Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
File: Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft (raw, json)
Hash identifier: AEHHhDeirmTvcYSEIewr7OjQRBaIlsDyJBAFybAywbQ=
Subject key identifier: 89:55:66:C4:55:01:FD:D8:32:42:59:01:62:5A:21:29:46:40:83:C0
Authority key identifier: 21:AA:28:DE:21:BC:91:F3:9D:BF:2D:01:2F:D5:52:D2:2D:0F:5A:AA
Certificate issuer: /CN=21aa28de21bc91f39dbf2d012fd552d22d0f5aaa
Certificate serial: 0198D54E3452524ADBB05B72D5C57F9780DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 05:02:08 +0000
Manifest this update: Sat 23 Aug 2025 05:02:08 +0000
Manifest next update: Sun 24 Aug 2025 05:02:08 +0000
Files and hashes: 1: Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl (hash: cgCtObQPP9ReLhS97qg7pd2eQ4tZ8xjYgoY8IDhkzkU=)
2: ZUnY6DcgMFOkn5YPuY63h16XVew.roa (hash: j75VTgwm6ax4o8jG9UYWYEtlaoF5sYfNI7iKEcRNxJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:34:52:52:4a:db:b0:5b:72:d5:c5:7f:97:80:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21aa28de21bc91f39dbf2d012fd552d22d0f5aaa
Validity
Not Before: Aug 23 05:02:08 2025 GMT
Not After : Aug 24 05:02:08 2025 GMT
Subject: CN=895566c45501fdd832425901625a2129464083c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:57:6a:07:0d:c9:e9:88:63:e2:be:0f:2f:d7:
c2:1c:6b:68:38:50:4e:61:8a:8d:2c:27:51:6f:83:
75:71:2c:17:74:b1:57:91:b8:a2:69:db:92:4e:fc:
e4:cd:93:9e:3b:f3:06:f5:d4:ca:5e:8f:73:84:81:
3b:94:07:80:f2:49:d9:d0:ac:a1:70:4f:87:b0:57:
8d:5a:b9:fa:52:02:49:04:a6:c4:af:fa:ab:9e:dd:
bb:30:18:3f:5b:3c:f6:7c:29:93:5c:a1:e6:e0:47:
52:d0:ed:00:22:2f:ba:85:63:04:d1:b9:09:94:c6:
c0:49:62:cf:5c:0c:c0:3c:c2:7f:81:26:c2:d4:4c:
08:49:4a:0f:49:fd:2d:d4:c3:fb:6b:19:f4:74:6d:
5e:df:ba:c2:b5:9b:7f:8f:ff:07:24:c6:2e:d7:8b:
c4:4e:10:4c:14:41:51:82:69:ab:bf:39:16:5d:95:
15:a4:1b:f3:69:32:01:4e:ac:5d:93:26:ce:d3:d6:
fc:52:8e:d8:86:bc:3c:0d:5d:91:11:bf:af:09:05:
41:47:57:ac:45:8e:37:ea:fc:86:ed:ef:92:39:41:
f8:82:65:46:3b:6c:9b:c6:b5:7d:49:50:33:a1:e9:
f9:5b:74:02:14:db:44:91:e5:c7:1c:0e:d3:79:aa:
4a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:55:66:C4:55:01:FD:D8:32:42:59:01:62:5A:21:29:46:40:83:C0
X509v3 Authority Key Identifier:
keyid:21:AA:28:DE:21:BC:91:F3:9D:BF:2D:01:2F:D5:52:D2:2D:0F:5A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/63a5bb-24d0-4db9-b510-f9973c576b03/1/Iaoo3iG8kfOdvy0BL9VS0i0PWqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:5c:cf:8d:2d:68:fc:92:67:c3:99:d3:64:ec:5f:47:08:8e:
9f:2d:a9:e5:61:7a:58:23:73:6d:d2:8f:de:87:d5:7d:f8:36:
d4:97:e8:14:b4:ce:74:14:29:39:82:cb:61:32:87:8d:98:c7:
57:0b:48:22:f5:fe:eb:89:f6:14:c3:de:05:74:a4:28:b7:e8:
cd:2c:2b:8d:e7:c0:08:2a:8c:a4:7b:a0:4c:d3:fa:71:66:92:
d2:26:66:dd:dc:1c:63:ca:5c:f6:85:4a:66:31:1a:4a:ba:ab:
ad:df:dd:71:95:55:71:df:7b:66:98:07:f7:3f:18:36:4b:3e:
25:32:43:7d:9e:3d:5d:61:dd:cc:87:30:33:06:54:55:c5:7d:
7d:d4:b2:0f:0b:d5:d6:a0:d7:fb:1b:90:64:9d:2f:7c:b1:c7:
f0:2a:f1:5d:6a:0c:86:d6:97:ee:2c:a5:5d:8d:52:31:a6:9f:
de:c8:f7:5a:e7:30:2b:28:fa:7b:de:5f:d1:de:db:0a:20:9e:
94:b8:e6:28:67:1c:97:58:9b:25:be:9e:9a:0a:bf:a8:c9:e8:
6b:58:2a:f0:df:5b:11:f6:be:a9:8c:f9:eb:5e:48:73:8f:5c:
1b:b6:fb:1d:69:ce:4b:69:95:26:20:94:aa:ff:b5:8d:b1:f4:
b9:3e:98:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:28 2025 by rpki-client