Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
File: ix22ROoOJ0ndbtAirs0SGUvLlvI.mft (raw, json)
Hash identifier: opYJ6NKkVip3g7flkFNw7Jwwq6tT1teRusAxBwipivg=
Subject key identifier: 6F:8A:76:BF:40:99:98:D5:DD:8A:86:97:26:9F:02:96:50:51:E7:05
Authority key identifier: 8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2
Certificate issuer: /CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2
Certificate serial: 0198D4E096495252BE196AA1E3B532ADC3A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 03:02:24 +0000
Manifest this update: Sat 23 Aug 2025 03:02:24 +0000
Manifest next update: Sun 24 Aug 2025 03:02:24 +0000
Files and hashes: 1: A41bCmeGcRe18SujefEGCOd0pEc.roa (hash: NjleSysihCL9A6oaK71bgTpnAO+ec2pn28x66pipbdA=)
2: ix22ROoOJ0ndbtAirs0SGUvLlvI.crl (hash: T2Zm7h/nG2OL+93+LQLFIqzuwXo0ZZY/ISbiJHmx6Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:96:49:52:52:be:19:6a:a1:e3:b5:32:ad:c3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b1db644ea0e2749dd6ed022aecd12194bcb96f2
Validity
Not Before: Aug 23 03:02:24 2025 GMT
Not After : Aug 24 03:02:24 2025 GMT
Subject: CN=6f8a76bf409998d5dd8a8697269f02965051e705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9f:d6:87:d8:13:ee:36:61:d6:76:1e:07:c4:
1f:04:26:c9:aa:61:69:98:f4:52:c4:a4:b7:eb:47:
b0:dc:9b:d5:e9:30:21:96:13:21:ca:d0:de:6a:9a:
40:da:73:86:60:73:24:ae:46:1c:ef:0d:2e:25:a2:
eb:57:94:d1:9a:53:00:79:46:ce:2d:c4:dc:7f:59:
2b:9e:de:1f:9a:c4:83:1f:fd:72:fc:2b:7c:68:f2:
e7:ba:12:52:62:4d:a5:43:5c:0d:d3:50:00:62:c6:
77:68:77:e5:7d:d3:27:ca:a6:e7:9d:c9:92:b1:a3:
ef:7d:a1:5b:d1:26:fb:78:95:71:d8:cd:55:5d:c2:
6d:d1:be:22:0e:11:2f:59:d5:e5:1a:03:f4:24:e8:
5e:3d:29:75:18:58:3a:6f:b3:28:ca:d0:bb:6b:c1:
f2:89:19:e9:4f:ac:fb:e0:0d:71:b9:82:48:fd:6f:
98:66:ff:56:87:12:1d:e4:2c:90:d9:08:ef:56:d9:
85:a0:b8:b3:d2:40:38:5e:98:fb:e3:f2:8a:2e:14:
92:07:6d:b7:b6:95:d0:83:5e:09:50:63:0e:8a:72:
21:24:2a:6b:cc:dd:65:4e:47:7d:20:0b:49:d9:66:
0e:fc:d5:6a:20:c9:5a:f0:6a:99:fc:b3:17:20:49:
81:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8A:76:BF:40:99:98:D5:DD:8A:86:97:26:9F:02:96:50:51:E7:05
X509v3 Authority Key Identifier:
keyid:8B:1D:B6:44:EA:0E:27:49:DD:6E:D0:22:AE:CD:12:19:4B:CB:96:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix22ROoOJ0ndbtAirs0SGUvLlvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/dc9c6a-550a-4ee1-b4fc-543776f7c92e/1/ix22ROoOJ0ndbtAirs0SGUvLlvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3a:09:d8:0e:2d:1c:04:0a:8a:51:8f:83:63:c8:12:7c:18:
a0:df:4b:df:63:44:b7:48:21:e5:bc:ac:06:4f:70:d1:20:63:
c4:f5:4e:cb:03:03:51:46:e2:99:a7:06:fd:76:f9:21:a7:c9:
a2:0c:6e:40:f5:6d:ff:e8:c2:63:8d:71:73:09:f2:7a:64:fc:
f9:c2:cb:ee:fa:8c:f5:4d:f7:06:b0:48:2a:78:0b:e0:8b:3d:
68:44:97:79:7b:65:3e:ab:2c:8b:49:d7:2a:60:85:08:af:a5:
83:0f:3b:c1:5d:54:a9:5d:bf:c6:55:f1:7b:8e:7d:d6:e5:1d:
1a:14:83:aa:02:af:6d:27:41:79:1e:31:56:8b:46:57:5b:67:
1e:5d:ef:e1:dd:ad:6d:72:d5:03:15:0c:6e:b1:19:8e:5a:9b:
ca:f7:3f:4d:34:9b:5f:80:d6:f2:7c:fb:f1:d2:19:96:9b:62:
e0:d8:46:17:37:dd:1f:20:69:f6:ca:84:e8:1b:85:fc:51:35:
31:8d:45:7c:07:83:10:5a:c5:18:f5:ec:2c:33:f7:f9:62:88:
e5:dc:33:39:c7:e5:0b:05:12:76:63:d3:0e:ad:ea:31:14:ae:
4c:0a:ee:cc:01:ee:19:18:73:81:39:a5:48:5f:51:3f:be:3b:
7d:61:52:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:48 2025 by rpki-client