Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft
File: I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft (raw, json)
Hash identifier: 323H1FG2ZqqVbIZ7biq03Netng9iI48viZcO38r7Q+0=
Subject key identifier: 73:1D:31:7E:A3:B0:31:33:BD:6F:7D:87:34:53:C3:8A:8A:74:88:43
Authority key identifier: 23:A4:24:97:97:0D:65:54:1D:DB:15:96:58:E3:B0:A6:E2:F5:16:B7
Certificate issuer: /CN=23a42497970d65541ddb159658e3b0a6e2f516b7
Certificate serial: 0198D4E010C33EDAC34D38D98BDA8F99B9D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:01:50 +0000
Manifest this update: Sat 23 Aug 2025 03:01:50 +0000
Manifest next update: Sun 24 Aug 2025 03:01:50 +0000
Files and hashes: 1: I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl (hash: UiS8HqS2oNHb+ukyJkk75Ez2F1FxXbU8iisGmG9ZKLM=)
2: MTT1Ia9LOAm3voF-tKlGjmgFAPI.roa (hash: 4bP/TTzv7AEu1D5qKcmPGabc7tnqcf7nz+XM5tO/PTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:10:c3:3e:da:c3:4d:38:d9:8b:da:8f:99:b9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a42497970d65541ddb159658e3b0a6e2f516b7
Validity
Not Before: Aug 23 03:01:50 2025 GMT
Not After : Aug 24 03:01:50 2025 GMT
Subject: CN=731d317ea3b03133bd6f7d873453c38a8a748843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:4a:95:e0:2c:e3:94:e8:be:8f:cd:82:cd:
8c:41:21:25:43:29:c0:24:b5:8e:1f:6e:05:ba:7d:
53:9c:89:40:69:c6:ae:61:9e:b5:8d:7a:29:e7:76:
cd:87:ed:b4:de:9e:8b:8c:4f:e1:23:05:58:59:12:
0b:e3:a1:6c:9c:a8:27:fc:a3:67:8f:94:98:fe:eb:
13:3d:62:91:53:31:45:f5:2c:12:88:6c:13:e1:15:
83:ba:66:47:f3:47:d3:cc:7d:88:f9:be:a4:85:57:
33:f2:82:89:c2:93:63:7d:4b:95:11:1f:2b:e2:19:
db:ec:40:e7:08:38:a2:7a:8a:87:d2:79:2a:7c:28:
48:85:91:ca:ab:35:d4:8d:cc:e8:17:80:d7:88:3f:
6b:3e:ac:11:1e:54:f0:b2:3b:31:42:67:f8:0a:46:
f9:ea:8e:85:fa:1f:78:f3:50:9d:fb:e4:f7:d2:37:
ff:ed:00:43:a5:e7:ff:9e:0d:02:bd:7b:31:a2:b6:
0f:8f:eb:e7:1a:f7:ab:71:31:e4:d2:59:2c:3b:d0:
ba:d1:bb:6b:58:d7:f7:e0:b4:36:d4:59:e7:16:82:
78:87:55:db:9b:f2:1b:05:66:a5:34:3c:9f:1b:5f:
ce:97:03:7a:2d:f5:bd:58:47:6e:38:84:3d:07:3e:
eb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1D:31:7E:A3:B0:31:33:BD:6F:7D:87:34:53:C3:8A:8A:74:88:43
X509v3 Authority Key Identifier:
keyid:23:A4:24:97:97:0D:65:54:1D:DB:15:96:58:E3:B0:A6:E2:F5:16:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d9:87:e4:44:76:d2:ac:5c:e8:de:94:75:ce:11:b2:45:77:
eb:84:30:c4:7e:56:a2:56:ec:8f:20:0e:2b:52:ce:52:39:54:
6c:14:33:79:f4:20:d4:3b:75:bb:4f:42:0f:d3:fe:da:57:b2:
1b:e8:0e:59:46:41:2c:85:27:1f:dd:9a:95:3f:79:ce:18:53:
9e:4f:5f:b2:c6:85:f6:7d:51:29:45:d2:ae:ec:c2:18:ec:cd:
4b:bd:b2:30:37:7e:f3:b0:af:25:32:fe:ac:7a:88:cb:15:b7:
57:84:28:9c:a5:04:64:4d:28:80:c8:16:0c:83:53:b6:b0:fb:
9e:66:0e:db:ba:2f:e1:49:91:2d:7d:71:4f:a6:90:3c:ca:71:
b0:8d:25:21:f8:68:19:17:9e:c7:d8:bc:b8:cc:63:c2:4f:ec:
75:68:d4:f7:7b:8c:14:dd:ab:dc:bd:cb:61:1c:7c:14:57:0e:
7f:f0:a5:6d:35:72:b4:be:23:13:a1:98:54:d8:ee:b8:84:61:
74:be:0f:44:34:fa:b0:ff:3c:25:c3:89:33:eb:15:eb:18:a4:
2f:9a:99:73:02:5d:da:e3:b2:49:14:a5:37:48:6a:66:2c:85:
71:05:fd:80:e6:7b:64:dd:34:32:69:e0:6f:d5:20:c4:3d:18:
28:05:d7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:46 2025 by rpki-client