Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
File: ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft (raw, json)
Hash identifier: 7zxO5vBFuguML766RTt6s/TfkVCEwzb7CjIPwJh7zwM=
Subject key identifier: 04:12:73:AB:4A:E3:77:A4:BD:96:10:8D:06:E7:05:7C:FB:B9:B2:B7
Authority key identifier: 8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
Certificate issuer: /CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Certificate serial: 0198D73BCDBDC7AC9685F27CD4A045782420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 14:01:17 +0000
Manifest this update: Sat 23 Aug 2025 14:01:17 +0000
Manifest next update: Sun 24 Aug 2025 14:01:17 +0000
Files and hashes: 1: SZpd9qPeF2_UcZ0BFTiD1uQx6CE.roa (hash: 4d7c/yFsOUlnwxOih4L4b458874C6mb5/7y63/As6E0=)
2: e6NTQMQbAc2rRpYIgSE0b5QlitQ.roa (hash: AW2JD/AMZP/3NkMYPVumCDsjg07AD98EjBhRoynRE5I=)
3: ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl (hash: UvMtMu/1ly50ksr/nJoxKdyHHIuT+y1JU/aH4CjApCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:cd:bd:c7:ac:96:85:f2:7c:d4:a0:45:78:24:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a31f8bea33b0056446e3321eede3a170fbd7c1f
Validity
Not Before: Aug 23 14:01:17 2025 GMT
Not After : Aug 24 14:01:17 2025 GMT
Subject: CN=041273ab4ae377a4bd96108d06e7057cfbb9b2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2a:fc:65:07:97:49:75:ff:bb:d5:59:69:cb:
1e:47:d9:13:b1:a1:f8:dd:9e:ba:a9:2c:6a:49:cf:
79:15:6d:8b:39:c1:1f:b1:9d:16:da:15:56:84:0c:
c8:30:1a:00:ce:6f:aa:25:91:2e:8f:05:2b:d8:43:
36:c7:d2:94:ca:f7:ac:ae:20:a3:20:e5:d0:ef:e6:
5e:ae:5a:90:cd:f0:df:c3:bf:ab:db:66:15:a4:db:
74:94:40:1a:37:89:1e:12:19:84:a8:0c:fb:8b:25:
82:79:1a:9b:0c:6f:11:b1:7d:03:12:bc:01:e8:e7:
7a:69:e3:42:d1:56:33:a2:4e:30:c4:84:76:01:05:
db:5e:74:ed:de:ff:c9:ac:27:98:d7:56:9f:7f:f9:
72:3a:af:42:a2:fb:50:94:89:69:9e:5c:72:92:24:
5a:f7:4a:31:36:1a:22:9b:2c:be:aa:44:88:a9:82:
d9:38:9d:83:b1:2b:60:a5:24:dd:67:8a:69:9f:f7:
99:0d:d0:5a:a4:0e:ba:fe:26:49:a9:b8:9f:b8:3b:
9b:23:a3:6c:cf:49:61:75:a8:0f:78:b1:bc:4c:a2:
68:e4:fa:44:0c:0e:fc:8d:a5:b6:2e:c4:40:c7:aa:
45:a6:3d:2b:88:10:f7:60:3a:86:05:6b:59:db:da:
7a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:12:73:AB:4A:E3:77:A4:BD:96:10:8D:06:E7:05:7C:FB:B9:B2:B7
X509v3 Authority Key Identifier:
keyid:8A:31:F8:BE:A3:3B:00:56:44:6E:33:21:EE:DE:3A:17:0F:BD:7C:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijH4vqM7AFZEbjMh7t46Fw-9fB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/60fc0d-0eb9-424c-a630-9a5c73bffa23/1/ijH4vqM7AFZEbjMh7t46Fw-9fB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:64:84:76:00:a6:df:0b:f4:b1:f3:ea:00:31:3c:15:90:71:
ec:1b:c1:f3:e5:9e:df:fa:67:53:bf:73:85:e7:11:e3:a6:56:
0e:6e:fe:c7:03:dd:8e:79:95:41:86:47:91:a7:b3:ab:00:12:
c2:12:39:1d:e5:6f:de:b8:16:db:bd:f1:ce:69:6e:d9:fa:b4:
82:dc:b4:ea:37:55:0c:62:c8:31:ff:95:f9:5e:2a:79:a1:50:
64:16:7a:b3:d7:18:db:cf:1f:a9:2b:63:68:41:e4:1d:70:9a:
da:81:b9:b6:96:f2:3f:de:bc:94:3a:db:71:8a:a9:13:16:3a:
53:70:0c:cc:f6:c0:ea:83:b5:b3:25:cd:1a:1e:6e:29:e3:c5:
b5:48:a4:59:46:16:55:91:0f:49:4b:c3:78:b8:c6:9e:f2:41:
1e:af:05:28:a6:dc:94:98:6d:71:2d:d8:4f:27:1c:81:30:0f:
57:8f:3c:fa:a9:f7:7b:f4:6e:c5:6d:f2:5a:ea:dd:e6:3c:27:
fa:0e:ed:8f:32:63:60:8a:e0:28:50:cb:4f:3a:b0:b9:43:7f:
7d:d3:bf:5c:a0:a8:30:42:b8:84:ea:4e:90:52:43:48:a6:9f:
fc:e3:c6:dd:b7:4b:51:c6:28:bb:7f:d8:b4:62:33:8d:08:ff:
55:73:94:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:29:57 2025 by rpki-client