Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
File: iaQ4np9NXMjEhtaCK-8fRO987UI.mft (raw, json)
Hash identifier: hiMYkzj2GWuZh9uSnx2UVXtyxLVM2aexb4JAdfrpX+k=
Subject key identifier: 65:65:B4:60:8D:54:09:E4:85:9B:5C:40:60:BE:BB:B6:F8:40:43:B4
Authority key identifier: 89:A4:38:9E:9F:4D:5C:C8:C4:86:D6:82:2B:EF:1F:44:EF:7C:ED:42
Certificate issuer: /CN=89a4389e9f4d5cc8c486d6822bef1f44ef7ced42
Certificate serial: 0198D6CD8E485BDD146CC2A920BB44727371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
Manifest number: 0158
Signing time: Sat 23 Aug 2025 12:00:52 +0000
Manifest this update: Sat 23 Aug 2025 12:00:52 +0000
Manifest next update: Sun 24 Aug 2025 12:00:52 +0000
Files and hashes: 1: 8ZpplWrhbVda_aSYHx2pbbAdBWI.roa (hash: KC0Osg8WEd8lVzUhmWMq6YDl/x9/ZL2h5Pd6qvq9PbE=)
2: iaQ4np9NXMjEhtaCK-8fRO987UI.crl (hash: ox5cV+tYhPBkT3YHTGDG7yBw06dN54bkK+RhXcwHaSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:8e:48:5b:dd:14:6c:c2:a9:20:bb:44:72:73:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a4389e9f4d5cc8c486d6822bef1f44ef7ced42
Validity
Not Before: Aug 23 12:00:52 2025 GMT
Not After : Aug 24 12:00:52 2025 GMT
Subject: CN=6565b4608d5409e4859b5c4060bebbb6f84043b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:28:66:a6:61:5c:e8:f8:8b:db:15:e9:a1:4d:
72:20:dd:ed:98:1b:c2:6d:bd:12:87:f6:fd:13:e2:
3b:60:57:da:54:5f:72:dd:b4:f8:d8:81:f9:84:f6:
9c:70:b8:05:a2:e6:ea:f4:4b:2f:a4:72:9c:24:7c:
eb:13:8a:77:08:75:34:2e:07:e8:75:06:75:2b:c0:
39:59:b6:04:8b:2c:78:f0:ca:3b:d7:31:91:ea:1d:
e3:56:8e:52:4d:c9:b6:a2:23:5d:87:a1:0b:43:50:
d4:f4:27:a4:02:7e:fa:68:9e:d4:f5:67:9a:80:15:
7d:bf:43:61:b6:89:c5:a3:d9:79:d4:6b:a5:86:d2:
b0:b4:f6:e4:66:2a:08:2c:04:95:31:0c:93:19:e1:
21:34:45:1d:00:7f:b0:05:2b:ec:6d:f9:10:da:e2:
22:12:27:a2:b0:2d:58:2f:49:90:34:59:c8:14:42:
7c:09:c9:3a:ee:ab:f9:05:20:45:23:df:4c:6a:80:
83:90:a3:05:88:6e:36:11:c7:c4:9e:59:6e:26:f7:
14:57:a5:d7:b6:19:23:f3:68:63:82:78:ba:5a:6b:
36:80:b7:c7:b6:aa:af:f6:f2:cb:6e:d7:b3:57:1c:
8f:53:8e:17:e5:3d:90:36:8e:51:2e:10:82:a2:de:
fb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:65:B4:60:8D:54:09:E4:85:9B:5C:40:60:BE:BB:B6:F8:40:43:B4
X509v3 Authority Key Identifier:
keyid:89:A4:38:9E:9F:4D:5C:C8:C4:86:D6:82:2B:EF:1F:44:EF:7C:ED:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaQ4np9NXMjEhtaCK-8fRO987UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e60a31-1d76-4d9f-800a-21348484ff1b/1/iaQ4np9NXMjEhtaCK-8fRO987UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:55:cc:80:3a:0b:79:ac:9c:a9:1e:c3:4e:31:cd:68:c9:42:
ba:79:a9:83:8a:b7:ba:29:f8:19:50:44:a1:89:4d:05:78:e6:
0b:dd:b6:a0:dc:c9:ed:d9:66:a0:32:0d:22:37:cf:8a:00:0f:
ea:be:f0:ef:df:37:78:05:fb:29:ef:28:ae:99:85:8c:7a:9f:
6a:17:0a:47:b0:9b:73:43:35:f3:d8:03:7d:75:a5:f0:94:58:
ff:5a:14:84:65:22:4f:a2:0d:42:b2:91:93:22:76:da:e3:f2:
7e:6e:11:11:01:bd:bc:a7:6a:c3:ea:dc:0c:82:96:24:70:d3:
6d:a1:5f:fc:dc:97:28:d5:e5:c5:80:3a:8d:45:bb:ed:40:12:
3b:e5:4f:19:70:84:1a:2a:6a:30:19:79:ba:17:96:ac:b5:36:
00:2d:7a:20:bc:e2:0b:37:1c:81:c2:42:cd:76:0d:9d:09:e6:
d0:da:01:45:0b:fc:d1:4c:1e:59:0a:30:14:80:33:0d:46:76:
62:be:e3:9a:d2:83:e7:a7:24:c6:0a:15:ed:b2:93:70:2a:9f:
93:42:bf:a1:84:6b:4e:7b:ce:56:55:4d:36:38:32:62:0a:b9:
c5:94:94:1f:13:92:07:78:ff:f4:45:0a:be:cc:4b:51:4b:86:
35:92:68:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:47:58 2025 by rpki-client