Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
File: 1pI99NrpGVDPANI1_jngDuo4FtI.mft (raw, json)
Hash identifier: cf/+l9y2gZSpEPkU+zCEjj2Zzs3M3yR3KZQ7NT0bY+I=
Subject key identifier: 4D:EC:88:4F:2B:76:8B:D1:B5:F7:E9:25:16:92:E1:57:68:65:0D:F8
Authority key identifier: D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
Certificate issuer: /CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Certificate serial: 0198D4A7CC81454BCC61EDCCCF03CE3C1980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 02:00:23 +0000
Manifest this update: Sat 23 Aug 2025 02:00:23 +0000
Manifest next update: Sun 24 Aug 2025 02:00:23 +0000
Files and hashes: 1: 1pI99NrpGVDPANI1_jngDuo4FtI.crl (hash: mkj0wuXLfojb2e4+vvt+zf4BEKIuSKb1tTizEhxQizM=)
2: k5WIi1Ejnq2UPqn3UpkS8V7jf1M.roa (hash: 0oCwakpSZkb6NAb4lGAZ4tdDGnYcuoaTcDYTLBa8fHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:cc:81:45:4b:cc:61:ed:cc:cf:03:ce:3c:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Validity
Not Before: Aug 23 02:00:23 2025 GMT
Not After : Aug 24 02:00:23 2025 GMT
Subject: CN=4dec884f2b768bd1b5f7e9251692e15768650df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:70:f5:64:7c:03:77:0e:81:fc:c0:2b:e8:0e:
fb:30:45:16:a5:7e:f2:83:37:a1:06:26:4f:44:d0:
70:fc:bd:55:51:47:7a:ce:5a:81:6c:0a:16:41:5e:
ba:57:9c:e5:42:eb:33:f3:bd:46:e9:9d:c5:37:a7:
ad:3d:20:5c:d6:1a:dc:2d:67:7e:17:05:5a:a4:4f:
1d:aa:0b:2a:50:50:f4:12:8e:b1:0f:d9:17:5d:20:
48:c7:0c:11:14:54:ff:2a:4c:5c:1f:8f:29:a8:d7:
0f:f3:6d:40:7a:86:d2:c0:4c:9f:9d:8c:0e:0b:71:
e8:7a:07:fa:27:ac:10:61:de:f6:f2:cd:45:95:7e:
5a:8d:c3:0f:54:13:a5:eb:b3:b5:bd:86:33:6f:33:
b4:37:98:5a:0d:9c:28:6d:c7:ef:64:9c:3e:3a:a1:
ec:cb:c8:ca:9e:e8:8d:9e:cc:b7:bd:74:ce:f9:3b:
52:ae:94:72:b5:ed:f3:a2:ce:1b:28:f8:a9:fa:ed:
be:81:cd:16:f5:db:09:71:eb:fc:4d:a3:ac:75:a7:
e3:e1:9d:5b:fc:5a:a7:7a:d7:b6:74:5c:87:23:cd:
16:b4:1a:75:b6:2c:54:99:46:88:76:c4:46:f6:88:
59:40:b8:a4:09:02:c5:96:5b:75:e1:f5:3a:e2:4c:
56:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EC:88:4F:2B:76:8B:D1:B5:F7:E9:25:16:92:E1:57:68:65:0D:F8
X509v3 Authority Key Identifier:
keyid:D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:8e:36:2b:63:ba:6f:71:a1:9d:a6:36:1f:12:9d:39:1d:9e:
50:e0:50:f8:4e:88:0b:89:1d:68:a2:5d:81:97:b8:2d:1b:8d:
67:7c:1b:85:43:89:5d:12:cf:48:cd:6d:d0:93:c1:8f:25:2d:
77:d3:cf:cf:de:e3:e2:84:54:3f:ab:4c:28:f2:53:82:ed:ac:
f7:7e:af:88:5e:3b:28:de:c0:b7:0c:7d:8e:cd:57:66:6e:9c:
0c:08:0e:b2:9c:12:a5:c2:bd:63:81:0f:ed:89:2e:d9:e0:5d:
9e:2c:fd:de:95:e7:54:1d:94:aa:ca:fe:15:8b:b2:7f:4c:df:
0b:74:f6:7c:80:d2:8d:e6:60:e7:63:da:ef:20:c6:72:66:ea:
4b:eb:d1:43:ed:ca:ca:a4:3e:64:88:a2:97:bb:46:53:df:c2:
09:a4:f4:c2:e7:de:21:dc:ce:0b:f2:7a:bc:16:bd:5a:ab:e3:
78:37:65:19:f1:46:69:16:77:81:a5:a0:9e:aa:71:f1:3e:14:
a0:8f:bd:17:15:59:d6:69:f1:49:e3:bd:d3:77:fa:e5:fc:42:
0e:70:77:13:a3:66:7e:a9:f8:76:15:1f:7c:0f:4f:0b:0a:7b:
e4:01:16:51:0e:7a:ad:70:b0:47:f8:e0:9d:eb:e5:61:f4:2f:
63:73:5e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:32 2025 by rpki-client