Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
File: iWqh8O1Flucz-LYtOeN7jeUIXtc.mft (raw, json)
Hash identifier: i0EHCCcLx/8EeUfv/KP4mtm64BIYg5fXlVFAAADTbRk=
Subject key identifier: 0A:9E:12:D3:69:8E:B2:53:C7:30:54:65:71:76:DB:51:ED:A0:F6:A8
Authority key identifier: 89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
Certificate issuer: /CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
Certificate serial: 019880C239F5F0D3258C121EE1B70D96E119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 19:01:09 +0000
Manifest this update: Wed 06 Aug 2025 19:01:09 +0000
Manifest next update: Thu 07 Aug 2025 19:01:09 +0000
Files and hashes: 1: eVsPR_b5z2ja1nvgWZaFAJsxzV8.roa (hash: NL/nj7PiRruzzNoJXPrVqMifeH+fC4R4vqg0qPtnqLg=)
2: iWqh8O1Flucz-LYtOeN7jeUIXtc.crl (hash: KbtQH7Y88GZY1/RvURDZ+1jpCpnP0rSkyhdeHDmioJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:39:f5:f0:d3:25:8c:12:1e:e1:b7:0d:96:e1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
Validity
Not Before: Aug 6 19:01:09 2025 GMT
Not After : Aug 7 19:01:09 2025 GMT
Subject: CN=0a9e12d3698eb253c73054657176db51eda0f6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:04:a3:dd:2b:21:c2:b3:32:90:a5:46:d3:b3:
f1:b0:27:ee:ff:09:bc:53:24:7f:38:93:f4:7b:81:
be:08:5e:18:c0:e1:3e:2f:06:9b:26:3e:52:d1:53:
65:50:d1:27:19:bd:7d:22:09:c6:d3:23:4c:a7:0c:
de:24:04:95:f6:a7:2e:b1:41:07:a4:0a:99:c3:8b:
bb:0d:94:1b:34:6e:a6:af:8a:5c:03:f9:40:37:a0:
04:8f:f3:2a:7b:40:24:6f:db:10:89:64:0c:5c:02:
0c:c1:43:72:95:79:29:39:05:ce:b9:57:29:f2:5b:
9c:65:2b:aa:dc:e5:7e:70:2b:57:f5:f1:6e:07:cc:
a6:fa:25:7c:ad:bf:df:f3:dd:b0:2d:b7:69:10:7a:
82:20:40:4b:df:5e:c4:a3:bc:16:65:c2:01:b7:3c:
50:9a:2f:ab:a4:59:73:5f:cd:09:6d:d9:fa:3d:af:
44:d3:c2:d1:27:2c:b4:27:90:3e:d7:0d:57:66:59:
21:dd:74:b0:7f:0d:ed:85:c2:46:54:11:bb:af:e7:
b7:a1:0a:68:d0:82:e5:76:f9:89:72:b2:bc:ff:0a:
1e:f3:95:2e:dc:c4:bf:01:f7:fb:1a:a1:ed:2f:45:
82:d7:14:ee:48:65:9c:64:74:e6:86:7a:63:5c:6a:
cd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9E:12:D3:69:8E:B2:53:C7:30:54:65:71:76:DB:51:ED:A0:F6:A8
X509v3 Authority Key Identifier:
keyid:89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:ae:dd:79:71:6d:fc:cf:97:56:ca:9f:bf:40:98:56:ff:62:
45:c8:78:38:3a:98:9f:c1:63:a8:a8:c9:0d:d6:15:43:0a:bf:
e2:0c:6d:3b:87:b2:a6:d4:93:41:ef:1c:ce:2d:95:8d:fb:7d:
e5:fd:aa:cf:b0:84:ce:2c:9f:ff:1d:a8:73:86:c4:90:68:75:
90:4e:eb:bb:fb:fc:5a:ae:dc:84:29:25:18:88:c9:40:8f:34:
d4:37:c7:3f:6e:70:22:81:cb:89:18:f7:86:c8:80:0e:de:8f:
a6:5e:2a:76:8c:41:da:24:88:b7:3d:72:92:a1:c1:38:a0:fd:
fe:a7:db:1e:75:97:f1:3e:e6:b1:54:a5:11:96:d2:0b:33:f4:
5f:2e:06:4c:6b:b4:6e:6c:60:43:0b:ff:bb:89:1b:40:7b:60:
b2:c5:22:5b:f5:03:ab:38:36:1d:5d:cd:41:8a:06:80:23:f8:
b6:6c:0a:fa:06:f2:e9:03:01:7a:56:cc:95:01:5d:87:df:0a:
01:4f:51:1c:ef:42:cc:09:26:f2:43:91:20:7d:b1:27:aa:b3:
de:1d:75:a2:d2:e4:75:c3:3f:d5:c7:d0:4c:84:4d:27:b3:1f:
73:1d:2a:24:5b:4d:f1:4c:8e:08:55:9d:27:98:f9:54:71:4d:
f9:bc:4e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:52 2025 by rpki-client