Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
File: IxIMamyM8XJufUjjFKFszQXvhgc.mft (raw, json)
Hash identifier: 792X+evelZrsmFhPXXwr8SdKu2XwSevBYvXqp6bCX34=
Subject key identifier: 25:8B:4F:6A:DC:F8:EB:40:E0:ED:1B:5B:0A:EC:EC:51:EC:CB:AF:13
Authority key identifier: 23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
Certificate issuer: /CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Certificate serial: 0198D4047DF30886D3F660C8DDCD8E36A22D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
Manifest number: 164C
Signing time: Fri 22 Aug 2025 23:02:00 +0000
Manifest this update: Fri 22 Aug 2025 23:02:00 +0000
Manifest next update: Sat 23 Aug 2025 23:02:00 +0000
Files and hashes: 1: 3ljJaz1a5cIjZ8YC3COzHNt_p94.roa (hash: bMQghzShphucnVw2AcHoK8ZlibkBQSkRsxgVMSWXPUM=)
2: IxIMamyM8XJufUjjFKFszQXvhgc.crl (hash: xgJXtRvYaTIvqztmkdtsErZ/u/rC8nXm95G3GbzRmog=)
3: PVPdjWfp5158kOXCBG02gGqvS2k.roa (hash: yHL6CrBTx/Lx7UNatKVR0PW+xHw8+FZidWVfHY4s2Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:7d:f3:08:86:d3:f6:60:c8:dd:cd:8e:36:a2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Validity
Not Before: Aug 22 23:02:00 2025 GMT
Not After : Aug 23 23:02:00 2025 GMT
Subject: CN=258b4f6adcf8eb40e0ed1b5b0aecec51eccbaf13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8d:17:3a:37:38:e1:1c:d0:1e:6a:5c:29:0c:
3a:a9:73:c4:7c:39:88:80:40:c0:d2:34:e5:4f:2d:
ed:ce:fd:eb:51:04:4f:52:89:da:82:38:b2:a3:81:
e0:79:f1:ac:03:77:d4:9a:4a:94:9d:14:dd:6c:1c:
c9:7c:60:eb:25:a3:41:9e:da:92:22:07:36:d8:84:
31:9a:fd:ac:1b:08:71:8e:a8:85:f6:70:05:3c:df:
8e:15:92:02:79:49:9f:05:d4:f1:34:60:11:b6:0d:
1f:3d:fa:18:1a:bc:30:be:2a:17:20:d8:b0:27:c7:
18:36:65:b3:b0:a0:03:8d:85:49:03:54:6b:53:d4:
a5:54:cc:81:16:0f:eb:4e:dd:0b:59:62:2d:72:64:
69:1c:ff:fa:e4:fc:b9:73:b4:12:7e:ec:08:86:7e:
a5:7c:b7:53:86:85:ea:32:ae:76:e0:d0:10:f4:4b:
c9:ad:b4:82:52:f9:a2:5f:12:ea:38:ac:a4:bc:a5:
75:5e:3a:c3:4c:15:0e:84:74:83:e3:3e:20:9b:76:
0d:9e:40:2b:71:86:d6:cd:11:cf:d7:8c:47:90:13:
74:a4:8f:d7:c7:fb:cf:43:3c:eb:db:91:29:4a:16:
f7:2e:98:a9:ef:95:47:45:72:b6:e6:34:f8:bf:bb:
c1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8B:4F:6A:DC:F8:EB:40:E0:ED:1B:5B:0A:EC:EC:51:EC:CB:AF:13
X509v3 Authority Key Identifier:
keyid:23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:96:ae:e3:db:38:ab:60:08:ed:15:73:23:35:3d:b9:94:87:
b1:57:7a:07:a4:a4:90:c4:75:1e:49:23:dd:08:90:2c:45:fa:
4a:f5:48:a4:22:93:cd:a5:58:c3:14:3c:8b:b4:ab:1d:38:43:
17:66:95:54:6c:ef:5e:c3:f6:74:08:8f:67:92:0b:83:7e:7f:
7c:54:1c:2a:17:b8:64:a1:c3:d8:9f:03:0e:68:e4:48:07:b0:
4a:b5:33:95:3e:9a:80:e6:70:c1:ff:ec:b3:1f:e9:61:41:5e:
34:8b:e4:a2:f4:ab:7a:ae:2f:fc:7a:70:a7:92:c3:d0:41:6c:
ef:92:8c:d9:b0:61:a3:36:ad:4b:b0:c1:c7:1f:f0:57:80:cd:
e6:db:38:b8:e6:6e:ea:7e:56:c3:ab:29:5c:b2:2f:1e:73:73:
e0:19:cc:77:dd:b5:de:80:25:43:de:6b:92:f6:47:56:3b:6d:
c6:7c:26:22:ad:5d:0e:59:1d:c5:d0:53:d5:48:b5:5c:1b:06:
e8:80:ce:48:14:6a:d7:7c:a7:9b:14:8c:b6:61:36:a5:ad:3a:
c9:c7:d5:48:7f:5a:14:02:5f:f5:7f:bd:d8:55:67:27:dd:01:
87:67:d3:e0:b9:31:46:9d:d8:b1:be:09:5c:38:46:7e:81:ed:
9b:1c:51:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:13 2025 by rpki-client