Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
File: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft (raw, json)
Hash identifier: Vr1QFtBgMLHtUxgEIsp9oe6DYec1x5NswJUrpLdD12s=
Subject key identifier: A1:D9:12:6E:23:DA:5E:2A:13:5E:99:CC:04:84:11:CA:FE:40:C2:57
Authority key identifier: 33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
Certificate issuer: /CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Certificate serial: 0198D6CD378D0153937C8EA0B0F4B53CEFF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 12:00:29 +0000
Manifest this update: Sat 23 Aug 2025 12:00:29 +0000
Manifest next update: Sun 24 Aug 2025 12:00:29 +0000
Files and hashes: 1: GNRL3UXk7g6OcDAGH7Yy1P9BNQI.roa (hash: ou7tiqr74kLwCl4+yNF40huO3uxU0RHXk9OIjHLjDwQ=)
2: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl (hash: +ts63w16rMruTacbxT+tYs8P3pxFCUV6xZbZMhGq7p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:37:8d:01:53:93:7c:8e:a0:b0:f4:b5:3c:ef:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Validity
Not Before: Aug 23 12:00:29 2025 GMT
Not After : Aug 24 12:00:29 2025 GMT
Subject: CN=a1d9126e23da5e2a135e99cc048411cafe40c257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:07:b7:45:e5:04:aa:5b:27:85:03:cb:8d:fd:
21:36:21:d1:82:ea:35:d4:e1:0e:c2:49:f0:70:de:
fe:c9:7c:e3:ed:4c:3e:c7:7d:15:0d:d5:44:fb:c0:
64:17:f5:c7:2d:2f:15:86:dc:55:d3:3a:52:9c:19:
2c:a7:f1:69:d4:ce:ab:99:9f:df:06:53:88:6c:f4:
26:51:10:a7:8a:63:c3:b6:1c:f8:3a:18:cc:a2:44:
8f:fe:24:a7:83:89:42:cc:d0:6b:07:9e:c4:15:6e:
fb:b7:7a:02:49:d0:8c:7d:aa:d3:ea:d0:66:49:8d:
70:26:0a:93:f2:66:73:0d:f1:67:ce:de:6a:e9:c9:
9f:b7:c7:a0:85:7d:fb:81:21:c1:f5:23:1e:54:9f:
8a:54:12:ae:75:62:fa:6a:2f:bc:de:48:92:df:c9:
26:c6:ca:b5:66:d9:87:b6:66:49:9e:e2:48:d6:6e:
eb:fd:50:3e:fd:2c:02:2b:10:cd:b0:57:4b:10:2f:
01:74:52:94:b6:c9:8b:64:83:31:9a:87:b9:84:4a:
4a:dc:ab:8d:4b:19:60:cb:ed:f6:29:99:26:f1:92:
06:94:87:92:be:1a:86:35:5d:ad:22:8a:54:8c:42:
47:5a:ee:dc:15:d9:9f:a7:38:53:99:19:cd:9c:6b:
13:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D9:12:6E:23:DA:5E:2A:13:5E:99:CC:04:84:11:CA:FE:40:C2:57
X509v3 Authority Key Identifier:
keyid:33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d6:2a:24:1b:95:4d:c1:cd:98:25:ab:24:a6:32:49:15:e5:
46:8d:d4:be:9f:56:db:35:64:99:18:03:1e:32:8b:e4:fa:67:
69:8c:18:49:18:5f:19:41:73:0c:b3:26:57:f3:1e:60:21:d6:
50:49:94:5b:99:54:7d:ad:76:4f:31:ed:3b:7b:9e:75:de:17:
a0:8f:37:22:09:c7:23:2c:66:30:86:5c:70:af:ba:9d:21:75:
12:77:25:3d:9d:66:01:e6:cd:67:e1:2b:62:2c:74:df:a3:43:
8b:80:8c:c2:c3:d0:fb:a6:9d:c2:f2:37:7a:f3:64:f5:a6:97:
9e:f8:f6:6d:25:46:85:d0:c0:13:6f:2c:00:1f:c8:36:1a:5f:
4d:73:26:be:8c:ec:36:4d:97:ed:53:67:94:8a:a9:6d:17:2d:
80:3b:d2:7c:c8:02:5d:f1:a7:07:45:dd:74:07:a2:ab:3e:5d:
d3:97:98:6b:c0:d9:86:5f:bf:56:5b:cc:83:8a:4d:37:bd:4d:
4e:3a:03:59:e2:50:8b:dc:ea:62:27:ec:cf:ad:71:90:81:a3:
6d:3c:e9:f0:26:18:00:e6:28:2c:f5:b6:ec:ff:db:45:93:ac:
a3:f4:4e:28:ba:c6:64:c2:b2:a2:38:55:91:22:83:c5:74:79:
d4:78:4a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:30 2025 by rpki-client