Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.mft
File: IZUnwiTwCiiy9MtOExLXSNXKUWk.mft (raw, json)
Hash identifier: zswoFcAB4tGD3hKiEZbJtN1cvrARlIdOe9NnzqO9VlU=
Subject key identifier: 12:F2:FA:9D:00:45:B9:55:41:A4:35:4C:C7:18:B7:AB:09:52:9E:43
Authority key identifier: 21:95:27:C2:24:F0:0A:28:B2:F4:CB:4E:13:12:D7:48:D5:CA:51:69
Certificate issuer: /CN=219527c224f00a28b2f4cb4e1312d748d5ca5169
Certificate serial: 019881D48EBC9A03E84E0996A1BF7148FAED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZUnwiTwCiiy9MtOExLXSNXKUWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.mft
Manifest number: 161C
Signing time: Thu 07 Aug 2025 00:00:47 +0000
Manifest this update: Thu 07 Aug 2025 00:00:47 +0000
Manifest next update: Fri 08 Aug 2025 00:00:47 +0000
Files and hashes: 1: IZUnwiTwCiiy9MtOExLXSNXKUWk.crl (hash: LvuvADdhaz46cjdh4AskUXqm9vASleJZLPz8jmiWh8M=)
2: l8INnv3QTRexkISN97lg6HuKeCY.roa (hash: pDEsYARUuEJK1pYQPfyythtLkxkCfRaxj9c1qzwCEIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IZUnwiTwCiiy9MtOExLXSNXKUWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:8e:bc:9a:03:e8:4e:09:96:a1:bf:71:48:fa:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219527c224f00a28b2f4cb4e1312d748d5ca5169
Validity
Not Before: Aug 7 00:00:47 2025 GMT
Not After : Aug 8 00:00:47 2025 GMT
Subject: CN=12f2fa9d0045b95541a4354cc718b7ab09529e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ba:99:43:ff:06:50:25:4f:37:e3:d3:5c:4a:
b1:fa:7a:96:b6:9f:45:60:a1:d3:ef:39:84:36:26:
e7:f2:6b:5d:5d:8c:e9:40:6a:4e:dc:a9:f9:58:72:
1d:aa:ed:b7:52:2b:3d:ea:93:43:cc:b4:5d:58:31:
e3:02:97:4c:fb:bc:f8:56:d3:e4:91:97:f9:4e:89:
d0:ad:c3:6c:34:35:a1:09:ee:54:37:e2:7b:a5:99:
c5:8d:d8:9a:f4:43:14:d0:9d:87:24:8b:e6:18:7d:
29:8b:01:31:db:60:c7:ff:2e:8b:b3:68:62:a8:a8:
8f:92:50:bf:a1:24:9a:11:05:39:64:af:a2:82:62:
0e:7a:ef:2f:fb:80:0b:e1:14:33:23:ad:4d:5a:35:
26:f6:ca:ae:0f:e4:cd:9b:89:ec:c0:a1:80:8a:f2:
54:6c:49:ab:2c:fb:d3:d4:86:3d:f9:97:0a:db:cf:
67:f5:1c:ca:d2:5a:ea:20:fb:9e:f2:af:d1:c0:c0:
4e:c9:7e:00:0f:0d:94:ec:09:75:6f:45:ca:1e:b9:
a1:ab:4e:c3:fe:29:72:85:0f:e6:11:d3:c6:4c:26:
53:8a:c0:02:02:06:55:aa:8d:23:3e:46:c9:00:fe:
cb:f0:41:7e:f8:ce:8e:aa:97:59:5e:c1:8d:eb:33:
5e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F2:FA:9D:00:45:B9:55:41:A4:35:4C:C7:18:B7:AB:09:52:9E:43
X509v3 Authority Key Identifier:
keyid:21:95:27:C2:24:F0:0A:28:B2:F4:CB:4E:13:12:D7:48:D5:CA:51:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZUnwiTwCiiy9MtOExLXSNXKUWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8540db-f901-433b-81bb-97d55f391561/1/IZUnwiTwCiiy9MtOExLXSNXKUWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:59:ee:02:0b:cd:b8:b6:00:ad:1b:7e:41:60:f7:d3:0a:4b:
3c:a0:c4:1b:b1:69:1a:d6:65:25:57:fe:4a:37:ab:de:46:e2:
44:29:cf:0b:89:ab:58:89:8c:6c:45:3c:fc:5c:af:c3:57:56:
7e:bc:6a:cc:8e:44:c1:b6:d6:f0:94:0e:16:16:2f:19:83:c7:
ba:5b:8d:57:c4:52:58:f8:f4:52:f5:67:d2:22:56:aa:a4:d6:
bd:d0:55:e1:b5:08:07:76:2e:1d:1b:b4:07:c0:a0:5f:32:68:
80:0f:d8:bb:b8:ab:87:ff:a3:cc:40:45:05:5a:71:19:c1:06:
04:bf:af:f0:b7:d9:87:e8:21:ef:28:8b:f4:48:e2:9d:99:42:
42:29:b2:e6:41:af:d0:94:5f:5c:db:05:a2:e3:42:04:ad:20:
45:00:9c:8b:94:b5:8a:68:cf:77:0e:92:aa:48:ac:83:2b:47:
34:05:66:3e:5c:1a:51:26:0e:d5:0d:64:6f:c1:4e:6f:88:59:
69:31:1b:aa:c5:04:36:ac:51:6f:b3:a2:7f:23:30:59:fa:d4:
ca:f3:3a:a8:f4:48:3f:fb:74:72:b6:e1:54:61:e2:54:35:3b:
79:fa:67:ff:29:2b:dd:c6:bb:bb:21:69:f2:97:5f:f8:18:00:
ca:fe:f4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:57:09 2025 by rpki-client