Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
File: I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft (raw, json)
Hash identifier: +gJahXCdgk7q3bubk6/2g3BuoQPifll62d15oC9FJIY=
Subject key identifier: 34:A3:2D:93:10:C8:DA:78:AD:BD:E5:50:D8:CA:9B:67:33:A1:BD:6D
Authority key identifier: 23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
Certificate issuer: /CN=238857660dc7fa60846f765b94cb69576255adb6
Certificate serial: 0198744FB1535E48DFD043369519F5DD5727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
Manifest number: 161B
Signing time: Mon 04 Aug 2025 09:00:36 +0000
Manifest this update: Mon 04 Aug 2025 09:00:36 +0000
Manifest next update: Tue 05 Aug 2025 09:00:36 +0000
Files and hashes: 1: I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl (hash: uDD6tDY0SnzgWH3zketC+FrIAvSWaOCoDrdYKm1gLT0=)
2: XHfhEGwfsHA5Cy6rVzKyCX0VS7I.roa (hash: r0CY6B9tn8PTb3kJeN+vQ/cBCfQUrTHL37aoDlJepRA=)
3: tcPEvHuX8bqS2YKyM4C5K4tHwxk.roa (hash: rKNoYxngd5L4bRt06ua2/XaA1SqXHMSPI/cKc0JvWoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:b1:53:5e:48:df:d0:43:36:95:19:f5:dd:57:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238857660dc7fa60846f765b94cb69576255adb6
Validity
Not Before: Aug 4 09:00:36 2025 GMT
Not After : Aug 5 09:00:36 2025 GMT
Subject: CN=34a32d9310c8da78adbde550d8ca9b6733a1bd6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:82:4a:34:c1:47:a6:f7:59:be:4b:62:43:3d:
44:c7:a5:31:f2:53:4a:13:45:51:dd:ad:2e:8b:83:
c9:d1:59:c3:f8:83:78:ed:c0:f9:01:db:99:df:6b:
cf:93:2b:1c:22:3c:00:66:93:af:3f:17:ed:69:23:
6e:fa:eb:4b:c4:6a:3e:35:23:75:c9:7a:1b:14:d3:
fb:11:ba:05:37:d3:f5:a5:2b:ea:82:6c:ff:96:04:
85:3c:b1:d3:08:00:3c:9a:aa:1e:8a:5e:c3:3c:f9:
50:63:8d:b1:88:09:31:03:6e:e5:65:bc:57:ce:26:
3e:0f:ef:dc:a9:76:76:83:ef:6e:83:ef:69:66:05:
d5:06:78:0f:d0:fe:d6:3d:17:01:fb:1d:a8:75:b4:
fe:3f:c2:d9:cd:fa:0f:17:83:77:1c:7b:2c:05:3f:
23:2a:ce:d9:2d:1d:31:21:87:7c:23:ec:6c:b3:31:
3e:65:44:90:78:00:fd:61:27:11:54:d2:b8:42:79:
db:60:db:0a:66:63:a0:de:a5:63:99:7c:e8:1d:cb:
14:5e:c9:8e:1b:71:45:3c:46:14:ea:1a:fb:6d:54:
c5:79:d8:09:67:34:38:08:c3:4a:da:08:3c:af:19:
f0:b2:9a:40:ab:49:74:82:0b:2b:ef:d9:76:90:05:
48:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A3:2D:93:10:C8:DA:78:AD:BD:E5:50:D8:CA:9B:67:33:A1:BD:6D
X509v3 Authority Key Identifier:
keyid:23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:0d:ef:8f:ea:42:a8:7d:e0:92:a5:d0:8a:36:d4:10:24:c4:
29:f3:f0:d0:9e:a3:5b:13:ab:12:07:11:f1:ef:9a:ae:c0:67:
b9:a8:ea:62:9b:c8:8c:78:72:c8:aa:8d:75:7d:d2:f5:95:6e:
a4:f4:e8:73:1a:36:e3:b8:d6:32:f0:88:d4:dd:9b:8a:18:a9:
b1:7b:dd:2c:0e:ff:a0:c1:bd:fa:62:22:3a:53:66:0e:6d:6c:
51:3c:67:c0:c5:36:c6:00:a0:c8:db:85:e6:86:89:46:78:bf:
5a:61:64:6f:00:55:1b:4e:ff:e9:92:b0:12:4f:3b:f5:54:aa:
e2:b8:d7:ac:93:bb:f8:60:31:f3:0a:74:b2:27:98:7a:fd:55:
2c:b4:2a:a7:be:31:3c:98:fe:e8:a5:05:a4:f5:cf:a4:ae:03:
89:84:ae:05:1b:39:2b:1a:27:60:63:7b:24:e1:00:3e:30:52:
4c:b3:d5:0a:34:0d:57:ea:95:c6:60:0f:85:3a:a3:d9:d5:12:
5a:ed:b7:c6:be:0e:fe:12:ca:52:58:d2:af:25:c4:78:b0:1d:
a2:42:a1:00:16:6e:ff:b0:25:f5:d8:b5:9e:73:ff:47:f6:5e:
d7:7b:00:81:13:5e:12:c8:6b:4b:51:c5:5b:d9:1d:da:04:af:
ed:e9:db:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:31 2025 by rpki-client