Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
File: ihZhi3H_yA4cP0HtDfyJq16WP9I.mft (raw, json)
Hash identifier: UvvHAKyg9uF26OHuvbaT3GEPBc8ND2F4bX+FMDxxj+E=
Subject key identifier: 8D:62:E2:A5:34:B4:A3:63:E8:45:45:CE:03:85:D0:CC:A6:6B:CD:F7
Authority key identifier: 8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
Certificate issuer: /CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Certificate serial: 0198D7737DAAF12B41203A7D00593936957F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 15:02:06 +0000
Manifest this update: Sat 23 Aug 2025 15:02:06 +0000
Manifest next update: Sun 24 Aug 2025 15:02:06 +0000
Files and hashes: 1: ExfUqNEW3Lyq9Nl7Jq22WcfJ1rw.roa (hash: 6SjZfPEMGV4QZNr6XzSlmm+VNkfjjPfYSSMSKKIpL5E=)
2: ihZhi3H_yA4cP0HtDfyJq16WP9I.crl (hash: BpdkXJbZ4GIPstmxVpq2R+D6engSbdrJvDbSLedMatQ=)
3: vuckuXbmedLIJWITtJ1gJzQY8X0.roa (hash: BujWwxtiu31OcVkERDwp6qXjCF/qZpedTzNgbY+R4ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:7d:aa:f1:2b:41:20:3a:7d:00:59:39:36:95:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a16618b71ffc80e1c3f41ed0dfc89ab5e963fd2
Validity
Not Before: Aug 23 15:02:06 2025 GMT
Not After : Aug 24 15:02:06 2025 GMT
Subject: CN=8d62e2a534b4a363e84545ce0385d0cca66bcdf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:06:43:23:d3:c2:0b:f6:99:1f:ba:e9:89:c3:
f7:fc:fc:b2:3d:16:b6:50:7a:b6:5b:86:db:4b:8f:
f4:41:ad:eb:d2:72:8a:67:38:96:4d:10:97:13:82:
71:e0:f0:70:75:1a:d1:6e:3e:2c:93:e7:1c:d1:fd:
42:e6:31:cf:96:a2:38:e3:45:cd:bb:34:ad:56:fa:
60:a5:af:32:cd:b2:85:75:80:7c:7a:ec:22:30:b3:
92:d2:78:88:63:cc:92:88:dd:fc:53:fe:f7:da:a4:
3c:ab:e4:ce:0d:90:e2:91:ff:88:ec:7d:c6:92:04:
b2:48:32:02:11:20:6f:58:82:1d:08:a1:e3:a6:49:
08:06:31:ce:88:cf:e7:0d:2e:fc:37:b9:5f:db:b8:
ed:4d:91:83:9e:e9:f4:2c:ec:60:46:b9:cb:12:cb:
5d:a3:0d:22:e3:7f:6a:3d:1a:ba:b1:f9:49:2d:8d:
a1:0d:1d:f7:ce:c1:10:77:87:64:51:33:ed:fc:af:
f7:03:b7:bc:8f:a0:ac:d2:f0:68:98:22:b9:8a:e4:
af:40:2c:6a:fb:2c:1f:da:fb:7c:27:e7:dd:a0:8b:
e9:4f:57:e7:22:9c:67:d6:de:66:41:d4:d8:08:66:
f6:8c:ec:f2:f8:2d:2b:32:e0:64:c3:92:f4:2a:c5:
7b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:62:E2:A5:34:B4:A3:63:E8:45:45:CE:03:85:D0:CC:A6:6B:CD:F7
X509v3 Authority Key Identifier:
keyid:8A:16:61:8B:71:FF:C8:0E:1C:3F:41:ED:0D:FC:89:AB:5E:96:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihZhi3H_yA4cP0HtDfyJq16WP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/55cf77-6394-4812-9fb5-291aaedd58cc/1/ihZhi3H_yA4cP0HtDfyJq16WP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ba:ab:53:8a:50:9c:69:4a:38:0c:60:56:f7:59:64:fe:a0:
5c:cf:75:b7:63:29:65:c9:90:26:3d:2e:41:35:15:f0:56:c9:
85:4f:c8:b4:38:ad:e0:fb:70:f4:99:42:7d:9b:c6:eb:36:76:
74:92:a5:7b:01:7c:3d:ec:a8:aa:39:fc:2c:97:d5:8c:cd:29:
2a:d4:36:20:de:a0:c1:93:4d:51:97:07:df:23:f6:b0:d3:05:
73:20:ed:67:f7:ed:73:a8:26:44:01:7e:9c:4d:3a:bc:3e:38:
b5:cd:7e:58:67:21:96:58:3c:8b:63:1e:40:e8:14:21:8b:e6:
47:50:09:dd:a4:f7:71:64:4b:cf:fa:7e:04:92:08:7c:44:0f:
7a:05:c2:8d:bc:78:ac:b0:e8:db:9f:49:a3:fe:12:2e:72:28:
02:d6:56:29:9b:4e:9c:22:cf:af:7d:9a:98:8e:9c:24:17:00:
d2:68:33:6d:9f:e4:f2:6e:53:7e:7c:01:55:ca:02:3e:98:51:
1c:8c:e1:cf:9c:be:9d:0d:4b:36:23:c1:22:cf:8f:c3:d4:46:
4b:19:12:da:e6:b0:e7:36:14:31:81:34:55:d0:b9:00:b4:56:
a9:68:c0:de:3d:3e:43:4f:4f:76:b5:b5:96:a3:af:af:45:23:
5f:71:7f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:27:20 2025 by rpki-client