Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
File: 2xhkIiednYtOaOabEpblMtTaDD8.mft (raw, json)
Hash identifier: XNi6rqkEx5DbTOEiQ1SWje1JIkonmwpq1h1EA35dMKQ=
Subject key identifier: DB:68:9E:66:56:4B:C3:0A:74:2A:EE:EE:16:C0:DA:C8:E2:89:3E:70
Authority key identifier: DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
Certificate issuer: /CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Certificate serial: 0198D884C4A055D587C667AD7F6512D2DE68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 20:00:36 +0000
Manifest this update: Sat 23 Aug 2025 20:00:36 +0000
Manifest next update: Sun 24 Aug 2025 20:00:36 +0000
Files and hashes: 1: 2xhkIiednYtOaOabEpblMtTaDD8.crl (hash: RI72eSwFwB09lSGUs2qgXfcmoZIJAvHGSO0VfTxKUgc=)
2: TtL1ROIX4qoe3FCQrbezbJvdiQE.roa (hash: EUtuOvVr+TGeDq+HxLBuoNhksrH6/dbzAs2zVkQm8sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:c4:a0:55:d5:87:c6:67:ad:7f:65:12:d2:de:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db186422279d9d8b4e68e69b1296e532d4da0c3f
Validity
Not Before: Aug 23 20:00:36 2025 GMT
Not After : Aug 24 20:00:36 2025 GMT
Subject: CN=db689e66564bc30a742aeeee16c0dac8e2893e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ef:d9:87:61:3e:50:8c:df:28:0c:29:24:da:
63:ee:20:0b:fa:6e:1b:14:0f:a6:3b:3f:4c:5e:54:
57:6a:05:e7:86:58:f9:d9:d5:fa:c3:e0:e1:3a:15:
b7:0d:46:f2:7c:fb:fc:50:aa:85:24:6d:58:12:2e:
82:3d:2f:f0:64:09:6c:42:b5:d2:02:49:ad:4c:a5:
1d:2b:e0:53:ea:6e:cc:13:2d:35:35:e4:31:b4:44:
aa:c2:d4:6f:73:d3:fd:80:29:68:9d:ed:56:28:5b:
7b:b6:eb:96:e3:e8:0f:16:42:46:3a:c2:9b:a1:b3:
bb:e1:7a:ff:31:d3:da:47:fc:ae:3e:dd:32:f5:6a:
15:ec:f1:6e:a2:93:49:a2:bd:0d:39:d6:ed:d4:61:
bc:94:18:5e:0a:01:0d:d7:86:52:5c:f8:b2:c6:29:
bb:23:e9:38:ff:bd:06:51:24:1a:16:8c:6a:9c:02:
b6:bd:d7:47:4e:4f:62:b7:3f:54:1f:7e:88:e1:81:
0d:9d:6a:5f:f8:75:03:67:fa:b0:df:48:3d:f4:7b:
8f:01:ba:79:ae:12:60:fa:39:3c:84:25:e9:39:06:
fe:1e:4b:ff:9e:bb:b6:e3:85:b9:6a:72:72:be:12:
5c:58:b7:11:27:21:03:78:47:49:d8:23:a9:66:d6:
14:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:68:9E:66:56:4B:C3:0A:74:2A:EE:EE:16:C0:DA:C8:E2:89:3E:70
X509v3 Authority Key Identifier:
keyid:DB:18:64:22:27:9D:9D:8B:4E:68:E6:9B:12:96:E5:32:D4:DA:0C:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xhkIiednYtOaOabEpblMtTaDD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0c01c5-157d-40a7-8fcc-5c7723460223/1/2xhkIiednYtOaOabEpblMtTaDD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:30:6c:2b:6a:53:e6:e0:03:9f:5f:0b:3e:15:38:32:9a:e9:
1b:25:40:fb:ca:f9:8a:34:35:2e:4e:9a:0c:42:22:ff:63:29:
19:90:7d:d8:45:94:86:61:60:31:40:9b:72:ed:50:bd:dd:44:
72:af:52:db:6c:bb:c0:3d:26:05:d2:f8:57:7c:8d:90:78:b8:
8c:d4:bb:3f:d2:01:5a:20:d3:24:cf:4b:ca:88:d3:4d:bf:df:
5d:b7:7a:58:98:64:8a:94:6c:68:4d:9b:13:0b:d4:6b:4b:27:
92:4d:e2:d4:dc:11:86:5d:ce:e6:68:f1:61:87:3e:59:1e:57:
fb:8f:cb:3e:1f:37:8f:a7:a7:47:a7:43:0b:35:e4:f9:87:e7:
0a:dc:7e:f6:9c:08:cd:58:80:b7:7b:cb:8e:db:06:aa:ed:1b:
39:06:dc:79:9a:3d:fc:14:75:bc:af:c6:a9:a1:87:a0:82:0d:
34:f5:91:76:ab:09:ad:9e:14:7f:2e:5a:63:c4:08:c8:ea:50:
2a:44:af:56:9d:1d:c3:9a:70:cf:9a:76:5d:9b:58:15:28:ed:
ea:8f:8b:71:34:a9:7f:ca:0c:b1:52:7b:8b:8b:45:6d:c8:dc:
61:6f:fc:7e:33:d5:55:ae:62:07:db:28:38:4e:fc:d8:66:a7:
33:c2:c9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 07:02:50 2025 by rpki-client