Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
File: ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft (raw, json)
Hash identifier: Rft5tk20FSv4p4DfNO1f9Qwvq+ZTkV1cvtbSDbENe8Q=
Subject key identifier: 21:2E:4C:45:14:F0:65:13:FB:FA:63:AA:E0:0F:24:4F:F6:13:AE:12
Authority key identifier: 8A:40:00:10:1A:D3:93:CA:DF:7F:C8:FD:63:DA:AD:3C:6D:AE:12:4F
Certificate issuer: /CN=8a4000101ad393cadf7fc8fd63daad3c6dae124f
Certificate serial: 019879AE521B33320D7798A88734F3FD3378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
Manifest number: 161C
Signing time: Tue 05 Aug 2025 10:02:04 +0000
Manifest this update: Tue 05 Aug 2025 10:02:04 +0000
Manifest next update: Wed 06 Aug 2025 10:02:04 +0000
Files and hashes: 1: ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl (hash: MHdL9ei7njnWg62jAr+8zacJLHFbwIwId9U4AiudwG0=)
2: lFrZ4rR-rCiMWVmFnQGdm-QJh_E.roa (hash: kVQOvcnOHC3sx1NCMIDWqYKbqcHGycyRdXwqqPFVOgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ae:52:1b:33:32:0d:77:98:a8:87:34:f3:fd:33:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a4000101ad393cadf7fc8fd63daad3c6dae124f
Validity
Not Before: Aug 5 10:02:04 2025 GMT
Not After : Aug 6 10:02:04 2025 GMT
Subject: CN=212e4c4514f06513fbfa63aae00f244ff613ae12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ac:cb:68:4c:09:9a:93:da:a7:da:ab:40:e2:
bc:6f:e3:d1:d8:b6:84:b5:a6:20:2b:fc:e0:84:2c:
d8:d8:15:a4:cc:da:cb:62:82:7a:84:ee:9a:3a:8e:
8f:aa:b2:9e:ec:da:78:79:99:d8:c1:96:1d:25:67:
00:e9:1c:8b:b8:41:77:3e:06:74:4c:9e:24:3e:e6:
90:7c:4c:4e:60:9c:a3:f3:30:18:e7:21:28:e4:48:
d6:8d:94:59:7e:30:75:84:ee:0d:b2:a7:e1:ff:2e:
ac:ba:8b:c7:cf:82:a0:e2:a2:c5:1f:59:1b:d8:da:
27:1e:89:20:1c:71:d5:29:8e:f5:89:99:fe:f2:35:
9e:db:82:e1:a4:8a:b5:b9:65:9b:32:0f:df:92:02:
7c:92:60:33:0b:49:62:2b:52:ae:d7:9f:af:32:35:
8c:31:8b:c4:67:cd:f7:10:9d:7c:b7:0f:26:a1:9e:
c0:da:b0:f7:11:b3:1a:33:e1:80:9b:a3:5a:b9:05:
98:25:83:14:6c:22:31:da:8d:aa:f9:44:20:26:2e:
6f:df:e3:3a:51:4f:ba:d6:8c:ee:04:4d:57:e4:92:
95:8b:e4:6a:b4:94:cd:e1:48:54:5b:0d:c0:1d:ef:
74:b6:a9:e6:f0:12:54:61:7a:93:13:eb:07:d2:8f:
dd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2E:4C:45:14:F0:65:13:FB:FA:63:AA:E0:0F:24:4F:F6:13:AE:12
X509v3 Authority Key Identifier:
keyid:8A:40:00:10:1A:D3:93:CA:DF:7F:C8:FD:63:DA:AD:3C:6D:AE:12:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikAAEBrTk8rff8j9Y9qtPG2uEk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b27bd0-3d39-4d78-aa2c-1f3ccfa61aac/1/ikAAEBrTk8rff8j9Y9qtPG2uEk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ae:db:a2:4e:57:6f:51:9e:d0:d0:78:29:19:dc:54:c7:82:
ae:dc:31:69:36:b2:2a:2e:cf:ac:d5:ac:c8:c8:00:00:96:78:
f1:db:e3:b1:cb:f7:c9:db:ce:ff:c5:ec:a2:b4:62:11:b9:ce:
4f:cb:6b:81:27:4a:8a:b2:c1:b2:b1:90:6b:b8:f3:28:d3:dd:
28:c0:77:e7:a2:dd:d8:eb:98:52:f1:9b:d9:a4:37:96:48:d4:
e4:3c:a5:3f:6f:6c:7f:64:96:62:de:e1:63:54:32:29:85:2a:
5d:cc:28:4f:ed:ba:72:a9:c8:4c:29:d9:fb:77:b7:2a:65:d2:
09:e9:1e:ff:fd:2e:8f:81:b9:60:ff:d7:8f:0a:5e:b9:58:c0:
3e:ff:c6:eb:97:db:b1:d2:c3:29:29:51:f5:45:df:10:21:00:
e1:18:b0:df:bc:96:bd:2b:76:61:f5:21:65:27:55:48:1b:cd:
2c:e3:f6:70:1d:e0:b1:19:9e:02:df:85:43:53:40:ae:a2:a5:
28:2e:6a:d0:3f:92:08:24:95:4b:e7:92:bb:b1:3b:00:31:08:
17:e8:46:f2:99:14:f7:45:19:89:dc:f9:78:5c:e2:d4:fa:c8:
fb:a2:0d:77:dd:ba:3c:b4:6f:f1:7e:c6:9e:bc:3b:cf:61:f9:
8d:63:bd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:42:59 2025 by rpki-client