Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
File: 1IW26difsBA2mXHtiIVyBZhdSRg.mft (raw, json)
Hash identifier: uPddsSLtyPFo60z4dFUaWW1sR1SW09dMjrFM1p0lmwE=
Subject key identifier: 76:0C:59:14:E7:56:AC:AB:83:9D:3D:2B:FF:13:DF:2C:ED:36:4F:F7
Authority key identifier: D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
Certificate issuer: /CN=d485b6e9d89fb010369971ed88857205985d4918
Certificate serial: 0198D698564E49BEF3D5F24E3CDE4F84CEB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 11:02:44 +0000
Manifest this update: Sat 23 Aug 2025 11:02:44 +0000
Manifest next update: Sun 24 Aug 2025 11:02:44 +0000
Files and hashes: 1: 1IW26difsBA2mXHtiIVyBZhdSRg.crl (hash: IpZXSo+iSa8oquBDmHAad5YX/bfaDhGH29JPdKYd4Y0=)
2: kFp1ntirY-_nRj5W9JqqX1ydSnU.roa (hash: NWOTQpr3hkXHB9fkn9UXRHKGkCwc9Gafyc4Z5IuHimc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:56:4e:49:be:f3:d5:f2:4e:3c:de:4f:84:ce:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d485b6e9d89fb010369971ed88857205985d4918
Validity
Not Before: Aug 23 11:02:44 2025 GMT
Not After : Aug 24 11:02:44 2025 GMT
Subject: CN=760c5914e756acab839d3d2bff13df2ced364ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:6d:fe:bc:bb:fb:5f:c7:3f:d6:48:35:28:
fc:f9:c2:d4:0c:2f:6e:a6:28:4a:56:7b:d2:cd:f8:
78:e5:c7:af:83:ee:4d:11:db:4f:e5:1e:4a:86:1b:
8f:87:3f:0c:52:44:c7:2a:b8:03:ca:96:f4:85:ae:
81:bc:5b:2a:bc:b4:5f:96:b3:5b:4f:63:fc:98:15:
a6:ae:30:aa:94:23:44:2c:75:cf:99:6e:6e:5f:b8:
11:14:dd:74:47:35:30:4b:92:90:e0:79:77:35:27:
2f:c7:6d:b3:86:5e:d8:b6:e9:ff:9c:85:bb:1c:bc:
11:43:93:ef:3c:f8:d9:63:11:81:a2:97:e4:0a:c2:
a6:98:36:55:56:2c:b3:2c:48:81:aa:21:93:7e:10:
e3:74:85:b3:0f:fe:0c:4f:2d:e4:ad:af:7d:3b:91:
75:a9:a7:42:3f:f5:a2:4f:6d:28:f0:4e:4b:ea:1d:
9b:e1:93:5a:04:e8:19:de:c1:c7:98:d7:f7:c4:5b:
f1:54:51:65:2e:62:e5:fe:2f:e7:4d:95:9c:bb:8b:
76:e7:3d:87:12:aa:58:d3:d2:62:1c:bc:50:93:d8:
bc:9f:7f:4a:23:d9:c8:6d:cc:10:a6:81:c9:70:c5:
d8:c7:12:9e:2f:56:74:a7:14:08:66:05:4d:29:03:
07:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0C:59:14:E7:56:AC:AB:83:9D:3D:2B:FF:13:DF:2C:ED:36:4F:F7
X509v3 Authority Key Identifier:
keyid:D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ac:1b:d7:a9:aa:52:c8:ed:42:45:21:72:30:9b:06:6d:19:
08:18:5f:1f:ca:df:ae:f9:bf:60:b3:09:50:2b:e9:23:56:0e:
82:ea:3f:94:1e:9b:8f:f0:06:60:82:9c:17:a5:a8:d6:d6:ce:
88:00:0d:b1:7a:dc:e6:dc:53:a8:85:13:35:4b:5d:a8:71:c5:
21:1e:aa:49:aa:7d:f6:b9:ba:5e:51:36:6c:e4:96:ec:e7:e2:
47:8a:5f:80:7c:32:2e:9e:db:bf:e2:51:56:2c:cb:b5:40:d9:
9d:d4:59:2b:21:38:aa:7e:0a:86:3a:12:b8:00:c2:ad:9d:49:
9a:ef:c5:ff:6c:78:f8:23:83:1b:65:a8:37:7a:74:53:36:ac:
2c:2e:f8:8c:1c:28:72:8b:f4:85:2d:db:9d:a7:75:ca:d4:79:
8a:61:7d:fe:a1:dc:c0:b9:8c:f9:9b:c0:cd:71:0e:3d:27:83:
1f:c7:10:1c:72:72:08:5b:77:ba:f9:3b:fc:dc:3e:37:9e:d3:
99:bb:0d:20:34:a3:fa:06:c3:8a:bc:22:ee:9b:d6:44:08:c9:
fe:42:9f:2f:48:39:d7:89:93:8e:b8:00:23:06:07:03:df:7c:
6f:6b:b5:2d:d4:a5:d5:b6:b3:7b:b8:c9:9b:6a:a4:00:44:ec:
2f:15:ba:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:33:19 2025 by rpki-client