Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
File: 21m85hup0qDjVb4B8TQbjfdq69s.mft (raw, json)
Hash identifier: XaabtYPwZsF8KJcd6QiBdwzdKkmj9zJuTo8i+Ptk9+w=
Subject key identifier: 23:83:83:99:A7:8D:D6:91:B7:BE:0E:50:5A:8C:ED:09:44:C6:98:75
Authority key identifier: DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
Certificate issuer: /CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Certificate serial: 0198D5BC4DA218CADCA2C59975CBAAF92FC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:02:24 +0000
Manifest this update: Sat 23 Aug 2025 07:02:24 +0000
Manifest next update: Sun 24 Aug 2025 07:02:24 +0000
Files and hashes: 1: 21m85hup0qDjVb4B8TQbjfdq69s.crl (hash: sw9X4Q706UPZCSgYmoOz/x4shuzfd8XHkQy1FrXozI8=)
2: y6zUASqLMYC9vOre4NE5oaCGRIY.roa (hash: nU1xlMhFlcEyY9/vfWFwqCMNEfoKNvZKlYNQ0axw4og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:4d:a2:18:ca:dc:a2:c5:99:75:cb:aa:f9:2f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Validity
Not Before: Aug 23 07:02:24 2025 GMT
Not After : Aug 24 07:02:24 2025 GMT
Subject: CN=23838399a78dd691b7be0e505a8ced0944c69875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b4:49:14:2a:41:48:a2:76:04:13:7e:0c:af:
13:92:6e:c2:de:e0:00:b6:44:cf:b6:a2:5f:82:bc:
d4:bf:e6:07:6b:9e:ce:08:29:7d:d9:b8:9a:96:f5:
08:e3:b0:50:54:61:8b:5a:1e:28:37:ab:96:41:4a:
ce:89:54:ed:e0:ea:3a:92:51:8c:8d:c4:27:32:d8:
76:78:27:76:44:42:95:ec:0e:a1:83:b7:81:a8:3c:
75:f0:c7:50:0b:19:f9:23:19:74:ba:34:6c:97:13:
70:36:25:c9:cb:f9:ce:f9:0f:e5:1d:82:dc:d9:65:
9b:8c:77:5e:9e:d4:58:8d:a4:e5:99:67:b0:c8:57:
7f:b2:18:5e:12:55:04:11:ae:d3:20:e0:96:24:7d:
78:ec:d8:ab:fc:fd:61:bc:e2:7d:6a:04:ac:bc:e5:
f3:c9:ec:a3:f4:f9:14:e3:32:df:2d:da:8a:5d:c6:
eb:57:89:63:ef:9e:6c:57:32:ea:34:2a:09:fc:65:
43:63:4c:58:e9:83:79:f3:80:06:89:48:14:a3:94:
00:19:5a:b6:aa:25:3e:63:26:1b:11:f5:22:00:9a:
b3:56:85:a9:49:f8:5b:7b:23:f1:42:6e:49:80:03:
22:1d:7a:9c:67:08:58:78:3c:19:36:8b:bc:ed:97:
62:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:83:83:99:A7:8D:D6:91:B7:BE:0E:50:5A:8C:ED:09:44:C6:98:75
X509v3 Authority Key Identifier:
keyid:DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:dc:e3:b2:2c:45:03:cc:0b:e8:a5:ac:05:70:da:7a:2b:92:
11:b9:72:56:4a:b8:53:80:23:10:d0:fc:2e:49:34:44:ab:38:
dd:f4:57:bc:c5:52:c8:af:f6:ba:65:6d:47:34:5b:40:3f:7a:
e4:52:68:cb:f9:0c:da:de:d1:81:bd:36:ad:d1:c6:3e:3b:ec:
80:1b:d8:fa:26:c4:4f:39:c3:80:9a:d7:fd:ec:92:96:f8:6d:
2d:55:cf:ee:b7:a9:0c:25:b6:00:c2:a1:2d:71:44:3e:05:8f:
fc:24:8f:d5:b1:07:4a:31:46:1a:54:55:81:ed:55:3b:1e:4b:
47:05:f9:ee:9e:ac:94:0e:22:4b:dd:5c:ed:60:9b:50:d0:72:
03:f6:bf:16:44:c0:03:17:5d:e9:ef:0a:b7:ab:96:ef:29:74:
55:62:79:2f:6b:cf:1f:57:3a:97:03:6e:e4:32:5d:05:60:6e:
16:89:3a:e6:1b:b2:43:76:ba:fe:5d:ec:24:0d:d3:89:9d:f0:
d0:d6:05:3b:7a:02:17:6f:a6:33:1e:f9:ef:22:ce:03:35:60:
ad:48:bf:28:d7:27:67:24:9c:92:e2:0c:8d:f9:7b:b2:5d:51:
a4:5e:d6:0f:43:08:dc:4b:aa:52:eb:93:22:83:2a:d8:6c:31:
7b:65:f2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:08:26 2025 by rpki-client