Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
File: i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft (raw, json)
Hash identifier: TM0FAQXmauYjeYRkcB0/EZA+ty2TE16F45OGNYaT8yk=
Subject key identifier: 2D:5C:0B:B8:02:9D:7A:F7:50:9E:12:B3:14:86:B9:4A:1A:1B:D6:FE
Authority key identifier: 8B:DC:53:CC:22:63:F6:FD:EA:17:0D:32:82:A2:0B:8E:71:60:73:86
Certificate issuer: /CN=8bdc53cc2263f6fdea170d3282a20b8e71607386
Certificate serial: 0198D73BE14A8E77243A8F2EE2A0D7586FBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 14:01:22 +0000
Manifest this update: Sat 23 Aug 2025 14:01:22 +0000
Manifest next update: Sun 24 Aug 2025 14:01:22 +0000
Files and hashes: 1: i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl (hash: IUXoGXMndmjG7M2KyJWnvOJvkX/XyJQc+xw19NcVogM=)
2: rZl7il51Qi4Gx_nmvEJg-3TLGKk.roa (hash: IPdBuWhuBJNo3ThX3cWTYn6XuZdtQY1uz610IBEtgfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:e1:4a:8e:77:24:3a:8f:2e:e2:a0:d7:58:6f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdc53cc2263f6fdea170d3282a20b8e71607386
Validity
Not Before: Aug 23 14:01:22 2025 GMT
Not After : Aug 24 14:01:22 2025 GMT
Subject: CN=2d5c0bb8029d7af7509e12b31486b94a1a1bd6fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:31:0a:05:bc:2f:1e:64:7e:48:b0:48:53:bd:
d2:5f:5a:37:9e:05:c6:01:60:04:d3:b5:88:fe:b0:
dd:14:c5:ae:b6:7d:23:fd:96:bd:13:0c:50:81:4a:
10:6c:e7:d4:90:61:2a:bb:bd:84:42:5b:eb:8a:6e:
88:2d:48:6f:d8:bf:17:08:c5:57:d6:92:2f:a9:87:
e6:0b:f6:57:73:c4:88:c8:57:52:40:62:4e:12:16:
54:9e:59:6f:f5:39:ca:ac:d3:64:f0:a3:0c:49:2e:
d3:d0:b5:4a:fb:cc:78:6a:d5:28:88:c2:a3:a1:47:
80:cb:27:76:f0:2a:05:60:18:5f:a1:6a:55:01:5b:
4c:e9:72:af:23:7f:5f:17:8b:5f:7d:71:29:a4:e1:
51:71:dd:b3:de:dc:83:e8:a1:1f:86:3d:18:b8:ff:
0d:ea:01:d4:45:b6:d6:db:50:5e:64:88:20:c3:a3:
cc:78:80:b1:70:1a:b3:a8:dc:f4:63:22:f6:01:09:
bc:9b:3f:c7:12:98:e9:95:7c:5b:b5:5f:de:f4:78:
d2:05:fc:6b:e6:59:1c:d6:18:62:c1:09:2e:e4:82:
6f:41:c0:c3:48:51:c2:d3:ae:2d:d4:80:96:d3:0a:
ad:e0:d5:70:e5:e5:cf:39:4d:0a:51:a1:c8:ec:01:
f4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5C:0B:B8:02:9D:7A:F7:50:9E:12:B3:14:86:B9:4A:1A:1B:D6:FE
X509v3 Authority Key Identifier:
keyid:8B:DC:53:CC:22:63:F6:FD:EA:17:0D:32:82:A2:0B:8E:71:60:73:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9xTzCJj9v3qFw0ygqILjnFgc4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/23742f-1d70-4f31-a9ca-7acb21ba773f/1/i9xTzCJj9v3qFw0ygqILjnFgc4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:8f:36:83:dc:07:13:ff:8e:27:d1:6a:4e:2c:c5:73:ae:eb:
2f:7d:4c:12:dc:60:2c:05:58:f7:63:07:fb:3f:6f:0d:29:c5:
33:84:fd:af:3a:a9:7a:e9:09:f9:5d:3c:68:79:d1:ad:be:a9:
46:41:85:c8:d9:f4:bf:89:e7:d9:89:16:42:18:8d:b5:f5:a5:
f8:e2:8d:8f:bc:5b:6a:b8:1e:77:3f:1e:be:7c:52:a9:27:6f:
c9:f4:0a:33:9a:cf:0f:47:b0:ac:59:2a:7c:44:26:14:49:d4:
cd:40:27:f9:11:f8:f1:5b:c6:0e:62:b4:26:24:e0:13:12:93:
70:51:62:58:14:29:75:8c:60:84:a1:62:ed:59:a8:33:55:a5:
ba:5d:2d:1a:34:b4:35:d2:a9:13:17:79:cb:19:76:61:c4:d0:
bd:74:81:44:b3:d9:cc:98:40:c9:72:c0:7b:2d:df:65:8c:0c:
89:d6:ab:f9:d8:62:7d:e6:25:d4:eb:e5:f4:d5:01:7d:0d:be:
4a:1b:57:05:8a:63:3d:60:b6:4a:48:ef:0d:eb:4d:f7:d0:e9:
ac:20:60:19:f3:f1:ef:8b:ea:c7:b8:d2:bc:1f:e2:83:a0:0d:
24:79:83:05:a9:4a:b7:58:cf:92:b7:10:30:37:1d:e2:04:60:
30:35:71:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:13:43 2025 by rpki-client