Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
File: MZIbb_GsRJuj5_iSzwgy0c631GQ.mft (raw, json)
Hash identifier: xflTIfglKV02NmPmQgKlAV9VX513XGJrjy9S1RqW2Qw=
Subject key identifier: 98:8A:FB:A4:8F:A2:97:DF:E7:38:C0:9D:A2:D0:BC:1E:74:D2:4B:E2
Authority key identifier: 31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
Certificate issuer: /CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
Certificate serial: 0198D58372C11EC9B3E93B450BEFCB8B4AEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 06:00:18 +0000
Manifest this update: Sat 23 Aug 2025 06:00:18 +0000
Manifest next update: Sun 24 Aug 2025 06:00:18 +0000
Files and hashes: 1: MZIbb_GsRJuj5_iSzwgy0c631GQ.crl (hash: up1kcpbutkewu0n5MJhPEXNkEpgaXqyB7Qcjn10WkZo=)
2: XByggxBGqV43CvyUdzIIt6a45i0.roa (hash: +ahxNaqpYRIqcavaBqUNzPyEswHxojATT5doqQzic0g=)
3: jq2ROJQEklFg1qQcuXVZSg9rwTs.roa (hash: Kgf0TYs59UZnAuan2m+ClrKpKvyb0NT02OMtNpm3Mcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:72:c1:1e:c9:b3:e9:3b:45:0b:ef:cb:8b:4a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
Validity
Not Before: Aug 23 06:00:18 2025 GMT
Not After : Aug 24 06:00:18 2025 GMT
Subject: CN=988afba48fa297dfe738c09da2d0bc1e74d24be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:e6:23:b9:24:3a:e4:ab:3a:19:f5:32:12:
72:0f:6e:f9:36:d8:a9:af:8c:89:cd:09:0a:08:6c:
8d:1d:b1:cb:c5:76:1c:8b:5d:27:10:db:b1:20:45:
17:5d:a1:33:69:48:94:0a:3f:03:a3:a3:61:03:0c:
1c:b7:60:2d:f0:fb:29:cb:f9:fd:36:af:2e:88:59:
37:75:a3:fc:89:df:84:40:96:ca:9b:64:6c:a6:61:
f3:29:d0:d2:dc:12:04:69:00:83:6d:c0:dd:3a:56:
6e:28:5f:b4:a8:24:af:a7:3c:eb:e4:14:3e:b5:31:
43:c8:02:e6:e0:d1:37:b8:55:4d:6a:8f:8a:b3:a0:
06:93:94:84:43:00:b3:76:b0:1a:19:9d:f6:9a:2c:
1f:e0:ef:1b:3a:c8:8a:73:d8:7c:9c:c0:43:7c:97:
6c:16:0b:c3:8c:7b:85:1a:87:30:db:91:f9:f0:55:
f3:ce:64:7c:82:73:b4:97:ae:3d:9b:31:08:52:2d:
9b:ff:69:19:ec:21:8c:6a:88:8f:7e:34:14:0c:28:
03:ec:4c:6f:65:06:d7:3a:54:fa:ed:17:4a:b1:dd:
e1:34:20:6b:03:e7:6b:ed:56:86:c4:92:9f:b2:f0:
07:ae:72:fa:3c:72:a1:a0:41:ad:90:b5:09:6a:f5:
a1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8A:FB:A4:8F:A2:97:DF:E7:38:C0:9D:A2:D0:BC:1E:74:D2:4B:E2
X509v3 Authority Key Identifier:
keyid:31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:be:eb:98:a0:e5:b9:a5:eb:ac:2f:8f:93:ea:17:6c:f4:dc:
31:86:84:de:39:0a:23:9f:e7:3e:0a:87:a1:c9:42:ab:85:79:
13:0c:a3:7a:dc:2d:ca:95:c5:63:dc:08:1f:9c:1d:1a:59:47:
61:f2:1a:89:00:97:42:e6:d2:95:9b:e5:61:4c:05:75:18:4a:
60:d9:3f:0d:30:ea:87:2a:36:98:ee:2d:01:6e:c2:82:17:59:
9a:32:67:16:b9:50:d7:e1:e2:da:6e:89:b6:9b:1e:e0:c3:28:
02:a5:50:c6:62:40:9e:0b:3e:b4:47:a0:49:2f:0a:93:42:7c:
9b:40:c8:ff:19:84:c4:b5:c6:2c:8d:cf:3d:fc:62:11:59:3b:
7e:ee:36:c4:e4:83:c9:8f:0c:b2:d4:3e:7e:56:6e:2e:13:92:
67:5f:c5:1c:01:fc:44:93:f2:1d:8f:28:7c:a7:25:ce:e1:bf:
15:f2:54:d6:1a:2c:1d:89:65:9b:19:b0:72:02:ad:64:76:5b:
a0:4d:30:ef:a4:d7:62:a2:d9:a1:56:1a:69:da:85:d9:af:78:
63:f5:23:c9:0c:fe:18:63:6a:41:37:37:c2:fa:09:65:6a:47:
8c:dd:70:b8:e8:9b:0e:1e:a0:4b:e2:f8:b0:72:c3:4e:bb:c0:
20:4d:69:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:18:21 2025 by rpki-client