Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
File: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft (raw, json)
Hash identifier: Hi7wMMryUjWW/93+Y/N9cCs2pMZHInCnPFeTXD1tEcg=
Subject key identifier: EC:4E:12:B6:23:CA:FA:2F:20:9B:27:95:73:42:64:19:10:EB:96:5A
Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
Certificate issuer: /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Certificate serial: 0198D5BB78ECDAFA0E9ED40C4FC8312CE90B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 07:01:29 +0000
Manifest this update: Sat 23 Aug 2025 07:01:29 +0000
Manifest next update: Sun 24 Aug 2025 07:01:29 +0000
Files and hashes: 1: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl (hash: 8c/pTQ/0bS9LwBBmYgL1n87cAANhty3hrt2TvIQeX7k=)
2: 8WExy4twgMjUhhd6ZwwuMmQy8hc.roa (hash: DEuWlnE+ezZMUM7awLwZ5+QzOvWVXlr73rgH56B1SXs=)
3: UPhAaB84R0Xe1XTexqfwP-ciVHM.roa (hash: p28psRkGWXa6krQq8ETJGtszXl3PhjiqO+T48rxu9sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:78:ec:da:fa:0e:9e:d4:0c:4f:c8:31:2c:e9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Validity
Not Before: Aug 23 07:01:29 2025 GMT
Not After : Aug 24 07:01:29 2025 GMT
Subject: CN=ec4e12b623cafa2f209b27957342641910eb965a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d6:dc:0e:e8:03:00:7c:fa:09:37:75:e6:f7:
1f:7a:a0:89:db:0e:db:7e:27:b5:e7:59:c4:e7:db:
2b:1d:a7:4a:91:58:b4:f1:b3:9a:b5:5a:0a:2d:76:
fa:86:a7:72:8a:02:e1:f3:28:e4:06:95:6c:87:b1:
8f:99:79:e1:1d:e5:41:79:91:cc:c8:87:0c:11:dd:
cf:a2:d1:15:06:ba:72:53:52:f8:0b:f7:c0:97:8d:
c3:cc:92:60:26:6c:61:c6:7a:1f:63:95:b3:61:0b:
38:55:38:39:7c:c7:4d:3b:1a:60:8e:49:4c:21:0b:
25:b5:dd:3a:8f:d3:be:f4:97:d6:04:40:08:73:15:
35:3a:62:c3:de:51:28:fb:81:8b:5c:0b:0e:c8:69:
b3:3e:a6:cc:51:60:84:0b:0e:37:c2:9e:fc:85:aa:
ae:6e:2e:8e:4b:c2:ce:7d:37:c2:22:2d:93:c4:d1:
9b:5c:2d:14:ab:01:59:af:0e:b0:02:3f:bb:c9:57:
81:1f:47:b9:0a:3d:0e:97:89:e1:20:09:3c:e9:dd:
b4:5c:dc:25:bb:74:50:b0:e4:f2:3f:47:48:84:90:
31:3a:78:d1:e0:d8:dd:ca:18:72:bc:aa:77:fb:45:
88:ac:f2:29:0b:bd:12:1a:98:6f:5f:0d:d2:d6:2a:
3c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4E:12:B6:23:CA:FA:2F:20:9B:27:95:73:42:64:19:10:EB:96:5A
X509v3 Authority Key Identifier:
keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:44:f6:9b:55:e9:70:64:93:56:16:4e:e1:ad:d3:c0:05:19:
8a:12:df:13:01:71:b1:24:03:92:a7:62:83:a6:c4:dc:5e:0e:
09:b9:1f:57:f1:da:0f:c3:bd:e3:3d:24:b2:85:34:a1:67:a1:
ca:df:88:44:c3:e5:7c:51:02:58:1f:00:10:6b:88:c0:45:7e:
46:01:4e:0f:61:46:1c:20:21:2c:3d:1e:9e:03:bb:e8:94:12:
a8:93:ed:80:d7:3e:0b:2e:c5:7b:76:95:f2:e8:b7:48:35:98:
72:ca:2f:0f:3a:23:9f:ff:86:ce:c2:d6:b0:37:c2:5a:29:d8:
d8:de:6d:64:44:d4:20:2c:10:bf:14:45:bb:9f:30:f6:d0:ff:
27:bf:17:38:57:8c:27:ec:87:27:7e:ea:10:83:66:30:c1:e7:
25:26:dc:08:08:c9:fa:b8:a4:59:f5:58:03:67:17:43:ed:da:
98:89:62:9b:1a:eb:04:c4:43:ce:88:b3:a4:49:78:20:5e:5a:
9a:d5:42:32:2a:a8:eb:1b:a3:55:c1:f7:0f:a5:77:db:3f:9f:
35:4e:df:c5:0b:89:69:2a:85:6f:9c:00:90:79:0b:6b:40:69:
af:de:37:21:4e:0c:62:86:50:f5:5e:0a:20:da:d1:c7:d9:a8:
ca:51:15:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:50 2025 by rpki-client