Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
File: ICZNUaES0LwizqcxTLBs9aGuM-k.mft (raw, json)
Hash identifier: g/iMbk4D2E2sW47FWd3ZmZhgdSi8NiJJXFO0MdrivkM=
Subject key identifier: 21:1B:1C:59:E4:1D:82:9F:8A:0E:7A:4A:D2:97:4F:FB:6D:59:01:11
Authority key identifier: 20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9
Certificate issuer: /CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9
Certificate serial: 0198D6CD7EB85F4301A06E75899DE32451F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
Manifest number: 15DD
Signing time: Sat 23 Aug 2025 12:00:48 +0000
Manifest this update: Sat 23 Aug 2025 12:00:48 +0000
Manifest next update: Sun 24 Aug 2025 12:00:48 +0000
Files and hashes: 1: FXy87TSnS3zZKpD3cubdEzL9JTI.roa (hash: ev8YOzfcP94Okj6loLdeokLYKFfF9CSd4o8ZPprNj7U=)
2: ICZNUaES0LwizqcxTLBs9aGuM-k.crl (hash: cATDY3NBVuFjtV52KoNyMRPt06Q1mXezic9qAoSel+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:7e:b8:5f:43:01:a0:6e:75:89:9d:e3:24:51:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20264d51a112d0bc22cea7314cb06cf5a1ae33e9
Validity
Not Before: Aug 23 12:00:48 2025 GMT
Not After : Aug 24 12:00:48 2025 GMT
Subject: CN=211b1c59e41d829f8a0e7a4ad2974ffb6d590111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:46:95:40:5f:ed:9c:62:76:71:00:b1:13:dc:
fd:30:1e:04:bc:0d:9f:75:9b:60:8f:be:67:a0:2b:
f0:9b:44:df:60:a1:ec:f8:7b:33:da:c0:81:56:83:
b8:f9:80:fb:7a:46:ae:8d:59:5a:1f:db:9a:29:10:
f6:6c:f5:65:13:10:31:d2:87:fc:15:af:6d:cc:e5:
f9:6d:b7:62:62:f0:2b:eb:12:a4:90:45:15:5c:94:
2a:75:46:03:a3:8b:4f:a5:ab:18:4d:62:b0:12:be:
e2:52:e9:27:fe:21:32:b7:56:b8:dd:f2:4e:cf:49:
7b:04:b8:fb:6d:5f:57:3c:f9:8c:01:62:88:64:19:
57:2c:80:4e:98:c9:9e:22:0a:e7:98:12:a7:5b:df:
96:af:66:6f:19:6e:6a:95:f3:98:f5:75:ad:d0:b5:
18:63:51:78:da:e9:8b:8a:a6:13:92:e0:4e:08:30:
2a:5d:7b:fe:44:68:92:14:f5:7b:fe:cc:1b:89:9d:
bd:bd:5d:3d:4b:76:ec:6f:ec:97:a3:64:7e:77:09:
b1:c9:6b:f1:4c:0f:a8:cb:8f:c0:2f:c8:b8:a3:db:
7f:fa:8e:ae:57:55:ad:09:8c:35:94:a9:ff:7d:83:
5a:57:0e:6b:f4:d3:d5:12:97:5d:a1:dd:19:03:b2:
80:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1B:1C:59:E4:1D:82:9F:8A:0E:7A:4A:D2:97:4F:FB:6D:59:01:11
X509v3 Authority Key Identifier:
keyid:20:26:4D:51:A1:12:D0:BC:22:CE:A7:31:4C:B0:6C:F5:A1:AE:33:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICZNUaES0LwizqcxTLBs9aGuM-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8878d9-4f1c-426b-8a40-658120ae68e1/1/ICZNUaES0LwizqcxTLBs9aGuM-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e8:84:4b:a6:9f:dc:c8:35:5d:78:f2:90:01:b3:d5:50:9c:
1c:a6:03:00:96:1e:df:74:a9:f3:6c:4a:6c:5f:05:65:20:cd:
fc:09:aa:c8:24:20:ed:61:3b:61:d6:7e:5e:d6:f0:4d:39:01:
c6:36:ba:a6:ed:7e:80:26:b7:e5:54:a4:fd:a2:3c:32:85:b8:
67:18:aa:4d:36:a7:e1:32:4b:1f:89:8b:52:34:7c:73:6f:72:
f1:2b:8d:df:ad:c9:f1:5f:8a:68:be:5d:ef:dc:5f:e9:27:87:
ee:d3:e6:46:dd:4d:10:a9:7d:7f:a6:57:67:92:c1:b5:5b:4a:
0a:24:2d:c8:c1:d3:fa:46:38:8b:91:1e:90:c8:53:e6:1e:d7:
c7:90:ea:f5:89:52:72:af:d7:d7:56:a3:95:9b:c2:72:d0:d9:
1f:61:02:fb:79:d5:d2:e1:2e:3a:b1:72:3e:66:28:46:b5:cb:
31:df:7c:c6:8b:cf:a3:51:ab:ab:86:9a:b4:1d:a0:d3:77:a0:
79:fd:04:bd:58:99:55:34:06:48:68:ec:99:85:30:69:b8:c3:
89:be:d9:21:cb:c6:95:4c:2d:a6:3f:93:1e:87:e2:f3:a9:23:
62:52:4e:22:a7:ec:4a:d6:72:d7:ec:fe:ec:42:c9:1c:3c:04:
c1:f6:fb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:43:38 2025 by rpki-client