Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
File: IKpgywAkMyottomT8zVxWK9gyN4.mft (raw, json)
Hash identifier: vqpKo9j+jekr3BIAnrl2cMXFAivjOxiGLH7kIOvrAkI=
Subject key identifier: 18:77:B3:59:5C:16:D3:B5:BC:0D:D3:D2:D0:B5:2E:2C:EE:56:C5:9F
Authority key identifier: 20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
Certificate issuer: /CN=20aa60cb0024332a2db68993f3357158af60c8de
Certificate serial: 0198D5156AF142F9C55F723581C99C0EF8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
Manifest number: 167B
Signing time: Sat 23 Aug 2025 04:00:07 +0000
Manifest this update: Sat 23 Aug 2025 04:00:07 +0000
Manifest next update: Sun 24 Aug 2025 04:00:07 +0000
Files and hashes: 1: 5lfSf59AY-hC6ZBpQqdqsyBgfw4.roa (hash: hg0a1WqZnkeotSAobKNfSLW7zXmEvmKKXZqeOoYZdnY=)
2: IKpgywAkMyottomT8zVxWK9gyN4.crl (hash: WZ+sZ0enT3LPFz78+vHQcl3QUimO8rsL7Pfnn/I9L+0=)
3: jNg6vqzUy1VgyEygCa4DvoqjfIY.roa (hash: npuJNuYtC10xnW9UN6NXfDz60ESb4bhdw7EsN6BY2Z8=)
4: ttxltNG2zQjIJW6GFa8ByUupTIM.roa (hash: X+Rp7cCbU+AQt/6HVOu55hwFlooIOfWp0xOq7PMcuDs=)
5: v7n-0r9KgIhGKTchu2jwbHB0z74.roa (hash: Uqi7ReaJs7BBVFTKxxZ3ijn7JitQR2P+yiINISqSbUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:6a:f1:42:f9:c5:5f:72:35:81:c9:9c:0e:f8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20aa60cb0024332a2db68993f3357158af60c8de
Validity
Not Before: Aug 23 04:00:07 2025 GMT
Not After : Aug 24 04:00:07 2025 GMT
Subject: CN=1877b3595c16d3b5bc0dd3d2d0b52e2cee56c59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:43:94:aa:c6:db:35:fb:4e:d2:94:81:be:30:
82:1a:e2:69:0a:a4:e1:76:6f:a7:73:96:83:d8:b6:
f4:d1:4f:cb:75:ba:a3:02:c8:57:c7:f6:77:21:3a:
ee:e8:fb:36:e7:b5:4c:67:a5:9d:5b:c5:2e:dd:77:
bd:8d:95:75:ce:cb:ce:36:5f:c2:16:20:2e:61:43:
e0:2a:00:02:ad:da:35:6b:02:b7:58:ac:72:2d:5a:
42:79:62:e6:fc:22:ba:f5:ec:e9:21:13:e3:f6:b0:
d7:40:63:ec:55:9b:c1:11:1e:4a:00:46:c8:0b:80:
83:f5:68:79:3c:37:9e:3e:e9:68:b8:57:61:2b:ac:
4b:c1:29:87:f5:0c:41:2a:5b:a2:8d:e4:11:e1:94:
f1:6a:8c:b3:55:cd:c2:64:2f:60:f5:5b:45:30:ee:
f5:d1:b1:da:69:2f:f9:1a:e0:18:8c:06:96:c9:97:
58:54:bc:48:f7:b9:9a:dd:c1:16:2e:10:40:45:2f:
a1:02:b5:c3:6c:59:03:54:d2:33:13:5b:ef:d0:71:
40:40:63:be:34:f2:fd:1a:8f:aa:26:48:d4:ac:33:
bb:9e:a0:28:94:3f:0c:64:8c:d8:39:70:b6:a5:89:
db:ac:15:03:ec:dd:fe:ad:89:3e:88:24:b8:6e:70:
d3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:77:B3:59:5C:16:D3:B5:BC:0D:D3:D2:D0:B5:2E:2C:EE:56:C5:9F
X509v3 Authority Key Identifier:
keyid:20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d2:cf:ce:77:1b:37:0b:1d:8b:0b:69:14:d8:57:2f:ef:b9:
97:30:f3:4e:60:46:7c:ef:78:63:aa:bd:2c:51:fd:65:27:f5:
86:5e:0c:7d:16:c7:5e:1d:4b:b9:36:4c:c2:01:96:7a:a3:26:
34:1a:ea:b6:a7:96:03:c2:18:09:4b:45:7e:96:5a:53:ff:51:
cd:e4:d9:3a:48:bc:65:1d:0e:87:a1:6e:ff:c5:3c:0e:2c:39:
ab:65:27:15:b7:2d:eb:59:c2:19:aa:e7:09:9c:30:cb:71:52:
62:86:82:d2:0a:24:8b:2b:b3:e6:a5:79:3d:ab:88:80:b0:b3:
1e:82:58:a6:c5:8c:fa:c0:ae:9e:07:b2:9d:65:d8:15:cf:4e:
46:d5:23:fa:70:de:ba:7b:54:e7:c8:53:69:ab:93:25:51:33:
31:4b:71:47:4a:88:c5:0d:28:ae:db:d8:22:94:98:e3:22:fc:
91:15:31:b5:a8:3b:db:c2:7d:13:41:82:f4:fd:bc:a0:fa:e1:
72:b1:bf:58:09:4a:d0:1f:8e:ee:ae:76:86:66:8c:1c:5e:3d:
93:6e:5c:bf:ad:7c:c5:f8:5f:9a:e6:51:76:e2:c7:34:16:a6:
69:89:4e:05:05:19:24:5c:8e:08:87:15:c8:42:d2:19:fa:73:
6c:7b:9e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:29 2025 by rpki-client