Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
File: I_IfcxbhvXj4bupkJdXCKbmA-aw.mft (raw, json)
Hash identifier: TX6u92IdkVoEQYy3eqj3BmQLQxYVotdnJZOLm3X9Qzo=
Subject key identifier: 3D:76:60:11:3E:23:0C:26:5C:50:51:87:31:99:78:FF:D7:6F:05:45
Authority key identifier: 23:F2:1F:73:16:E1:BD:78:F8:6E:EA:64:25:D5:C2:29:B9:80:F9:AC
Certificate issuer: /CN=23f21f7316e1bd78f86eea6425d5c229b980f9ac
Certificate serial: 019896DC0FE7584C9226472715F433C3EE0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 02:01:01 +0000
Manifest this update: Mon 11 Aug 2025 02:01:01 +0000
Manifest next update: Tue 12 Aug 2025 02:01:01 +0000
Files and hashes: 1: 15gQ3l_CTz5DpsQh5tCstrbwJks.roa (hash: NBh6zaBQW3FImxNGTreLJET3gJwOeBKW+FttZU4GhEA=)
2: I_IfcxbhvXj4bupkJdXCKbmA-aw.crl (hash: CwJlhyxjA/X8GbY7EFPRZXb3zBaKE+13u41rNBnPKdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:0f:e7:58:4c:92:26:47:27:15:f4:33:c3:ee:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f21f7316e1bd78f86eea6425d5c229b980f9ac
Validity
Not Before: Aug 11 02:01:01 2025 GMT
Not After : Aug 12 02:01:01 2025 GMT
Subject: CN=3d7660113e230c265c505187319978ffd76f0545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6b:d2:07:55:fc:c0:ce:01:74:60:a8:af:87:
36:bc:9a:cc:be:9e:8d:7d:9e:ae:81:e5:b3:31:92:
1e:b5:7c:bf:36:eb:76:9d:15:de:52:c4:de:57:0a:
76:cf:e3:f2:4e:81:25:ad:79:48:52:dc:44:50:d4:
8d:5e:2b:d8:aa:09:ca:c8:98:ea:b1:18:37:c8:93:
c6:f6:df:9a:6c:40:fc:b5:18:d8:8c:90:96:25:bd:
f3:ad:63:fd:66:e8:c3:08:33:80:eb:ac:38:12:0c:
f4:09:38:ad:7b:bb:a6:e9:f3:ce:ad:f5:ad:71:40:
94:e7:4c:a5:18:f4:ee:35:c7:87:ad:df:b0:95:94:
46:e9:22:0f:0c:55:0a:da:d8:16:87:8f:13:e2:51:
01:49:87:c1:92:1c:90:29:21:b7:58:fb:d5:dd:c9:
94:b3:5f:16:8e:ee:8d:5e:26:a4:d1:52:06:8a:66:
9e:3f:26:fe:c7:79:e0:e9:07:8e:5d:25:63:fd:6e:
24:20:69:e1:68:43:31:c7:7b:17:f3:1b:88:87:17:
2c:27:11:80:09:8a:21:9a:47:72:e7:43:f9:33:4f:
dc:c7:33:cf:c8:71:3b:46:fc:15:1d:f5:d1:f1:be:
e0:40:a0:27:d1:ad:38:6c:c6:4d:8f:89:6c:16:d3:
d3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:76:60:11:3E:23:0C:26:5C:50:51:87:31:99:78:FF:D7:6F:05:45
X509v3 Authority Key Identifier:
keyid:23:F2:1F:73:16:E1:BD:78:F8:6E:EA:64:25:D5:C2:29:B9:80:F9:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IfcxbhvXj4bupkJdXCKbmA-aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a59cf-5092-474d-81cf-974c31f2660b/1/I_IfcxbhvXj4bupkJdXCKbmA-aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:fc:2a:a0:c2:ce:c5:e6:78:a8:23:50:6b:5d:dd:c7:3b:a8:
e2:03:60:6d:fa:fb:5e:cd:c0:f9:b8:2b:bc:e6:30:53:a2:3f:
0b:26:0e:f7:e1:df:1c:99:8e:aa:4a:c8:62:18:e9:04:9b:8c:
66:d4:d1:d8:c5:ee:d7:2c:82:06:58:d1:b4:64:6c:75:b1:d4:
34:d5:c6:dc:5e:0b:aa:29:11:38:ce:ad:03:21:77:04:dc:37:
0f:57:e9:d6:9f:9b:29:38:ea:12:60:12:15:94:13:de:e0:ca:
3b:40:88:b5:26:f0:8f:cd:ef:5d:88:ed:88:f8:0b:4f:c2:63:
90:16:8c:07:30:b3:35:e6:31:a3:56:fe:f0:cb:f4:7d:99:ae:
b9:f9:1b:f4:e7:4c:8a:54:41:c6:00:66:1c:7c:84:c3:16:c6:
5a:c2:71:81:7a:d5:3f:c9:c9:44:29:1d:6d:ab:1e:54:11:11:
de:c6:f5:f4:dc:58:ce:5c:74:58:1f:45:90:03:20:74:17:de:
3d:08:29:44:e2:3b:36:34:da:39:a7:94:a4:ad:7c:0d:ba:6f:
0e:d8:18:b8:cc:f3:8a:bc:aa:c4:e6:40:3c:c3:03:b7:d1:ce:
f7:22:e7:cb:16:a3:c2:79:bb:2c:f1:07:97:3e:e6:8c:85:89:
09:19:cf:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:06 2025 by rpki-client