Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
File: PIbsMh5y_UbJjcwM18cLytVX1Zw.mft (raw, json)
Hash identifier: YZuZR0O6AuirWT1GXwITUwy4ph7km9T/xQmACSjztLI=
Subject key identifier: 35:8A:B4:88:57:D7:41:54:94:A9:02:A7:CC:FB:1E:7D:6F:96:8F:87
Authority key identifier: 3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
Certificate issuer: /CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Certificate serial: 0198D6988E17813A7ED5B3006158A3CC5633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 11:02:58 +0000
Manifest this update: Sat 23 Aug 2025 11:02:58 +0000
Manifest next update: Sun 24 Aug 2025 11:02:58 +0000
Files and hashes: 1: PIbsMh5y_UbJjcwM18cLytVX1Zw.crl (hash: AM59irs2jlR4KcW9tx7gqcVwcQLlBmpJWzIW8xh1GZc=)
2: XgpSQjhhfxwk9vZfnDmQ4hugM38.roa (hash: 0VqbQTYbejzGPg6sOJbQNqmXP31XYN5qUoi8IUVN5jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:8e:17:81:3a:7e:d5:b3:00:61:58:a3:cc:56:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Validity
Not Before: Aug 23 11:02:58 2025 GMT
Not After : Aug 24 11:02:58 2025 GMT
Subject: CN=358ab48857d7415494a902a7ccfb1e7d6f968f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ea:5a:04:29:3b:48:30:a5:eb:46:6f:3c:db:
e3:d7:ce:6a:3e:b2:71:e2:78:b3:03:c5:ef:4f:58:
d3:7a:78:8f:9f:dd:ed:6e:22:5b:6b:63:9b:47:c9:
38:e0:48:c4:0c:7a:c3:b6:aa:3c:e3:22:d0:8d:68:
39:db:65:1a:12:6e:b2:dc:24:63:3b:a6:31:a3:a0:
4f:5c:dd:c6:9d:f6:d8:fb:c9:6a:27:15:36:35:45:
33:e0:3d:cc:ef:94:ae:15:dd:76:de:d9:32:c9:2b:
8c:9d:84:96:73:a2:0b:f3:56:cf:71:d4:13:44:31:
8b:de:81:0e:10:84:b2:78:7b:d1:06:96:f3:42:12:
60:5f:78:da:87:dd:b3:02:77:da:09:31:59:60:ef:
d8:9e:49:1f:12:a7:3d:12:cd:0c:32:c1:fe:5e:a9:
b2:92:d5:08:71:a9:65:76:af:4f:cd:fb:b0:0b:68:
b4:e4:7a:42:19:bd:d5:09:ff:09:53:67:86:25:46:
b7:9c:39:3c:b2:fb:8e:20:95:4c:cb:9f:8e:5e:aa:
cf:cd:37:41:d2:cf:46:bd:32:b1:2f:b8:05:86:ef:
72:59:e5:b4:c5:10:9d:a9:1f:59:9b:bd:f2:af:dd:
30:28:fc:01:09:10:33:ea:c4:4a:3d:17:70:ee:db:
ce:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8A:B4:88:57:D7:41:54:94:A9:02:A7:CC:FB:1E:7D:6F:96:8F:87
X509v3 Authority Key Identifier:
keyid:3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1d:d6:8f:58:a9:17:1b:12:4e:4b:f2:74:c9:13:50:a5:bf:
c3:7c:af:78:80:3b:1d:9b:31:65:2b:a6:8d:62:8b:28:7d:87:
26:49:cd:34:05:4a:e6:98:94:bb:17:25:2c:d3:ec:52:1d:4a:
20:5d:ae:ec:07:f1:0c:f0:08:08:2f:e0:ff:7b:55:84:df:f8:
54:0b:67:6f:0e:1d:00:3c:65:63:ee:f2:72:18:81:65:5d:d1:
bd:db:70:95:33:88:c8:29:45:f7:9f:56:d3:a0:ab:21:45:e4:
e4:2c:26:2e:df:52:ea:e6:38:d2:be:e9:a8:a5:6d:13:8a:2b:
f4:0f:69:4f:3d:f1:61:e7:5d:80:c6:fe:18:79:cf:cb:7b:64:
54:d0:86:91:4c:db:ed:27:2a:38:d8:62:45:c3:e9:c4:40:de:
6d:08:b9:78:19:56:cd:b2:61:88:6f:a0:7c:68:59:46:9b:5e:
36:16:bc:5e:46:19:0e:02:f2:4b:1f:a8:9b:5a:82:7a:fb:50:
1e:5d:22:78:97:c2:a6:b4:ad:f8:97:d5:7d:9b:48:7d:80:fc:
13:89:c2:19:c4:ac:64:75:1b:ee:7a:aa:ec:fc:6b:c9:ec:f4:
25:49:93:6e:1a:05:73:67:16:43:e4:2a:4c:fb:74:d7:36:07:
ca:c4:42:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:38:43 2025 by rpki-client