Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
File: I_IQvBU0utwI_5R9mTUEcRk1MbM.mft (raw, json)
Hash identifier: uGM59cn9IrQVm6H72+EGvrSDwuI9gq5iPjcoZtLtJio=
Subject key identifier: 37:C2:61:20:65:0A:26:16:66:AE:F9:EE:BC:F8:5B:4F:F8:39:30:44
Authority key identifier: 23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3
Certificate issuer: /CN=23f210bc1534badc08ff947d99350471193531b3
Certificate serial: 0198D698876BBC7E4BD9E751287A3AEF2220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 11:02:56 +0000
Manifest this update: Sat 23 Aug 2025 11:02:56 +0000
Manifest next update: Sun 24 Aug 2025 11:02:56 +0000
Files and hashes: 1: IQl4HNXKSWovo0ppYzsGnJqwUZ0.roa (hash: I1ThZylWt52H2yyPu4akWSun+BojCZr3Y+wXTnrpft0=)
2: I_IQvBU0utwI_5R9mTUEcRk1MbM.crl (hash: GGXMKyPHDrtAspTZ3J054ZBzddYb9d8DX3G0eCccJZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:87:6b:bc:7e:4b:d9:e7:51:28:7a:3a:ef:22:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f210bc1534badc08ff947d99350471193531b3
Validity
Not Before: Aug 23 11:02:56 2025 GMT
Not After : Aug 24 11:02:56 2025 GMT
Subject: CN=37c26120650a261666aef9eebcf85b4ff8393044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ad:82:01:a1:09:62:0f:52:1b:a1:59:31:0d:
8c:eb:6a:2d:0a:6e:e2:b5:b8:00:da:ff:4c:f7:d0:
6d:e9:2d:8f:54:8d:9e:87:6a:4a:70:51:85:26:04:
49:17:5d:7b:75:7d:c5:51:00:a6:31:17:f7:ed:5f:
6a:cf:58:b8:9a:bc:6b:a1:3c:99:fc:6c:5b:5e:72:
87:2e:09:d8:14:51:9e:a7:1b:1b:f0:08:8c:ab:ad:
fe:2a:70:2f:df:0b:e7:fd:ba:af:da:90:bc:a6:35:
84:ac:13:10:7e:48:9a:34:02:b9:3e:c5:bf:ee:5b:
61:bb:ae:1a:a5:4f:11:dc:48:d6:2f:3e:6f:0e:16:
66:c5:c3:37:65:24:f7:d7:16:23:6c:95:87:3d:ec:
4f:f9:2a:09:ee:6d:2c:61:17:f6:7c:82:57:8f:21:
c4:13:a5:50:70:bc:20:c0:d3:d0:24:83:2b:cc:fe:
ca:b1:aa:88:b5:f8:21:ff:d3:c0:80:8b:d8:a2:bd:
0e:ce:65:1c:c0:fb:f6:02:22:ab:87:79:d2:66:a5:
48:f8:82:a8:ef:31:fe:cc:d7:ee:21:4d:e3:5e:ae:
5f:10:ec:e0:72:56:5f:a9:7a:56:b6:9a:1b:1d:7f:
f6:2f:c7:bb:05:58:c5:d5:8a:98:cc:c2:c0:7b:35:
a8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C2:61:20:65:0A:26:16:66:AE:F9:EE:BC:F8:5B:4F:F8:39:30:44
X509v3 Authority Key Identifier:
keyid:23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b6:86:47:03:86:f5:c4:a0:55:17:cf:9e:25:83:02:af:d5:
8c:04:bc:9b:7c:78:95:67:ef:ce:de:15:55:eb:16:69:95:67:
92:92:66:26:12:1f:01:43:ab:9e:62:fa:96:ec:76:80:b6:d3:
fe:18:d0:42:1f:2c:3d:c6:3b:a6:f8:ed:71:8c:c3:29:41:39:
7a:2f:1f:16:30:fa:d0:34:f8:e2:7e:1f:a1:38:17:81:a0:8d:
67:1f:a5:58:ab:ca:25:ef:24:03:90:5b:b3:cc:83:24:dc:d8:
00:35:69:1c:76:e0:fb:9f:0f:cd:e4:24:79:77:6b:cf:84:01:
28:32:37:9a:a7:99:36:4d:a8:97:75:04:d4:12:ac:4b:97:09:
35:83:34:b2:d7:42:97:25:70:3d:b6:21:26:b2:8f:d6:ba:6d:
0a:9b:1d:b0:94:33:1a:9d:9a:e4:ca:2b:70:bb:b3:0e:63:6b:
8d:dc:44:f3:08:4e:9d:7e:df:04:84:f6:07:e8:db:f5:0b:dc:
0c:5f:d1:60:5b:4c:c6:ff:2e:09:8a:ce:b9:97:4d:bb:c4:da:
6e:e8:60:64:1f:0c:05:3d:74:2b:cf:6f:fa:e8:27:f5:e8:ca:
50:2b:ad:e2:59:6f:1b:0c:3d:4e:a8:00:83:b0:36:93:df:9a:
fe:43:35:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:20 2025 by rpki-client