Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
File: IsX-stJfrE3YuqT3HY3CJoGGoDk.mft (raw, json)
Hash identifier: aUbEbSq8wCIRmiCcFMHLuVn56maNrTR/4RduB9d8qlU=
Subject key identifier: 43:AD:BA:CA:78:9A:1C:3B:39:1F:50:CE:21:20:5C:6F:65:D2:D5:6C
Authority key identifier: 22:C5:FE:B2:D2:5F:AC:4D:D8:BA:A4:F7:1D:8D:C2:26:81:86:A0:39
Certificate issuer: /CN=22c5feb2d25fac4dd8baa4f71d8dc2268186a039
Certificate serial: 0198D8BCF43B97A48BD51D92F7AE35174029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 21:01:58 +0000
Manifest this update: Sat 23 Aug 2025 21:01:58 +0000
Manifest next update: Sun 24 Aug 2025 21:01:58 +0000
Files and hashes: 1: 7CgbMHxuJajLgebxzNfnlB8hYAs.roa (hash: 9Cs5URgUgIByAdH61MOA1mCVhVWDEosP+T03kfLMOlI=)
2: IsX-stJfrE3YuqT3HY3CJoGGoDk.crl (hash: 1f5B66sdlIr7l2Fx4VbchNPkc7i4O5WlgITFx6Slwd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 21:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bc:f4:3b:97:a4:8b:d5:1d:92:f7:ae:35:17:40:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c5feb2d25fac4dd8baa4f71d8dc2268186a039
Validity
Not Before: Aug 23 21:01:58 2025 GMT
Not After : Aug 24 21:01:58 2025 GMT
Subject: CN=43adbaca789a1c3b391f50ce21205c6f65d2d56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:ae:3c:59:49:3d:9a:2a:6f:e0:a3:b3:b6:
59:0f:33:51:79:26:69:2e:75:c7:82:04:48:79:1f:
64:89:48:e0:d4:f5:6f:69:78:b2:16:07:8b:ed:10:
ae:60:eb:d6:ea:3d:c4:32:4d:22:1b:b0:40:7c:6b:
a0:42:c3:83:ae:21:c3:87:7f:10:c8:fe:8a:51:8e:
e1:9b:e9:31:f3:aa:d0:81:7f:7d:93:c2:2f:ce:dc:
a2:fe:c9:94:28:88:81:8e:fe:d9:c2:09:8e:2e:65:
7f:8b:f6:d6:b4:f4:f5:3c:fa:c6:3b:a6:11:72:ab:
d5:0d:f2:15:b8:cb:d7:ab:bc:e3:87:94:71:98:c8:
87:66:59:6a:39:e4:1d:79:c1:54:fe:50:24:f4:5c:
02:30:2c:bb:36:a5:04:ed:0e:64:41:f2:cb:78:dc:
e4:2e:58:01:24:a7:3b:1b:98:7d:0f:52:73:b7:fe:
7d:30:9b:84:1a:10:55:75:85:e4:84:b0:fb:98:c5:
8f:62:64:8e:25:b5:b6:8e:0c:a5:9b:a1:16:8d:db:
eb:40:87:22:39:ca:93:e3:66:a4:a4:c5:53:d4:60:
a4:78:3c:94:a0:a6:05:de:c6:3f:40:c0:7b:70:dd:
76:b5:c5:ee:a9:4b:b5:cd:7d:b7:c0:fd:74:8d:59:
e4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AD:BA:CA:78:9A:1C:3B:39:1F:50:CE:21:20:5C:6F:65:D2:D5:6C
X509v3 Authority Key Identifier:
keyid:22:C5:FE:B2:D2:5F:AC:4D:D8:BA:A4:F7:1D:8D:C2:26:81:86:A0:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsX-stJfrE3YuqT3HY3CJoGGoDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d216ed-9a76-4a93-b6a9-468f498faf1c/1/IsX-stJfrE3YuqT3HY3CJoGGoDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:11:65:ad:47:dd:7f:ac:0d:7b:df:f2:e3:57:a4:3d:55:59:
70:6f:14:5a:30:f5:6d:2a:94:af:26:4a:bc:05:3e:0c:bd:06:
ac:81:b3:47:d0:e4:8f:a5:e7:9c:e5:99:e5:03:33:ee:4c:83:
69:c8:0a:0e:b8:76:87:67:a3:1c:ed:33:11:33:82:6f:2a:a8:
95:0a:cf:27:b0:aa:8e:70:ca:6d:de:39:02:7a:ec:2f:38:92:
01:23:ff:8f:a0:c9:6d:5b:cb:98:59:08:41:5c:ea:de:20:d9:
1b:ea:89:7d:3c:c7:7c:a6:f8:da:36:2c:da:8f:8d:40:7a:fc:
ba:1c:69:69:39:11:07:0e:e3:ac:60:42:49:be:6e:87:be:78:
60:5e:a7:6d:ba:20:8b:c4:5e:e1:27:75:14:8b:b4:44:f7:19:
d9:92:93:27:b7:64:77:1e:68:15:78:0f:86:4d:3f:2a:ae:d2:
06:88:b1:1f:b9:63:47:d1:4f:7d:da:93:4b:62:72:54:5d:83:
45:b0:5f:1d:d1:b8:4c:71:45:5d:42:5b:5a:68:f4:c0:49:36:
15:3e:24:77:51:a0:a3:23:2a:9c:c5:38:84:8e:62:c1:df:b2:
5f:40:03:28:d8:20:85:aa:a4:c4:67:39:3e:04:0d:b9:41:d4:
fb:a7:cc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:13:00 2025 by rpki-client