Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
File: i0LHUqmwmDEos9KV5F6hazPuffk.mft (raw, json)
Hash identifier: 7X1aeLruTSs1pZTF6sFX6RJvKFE9LuiftoDz8AKfxxA=
Subject key identifier: 7E:10:EA:FF:E5:61:01:4F:DF:8D:05:27:D0:3B:8F:FB:31:CF:64:35
Authority key identifier: 8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9
Certificate issuer: /CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9
Certificate serial: 0198D4A789144CEF05D69AEEB0E005EF0EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 02:00:06 +0000
Manifest this update: Sat 23 Aug 2025 02:00:06 +0000
Manifest next update: Sun 24 Aug 2025 02:00:06 +0000
Files and hashes: 1: deCTZwf8Lo4tPBt2V0GwD8QTdjQ.roa (hash: FyKYzrCJB3LXbVhWQRcS/ZI/wI5zOqLIDpvmKLMGaw0=)
2: i0LHUqmwmDEos9KV5F6hazPuffk.crl (hash: Nz5q6RXYlVLz5SkdgRWssLTRL3CEXtwxKpeZc6lcYuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:89:14:4c:ef:05:d6:9a:ee:b0:e0:05:ef:0e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b42c752a9b0983128b3d295e45ea16b33ee7df9
Validity
Not Before: Aug 23 02:00:06 2025 GMT
Not After : Aug 24 02:00:06 2025 GMT
Subject: CN=7e10eaffe561014fdf8d0527d03b8ffb31cf6435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:94:8c:03:3a:d5:7c:4b:7c:9b:dc:33:9d:fc:
8d:5d:c4:80:34:71:ea:24:fb:2b:32:23:2c:a2:b0:
6d:bd:0a:95:84:ec:56:c5:d1:29:be:91:27:1b:85:
25:c5:f1:eb:01:de:2b:9b:18:54:b3:64:5c:98:28:
dd:fe:5f:35:e6:f3:18:40:03:20:40:05:42:73:72:
ba:3f:54:ab:db:64:a7:8a:16:32:c3:f0:ea:f7:6c:
48:6e:58:ff:8a:b1:fe:1a:4c:d4:19:f9:d2:8f:64:
38:8e:f7:85:98:02:1b:02:d1:bd:8a:da:35:12:ba:
88:b7:61:8f:8c:ae:4a:c0:6b:20:f3:04:df:44:32:
68:a2:43:7c:1f:45:7d:ca:29:8f:22:30:a6:7a:56:
21:d9:dc:ea:2c:9e:13:9d:66:06:7f:60:5c:88:2d:
47:4a:07:d6:c7:d4:ab:1a:af:d6:42:e7:09:7c:46:
07:b8:37:02:1c:af:5e:79:89:40:78:62:66:1d:40:
91:25:2e:5c:9f:6a:fd:7a:45:7e:76:3c:06:03:c2:
46:16:01:c6:17:65:5f:b2:01:0d:92:72:50:6e:90:
45:2d:11:41:5b:27:39:e9:c5:be:c1:1a:5b:e4:52:
a7:d1:b5:96:27:22:1b:66:62:67:35:49:ae:0a:f3:
54:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:10:EA:FF:E5:61:01:4F:DF:8D:05:27:D0:3B:8F:FB:31:CF:64:35
X509v3 Authority Key Identifier:
keyid:8B:42:C7:52:A9:B0:98:31:28:B3:D2:95:E4:5E:A1:6B:33:EE:7D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0LHUqmwmDEos9KV5F6hazPuffk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dbe446-9da3-4854-b5d3-25a38a246fa2/1/i0LHUqmwmDEos9KV5F6hazPuffk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0f:49:bd:67:49:9e:23:1e:77:f3:69:a9:75:82:83:10:74:
e7:4c:51:54:e6:99:36:9f:47:db:e4:30:9c:5e:9c:22:f0:e3:
ae:86:75:14:b0:fd:9a:e7:b2:48:02:06:e2:34:c8:5f:e2:68:
42:47:c5:9e:89:78:81:bd:64:df:d2:43:5b:e6:32:ec:78:a4:
f5:86:bb:7e:f6:70:d9:2d:54:3a:67:3c:d7:75:e0:84:2b:b0:
14:5a:b5:07:8b:4c:9b:b6:02:1d:96:87:e6:0f:54:b6:b7:a0:
b8:6a:e2:ea:e3:88:48:ad:11:e6:72:ab:b5:08:56:8a:54:d7:
bd:78:33:8e:67:de:04:1d:b6:46:3f:b6:3c:20:01:62:49:19:
19:15:36:32:61:69:bd:7b:04:fc:93:55:52:0b:3c:85:81:f7:
19:18:bc:f2:15:fe:a6:64:9d:30:ba:e1:3e:c4:f5:a1:18:44:
1e:75:35:08:16:2c:ea:6a:ce:cb:19:6e:82:2c:74:05:2b:82:
3d:8a:40:c3:53:67:50:ef:e9:4b:b0:1c:85:1f:e1:2f:aa:af:
51:fc:52:e5:2b:5d:da:18:c1:ce:48:f1:ed:8c:2b:b0:e9:d2:
aa:76:7f:33:b9:4e:8a:c2:d9:78:97:a7:76:75:13:ee:d9:22:
a1:0c:15:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:56 2025 by rpki-client