:97:9c:dc:5a:fa:b0:47:
fc:31:24:a5:37:34:12:b7:1d:af:c7:b2:34:0e:51:
28:56:de:03:8e:a4:08:6c:c7:df:e1:aa:7f:c4:4b:
dd:70:0e:df:c7:41:2d:2a:4e:9e:bb:cb:28:9a:4d:
0d:7b:b0:08:02:2c:c6:19:96:1e:34:27:39:47:a3:
76:b4:b0:ac:52:fe:e9:1b:83:52:40:e8:13:31:a4:
c6:0a:86:a7:99:6b:27:ff:cc:5b:d4:ff:d9:6a:18:
9e:0a:62:13:2f:c9:36:e6:38:e1:9f:65:7d:be:a3:
c6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:ED:C4:80:46:CF:EA:79:C8:5D:25:65:5E:3B:10:55:40:F0:DC:54
X509v3 Authority Key Identifier:
keyid:89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:57:b4:fc:13:5a:bb:56:38:2b:40:a7:73:b4:c4:d5:3d:6e:
3e:26:2e:51:83:98:6d:60:88:b4:7d:5a:70:d4:8d:71:23:b6:
ee:4e:1c:f4:f1:56:90:6f:f3:c6:47:cb:13:fb:29:05:da:4f:
45:14:23:ca:fe:bf:f4:b1:63:69:d7:40:bd:41:ae:58:e9:eb:
db:30:9f:01:c2:26:c2:14:cf:73:be:13:76:e4:a4:59:f9:ce:
f6:f0:c1:4f:83:b9:0b:98:f3:0e:24:27:c2:30:a5:ab:6b:c5:
88:ca:94:d4:1a:29:d2:a0:93:ea:0b:94:54:fd:aa:23:dd:48:
b7:bc:5b:6c:f3:d5:b3:12:ef:f2:9e:38:c3:00:2f:dd:b2:75:
f0:69:2c:14:2a:cf:a8:f3:ab:b8:35:43:48:41:6e:7d:60:47:
33:a8:ab:51:f4:fd:b0:fa:77:a9:22:a0:ae:96:ce:3b:39:31:
a9:7d:58:0b:53:48:26:63:74:67:ff:fe:49:aa:8f:25:52:68:
42:3f:82:f6:1f:0d:a1:00:b9:43:57:ea:fd:8d:48:8a:f2:6b:
77:53:88:42:0d:98:85:5c:53:00:6c:03:09:65:31:55:d5:42:
33:8a:39:25:f5:a1:e1:e9:63:f2:64:90:a2:0b:e6:f1:79:a3:
ef:1b:e9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:20:57 2025 by rpki-client