
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
File: iib0dtYIYlrR_gblK5dKn2bwFBo.mft (raw, json)
Hash identifier: 1HpBlk0ai14QzQ6hJsaRhFm6KNEVewQ41FDhK1z+L6Y=
Subject key identifier: 5C:65:66:A9:59:1D:AB:AA:82:21:14:AE:0C:34:6F:9B:D2:D2:90:A8
Authority key identifier: 8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
Certificate issuer: /CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Certificate serial: 0198D4A7ED1D9F596D5FC25373646C9D4785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 02:00:31 +0000
Manifest this update: Sat 23 Aug 2025 02:00:31 +0000
Manifest next update: Sun 24 Aug 2025 02:00:31 +0000
Files and hashes: 1: VGVyrg_KWe6qJVf2EFW5rg282l8.roa (hash: no1Xp/fKJZHQHLgUjaAU6HFgcxae88YxDTT3wdaVfTw=)
2: iib0dtYIYlrR_gblK5dKn2bwFBo.crl (hash: jPLJud81KxkYXM2z9qyZAAitfALvZahz46OLe2kFYJQ=)
3: jmjQM-Af7YixW0lhj7IQRUe7D0c.roa (hash: Tb54ESX/F3Guxq8pdf9XF/gmXcXHx+T4/bKA3b9RF5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:ed:1d:9f:59:6d:5f:c2:53:73:64:6c:9d:47:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a26f476d608625ad1fe06e52b974a9f66f0141a
Validity
Not Before: Aug 23 02:00:31 2025 GMT
Not After : Aug 24 02:00:31 2025 GMT
Subject: CN=5c6566a9591dabaa822114ae0c346f9bd2d290a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:db:b2:db:c5:e1:7d:81:2c:4f:2c:f4:f6:e5:
c9:d8:4a:76:46:45:37:15:92:08:a3:80:56:70:f6:
0d:2f:53:f5:ee:af:46:ad:54:21:9b:8a:3f:93:b4:
be:8a:a4:a6:ef:80:fe:67:ed:7d:17:d7:33:34:dd:
96:6b:72:d5:c2:77:ae:fe:5f:2a:d0:8c:bd:00:96:
97:b9:22:6d:01:5e:d7:f9:e3:8b:f9:c5:5f:da:ae:
86:ad:9a:53:59:b0:63:78:48:94:48:d7:45:df:dc:
8d:2d:e5:5e:b9:5f:8d:a1:c5:64:37:5e:ab:2c:d6:
d9:4e:45:60:6f:a4:5a:78:2c:75:e7:dc:fd:72:e9:
f2:c4:18:13:15:28:50:aa:35:53:89:6f:8b:6f:f6:
7f:62:15:3f:e3:ab:67:96:fb:73:33:22:64:c5:f7:
58:74:f0:01:1d:40:23:55:84:e4:11:f9:aa:5d:41:
67:4e:4c:4f:40:84:c1:ca:f7:df:72:bc:49:50:bc:
24:29:ff:08:4d:0f:7b:a4:dc:bf:d2:04:90:bb:15:
f9:70:f9:20:d9:be:ae:e8:10:15:dc:99:6d:6f:05:
ee:76:01:61:c7:ae:27:b2:06:ba:30:6b:55:62:78:
cd:9e:ef:48:1a:0a:f9:4a:85:3d:84:c3:4d:30:4a:
95:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:65:66:A9:59:1D:AB:AA:82:21:14:AE:0C:34:6F:9B:D2:D2:90:A8
X509v3 Authority Key Identifier:
keyid:8A:26:F4:76:D6:08:62:5A:D1:FE:06:E5:2B:97:4A:9F:66:F0:14:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iib0dtYIYlrR_gblK5dKn2bwFBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/a66f2d-ca2f-4bca-b27b-d846d106b5f7/1/iib0dtYIYlrR_gblK5dKn2bwFBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:4a:04:98:1a:01:5b:a9:7b:fc:25:ee:a0:fb:f8:fb:aa:5f:
b1:20:e2:f2:8d:a7:e3:81:40:d4:06:2f:67:ac:82:f0:43:a0:
1c:a7:f3:59:53:a1:ce:f5:4e:c3:ad:34:74:44:13:86:4b:5c:
4f:ca:a8:3e:ea:ba:cd:d2:1f:61:05:56:b5:78:cc:36:30:62:
3d:c0:23:4e:a0:fe:4c:c8:3f:ab:4a:fc:d7:af:85:65:0c:32:
96:3a:43:0e:ea:e9:64:e8:fe:cc:54:4f:08:77:6e:f6:07:d6:
c2:a4:12:2e:8f:ad:07:05:31:83:79:97:87:11:d5:b8:82:a4:
cd:d2:3c:9d:87:3d:e8:e8:87:f2:cf:13:0f:3a:8e:ed:d6:f1:
4f:1c:a7:0e:eb:0e:d3:71:6e:8a:20:d3:8e:35:80:7d:e2:54:
1a:3d:99:f6:f0:d6:69:be:73:c1:ad:62:52:82:a5:78:f6:f5:
df:4e:c0:8a:cc:cb:1f:2a:17:8c:48:51:09:c1:b4:b3:d6:e6:
b3:39:71:f5:ea:e9:a6:60:7e:84:03:1a:e6:4d:34:18:ab:30:
18:8e:df:64:48:dd:cc:d2:df:a4:a1:0f:93:eb:c1:7e:cc:8b:
c4:c8:97:03:39:5f:b1:fa:7a:50:2d:bf:bc:32:30:6d:e2:5b:
d8:32:6c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:29 2025 by rpki-client