Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
File: iX2mABsSODBo_nGjD4zyhcZoMP4.mft (raw, json)
Hash identifier: NxUo/qRlXpzz9HqRvM9PWVb3nbY3kSz9lYFV9C39OKo=
Subject key identifier: CA:31:3C:57:B3:B3:96:51:DC:0F:27:A4:B7:C1:DE:71:BE:4D:BC:A4
Authority key identifier: 89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
Certificate issuer: /CN=897da6001b12383068fe71a30f8cf285c66830fe
Certificate serial: 0198D4E06D6DFE74699066CCFB02AF7AD711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:02:14 +0000
Manifest this update: Sat 23 Aug 2025 03:02:14 +0000
Manifest next update: Sun 24 Aug 2025 03:02:14 +0000
Files and hashes: 1: 9Xk925SUUXfLnbw9FBp9N3qLdfo.roa (hash: Ly02I9+k8vuMGWxnQ136VFvx8sd3hejXT82bKGKV7BM=)
2: PHa1bwg0jlW9wU-ZxMrg4KmG4Zc.roa (hash: sT+3KqlrpBwNw2te0UajmvKsMUapvIEs9YfpHeq4XGU=)
3: iX2mABsSODBo_nGjD4zyhcZoMP4.crl (hash: x7PqMCfZI3UEupy6YZHzQqXqYFNje/TcQAb/lvp5miI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:6d:6d:fe:74:69:90:66:cc:fb:02:af:7a:d7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897da6001b12383068fe71a30f8cf285c66830fe
Validity
Not Before: Aug 23 03:02:14 2025 GMT
Not After : Aug 24 03:02:14 2025 GMT
Subject: CN=ca313c57b3b39651dc0f27a4b7c1de71be4dbca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:56:ae:55:7c:6b:15:18:8d:88:c9:83:e2:8d:
46:f9:50:b6:78:10:25:7a:75:f9:62:b9:27:0a:f7:
d1:14:12:74:d3:e0:99:bf:88:d5:50:5f:b9:87:7f:
d9:e1:19:17:20:49:46:1c:a0:23:89:47:58:f9:37:
4e:c1:4b:d0:92:14:04:35:ce:d6:b7:ea:03:51:46:
2b:cf:39:32:e7:eb:5b:74:b5:4e:74:53:ce:d8:f7:
25:dc:cb:7d:71:5b:c5:3b:aa:98:b8:29:9c:1e:a5:
76:a5:91:f7:c2:48:a8:14:57:a4:5c:de:88:d4:0a:
e0:dd:00:8a:f7:47:70:6c:14:f2:b5:75:28:eb:d8:
6f:5b:d6:3b:2f:07:08:8b:3e:c6:fc:39:dd:b2:72:
1e:b8:d7:1f:ab:e9:05:f4:56:07:d8:48:d8:09:e4:
9e:ce:eb:6b:51:35:a3:dc:28:ea:02:a3:e0:8b:54:
9f:49:1a:35:c6:c5:81:c0:9a:a6:25:b9:3a:b8:5a:
c0:de:26:a0:8f:12:ee:17:7c:ef:d0:d4:b2:0b:b3:
86:c6:91:8a:15:c6:70:3c:6f:3a:66:6d:a3:2d:a8:
d9:cb:2e:96:bb:85:a5:5e:d7:47:3f:de:ab:32:d1:
e8:8a:12:f1:63:d5:62:01:44:dd:be:63:4e:11:7a:
1b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:31:3C:57:B3:B3:96:51:DC:0F:27:A4:B7:C1:DE:71:BE:4D:BC:A4
X509v3 Authority Key Identifier:
keyid:89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:77:72:27:f8:ee:a3:83:5a:a4:5d:08:5b:93:e5:6e:45:54:
3b:8a:e2:0f:64:e2:2d:99:35:eb:1f:9a:ae:57:34:f6:33:80:
70:b9:8a:8c:31:08:41:69:41:e2:ad:39:62:1a:cf:50:b1:80:
a1:a9:fc:01:aa:7b:5a:5e:27:7c:f8:8f:66:6a:1b:76:f2:3e:
1e:6b:69:04:59:c0:71:8d:5d:99:9f:8c:13:e2:33:ca:b0:4c:
c7:76:15:e5:81:ea:e5:fa:e9:78:56:81:c5:a6:1c:e7:02:34:
b4:e8:57:f8:22:02:b6:8c:30:92:43:14:07:01:c8:51:9a:8d:
05:76:fa:2f:e0:d4:f6:34:99:29:26:a2:94:79:2d:35:f5:2c:
60:1e:b3:db:c3:de:59:3d:0d:96:6b:2d:d3:8b:96:d6:72:ab:
67:79:d2:ce:2e:3f:89:d5:b6:81:5a:8f:93:6b:c3:9b:c6:bd:
f7:67:a3:d3:e7:37:cb:da:5e:8d:e2:d7:8a:b2:ba:7f:6c:23:
92:12:c1:59:40:7c:9e:df:41:38:85:7f:93:5c:ca:4f:46:63:
43:95:82:c3:f2:3e:41:d2:5a:16:15:2f:5f:24:b2:ff:31:bc:
07:e2:96:12:21:12:49:31:9c:73:23:3d:d4:6f:49:d1:5e:21:
92:c9:ed:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:04 2025 by rpki-client