Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
File: iPQfqz5j6vW98HFm31qmgWLq16Y.mft (raw, json)
Hash identifier: UatAmgTWQK7ZJfmg7MymcPPQjkDPnKL3kW9NW+2s7oI=
Subject key identifier: 42:EF:EF:C6:37:D5:E6:9B:97:0E:93:E7:A5:17:02:FE:0C:95:7E:AF
Authority key identifier: 88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6
Certificate issuer: /CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6
Certificate serial: 0198974A3D4D1F4D22A3C1B6462A4F798591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 04:01:21 +0000
Manifest this update: Mon 11 Aug 2025 04:01:21 +0000
Manifest next update: Tue 12 Aug 2025 04:01:21 +0000
Files and hashes: 1: iPQfqz5j6vW98HFm31qmgWLq16Y.crl (hash: sCuorRIoyuFVTw8n0v/6bVfX5FMHVBmar+xEP0o9g6Y=)
2: uNj0vhcUK_UhfSxrxVZLYp2n6nk.roa (hash: xTRc4Rd4GJsupl0R/CzG6nNJAwdCcx0IPu8T4AbYP1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:4a:3d:4d:1f:4d:22:a3:c1:b6:46:2a:4f:79:85:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f41fab3e63eaf5bdf07166df5aa68162ead7a6
Validity
Not Before: Aug 11 04:01:21 2025 GMT
Not After : Aug 12 04:01:21 2025 GMT
Subject: CN=42efefc637d5e69b970e93e7a51702fe0c957eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:61:5d:cc:50:54:ab:10:5b:c6:1b:9f:ab:9b:
2b:28:df:ab:e8:20:40:ff:d7:e8:56:cd:39:91:90:
a1:ec:77:a5:e0:28:41:f7:af:4d:11:dc:72:ec:61:
7c:a2:c0:10:1d:f9:98:4e:bd:2b:a3:d9:44:d8:ac:
7c:73:33:ec:92:e8:98:fe:63:10:e9:9e:28:1a:8d:
07:d5:a1:f7:17:d1:29:bd:98:f7:d5:4a:0a:48:22:
34:54:29:11:de:e3:9a:57:9f:9f:7e:2d:eb:3a:22:
79:93:ce:9e:bd:38:a0:07:a7:82:45:72:d1:06:aa:
0b:03:bf:96:37:7e:13:03:ef:20:e7:d1:26:a5:c5:
74:24:79:1b:3a:e3:c2:ce:9c:69:75:a7:39:1f:bf:
23:5f:5a:9a:37:fb:d6:f2:a2:9e:cc:a5:e0:87:77:
be:18:d3:91:2b:78:d0:a0:89:1c:c6:cc:c6:d9:9d:
12:7e:78:40:7a:e2:d6:09:09:49:20:4e:c8:b0:fe:
45:ed:68:e9:d1:ab:6e:7c:b7:1d:b9:a5:20:5d:d8:
bb:c4:f6:61:c3:a8:ff:17:bb:57:0d:e3:44:cd:d8:
82:69:64:32:0f:87:cb:7e:0a:59:d6:99:ae:2f:0c:
85:56:af:58:f5:b9:6c:13:18:b0:19:be:ea:b1:c8:
fd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EF:EF:C6:37:D5:E6:9B:97:0E:93:E7:A5:17:02:FE:0C:95:7E:AF
X509v3 Authority Key Identifier:
keyid:88:F4:1F:AB:3E:63:EA:F5:BD:F0:71:66:DF:5A:A6:81:62:EA:D7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPQfqz5j6vW98HFm31qmgWLq16Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e06d8b-c758-4b93-b9f3-897cb6a430d7/1/iPQfqz5j6vW98HFm31qmgWLq16Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ed:1b:a3:94:5f:83:bc:ec:26:39:3e:94:89:c6:ef:1e:4e:f6:
5a:c6:c2:34:2f:21:bc:67:96:3d:fe:37:9b:3f:44:d3:dc:46:
6d:a3:de:62:b1:a3:5d:9d:b1:15:c4:d9:8f:2f:00:b2:56:15:
ef:0f:b1:21:3b:ee:2b:1e:08:98:0d:ec:ae:20:ae:98:97:5e:
48:3e:10:f8:89:c6:62:5d:c7:83:6b:78:d3:4c:78:2b:4a:29:
39:44:66:5e:62:65:c6:39:86:d6:85:48:de:a6:8c:9e:6e:84:
cb:85:46:d3:52:94:0d:d6:9d:74:bf:a5:ac:2f:c1:8a:b6:b9:
bd:43:b8:27:cf:3f:b2:91:be:9e:41:09:fa:90:3c:3e:0d:83:
2e:35:ea:62:58:80:0f:aa:f3:cb:75:09:57:f8:5c:6e:37:1d:
9f:02:b6:49:1c:58:fe:1c:da:4a:78:93:5c:0c:6c:25:cc:1b:
92:4c:8a:6a:93:46:37:db:1f:fd:0b:c6:5c:ba:3a:a2:64:b4:
be:89:b6:1f:f8:7c:4d:25:1d:e0:52:10:c4:68:8c:bc:22:38:
bf:a3:74:cc:86:7c:63:f5:34:85:af:33:ab:92:ca:f2:fe:52:
d5:48:43:05:d4:0b:8d:33:0b:cb:ad:90:1d:65:c8:e9:9d:39:
51:34:65:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:29:59 2025 by rpki-client