Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
File: i96i1KsTgPCjt_59T6eCjhyUNVg.mft (raw, json)
Hash identifier: o6X8ScLAG4jxY2Uf14EywjnOZxZnIMb5em1/QPXQGH0=
Subject key identifier: 9A:DE:15:BC:2A:D7:69:FE:85:F1:D6:DB:2B:61:C6:68:76:11:49:9D
Authority key identifier: 8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
Certificate issuer: /CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Certificate serial: 0198D5BC580BFB295D325F1E3C0B5D9ADDD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 07:02:26 +0000
Manifest this update: Sat 23 Aug 2025 07:02:26 +0000
Manifest next update: Sun 24 Aug 2025 07:02:26 +0000
Files and hashes: 1: CXV5h4NnxextID8ps-zs1B6iIxg.roa (hash: H0fWCwenw+LaQh1zQTvHX9xYl9ZHHPd/qzueTxfRIcY=)
2: i96i1KsTgPCjt_59T6eCjhyUNVg.crl (hash: NIrgRLrpp42RrJAkEyyulHche8s/aqUYvGjxsSHoujw=)
3: uXuzZdEmcXhnurqd_jWF8YOUHrw.roa (hash: 0tKKSAqCxTZYYBM2R7eXZ3g3GCiHz3+8Vn0Oldh70rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:58:0b:fb:29:5d:32:5f:1e:3c:0b:5d:9a:dd:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Validity
Not Before: Aug 23 07:02:26 2025 GMT
Not After : Aug 24 07:02:26 2025 GMT
Subject: CN=9ade15bc2ad769fe85f1d6db2b61c6687611499d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9e:16:6d:f3:f7:84:94:aa:89:d4:92:e3:27:
03:39:b7:e3:b7:dc:ea:fe:23:e1:23:5c:0a:03:9e:
60:19:8a:ae:a1:30:10:8d:8b:08:9b:75:57:31:92:
34:4f:58:fc:07:88:65:13:93:6a:6b:30:3e:0f:af:
36:1b:c6:29:a8:28:9a:cd:7b:b6:65:87:eb:e1:a8:
92:4c:98:95:95:df:de:f3:f1:70:2e:5e:01:10:8e:
0f:f6:6c:55:71:a0:69:e8:de:79:8a:34:d4:04:ae:
09:ae:dc:b2:26:7d:1d:7d:15:67:0b:12:8e:09:ab:
3b:f4:94:0e:a6:d7:6d:44:0f:91:0b:a5:fc:68:33:
3d:68:73:d1:02:00:9d:61:85:4d:f6:11:c8:77:19:
bf:dc:b1:48:a7:78:fc:b3:c5:c3:f9:a4:16:2f:4b:
b4:51:fb:6a:07:fd:f1:25:09:45:d8:6e:fd:d6:16:
ba:c2:00:04:14:38:a8:87:3b:f5:81:ac:86:be:e4:
df:a9:c7:c8:69:20:db:0d:16:3b:a9:8b:bb:83:ee:
49:90:7a:41:86:20:a5:2d:1f:f8:87:b0:44:9d:98:
4b:51:1e:b9:76:15:3b:9d:fc:ad:11:95:9d:4a:5b:
a4:a3:0b:88:2a:05:56:3e:3f:bc:e7:1a:b6:45:02:
48:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DE:15:BC:2A:D7:69:FE:85:F1:D6:DB:2B:61:C6:68:76:11:49:9D
X509v3 Authority Key Identifier:
keyid:8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f9:f9:cb:85:4b:2b:81:96:aa:09:0d:7c:c9:11:8f:47:b3:
43:c7:f1:d1:db:4e:38:e1:da:f9:8e:9e:87:df:a9:d3:42:25:
3c:ca:f6:88:aa:4c:e4:e9:d5:1d:74:2e:eb:61:60:48:eb:24:
f3:89:d0:55:a5:d3:a4:86:86:ab:c3:99:7d:d9:ec:07:19:19:
3b:ae:3e:b6:d6:c2:32:3b:5a:e5:92:0f:bb:98:92:56:7c:cf:
4b:a0:37:81:58:05:65:89:22:32:10:00:59:7a:f8:d7:1e:68:
5e:ef:eb:04:ba:e0:93:52:40:89:3b:9a:9d:5f:24:eb:52:00:
6b:72:e7:44:b2:fa:8d:b4:b2:6d:b7:ed:61:10:19:9b:8a:6c:
24:a4:0d:5b:85:62:aa:85:95:f4:b8:84:e5:53:38:54:fd:a5:
5b:9d:1a:01:a3:26:23:0e:41:d7:98:ca:24:16:11:9e:2c:e3:
2b:3f:66:55:23:7b:94:cb:96:17:a8:05:1c:05:a0:6d:76:ee:
5f:a6:51:85:e8:33:e0:cb:3e:f7:d4:89:dd:70:01:df:30:eb:
55:31:91:55:90:38:a2:b0:9f:2e:1c:a1:00:cb:22:f6:50:77:
98:b1:b4:f0:6e:80:19:26:18:5a:0f:10:c3:69:65:9c:ae:36:
39:30:24:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:15 2025 by rpki-client