Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
File: IzlKEl-jrODEem_jT0CGtNO6VYg.mft (raw, json)
Hash identifier: qdrP4AO2/zfQaa2AHrHQyqnzQle6q25q+ikWf1WfwDk=
Subject key identifier: 94:91:13:EA:05:43:E7:28:58:5D:F4:D0:2B:F6:DA:75:A2:1E:D8:B6
Authority key identifier: 23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
Certificate issuer: /CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Certificate serial: 0198820BA88D9B170E42C191A475760DBDBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
Manifest number: 162C
Signing time: Thu 07 Aug 2025 01:00:58 +0000
Manifest this update: Thu 07 Aug 2025 01:00:58 +0000
Manifest next update: Fri 08 Aug 2025 01:00:58 +0000
Files and hashes: 1: 43AxQadttxpukdA8vcrVdRW-t5w.roa (hash: kF6ocnoDs/XQiaEmG2F7DKuzq9j+uOFKWVL4Npen2L8=)
2: IzlKEl-jrODEem_jT0CGtNO6VYg.crl (hash: peHcYFg/G50m5d/NEezoj9gkeNxaCmxE4ZothJvYQxQ=)
3: hSxMBu_igMJgBtfSOfQQ4Pj49pw.roa (hash: bffcp9BhaMHMTNVqsuxgb/xO/YYHeGPregGtKUrYEWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:a8:8d:9b:17:0e:42:c1:91:a4:75:76:0d:bd:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23394a125fa3ace0c47a6fe34f4086b4d3ba5588
Validity
Not Before: Aug 7 01:00:58 2025 GMT
Not After : Aug 8 01:00:58 2025 GMT
Subject: CN=949113ea0543e728585df4d02bf6da75a21ed8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0d:8d:a7:25:0a:18:1b:d7:49:ec:35:32:ef:
ed:17:f1:22:a5:6d:b9:a2:68:c9:10:d8:eb:d4:4c:
54:39:f3:90:c6:e7:07:c6:b7:b9:cd:6a:20:a3:45:
53:18:e5:b2:18:eb:9f:71:43:ac:bc:e0:a2:17:f0:
b2:8f:52:7d:8b:89:0b:74:68:e2:fd:e5:45:09:70:
98:bd:d5:29:5e:6b:ad:e4:12:bd:86:26:63:46:07:
1d:84:74:ee:31:5f:72:b5:71:a4:50:4d:1f:b5:91:
fe:66:a4:81:6d:7f:da:1a:c5:e2:bd:c7:49:23:a2:
18:51:9f:c6:13:dd:e4:e2:05:34:9b:98:38:d0:30:
19:bb:a8:d3:07:40:1e:b2:32:9a:76:7f:90:b5:6e:
03:56:4b:a2:dd:97:eb:45:ec:ba:44:d9:23:25:6e:
10:91:7c:72:f9:28:cb:7d:c4:d7:a4:82:82:42:bb:
04:f3:a4:60:46:82:7f:ab:9a:5f:a9:ea:d8:97:6b:
07:b8:93:ee:7a:0f:e7:25:62:d3:1f:4f:f6:81:9a:
02:80:9c:d6:54:42:e5:7d:ce:c5:d5:9a:0e:94:1f:
4a:4f:a3:87:4c:c6:56:c7:f2:a9:60:db:23:54:d6:
0d:4a:21:c7:3f:fe:25:de:6c:0d:8f:39:b2:2a:9d:
68:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:91:13:EA:05:43:E7:28:58:5D:F4:D0:2B:F6:DA:75:A2:1E:D8:B6
X509v3 Authority Key Identifier:
keyid:23:39:4A:12:5F:A3:AC:E0:C4:7A:6F:E3:4F:40:86:B4:D3:BA:55:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzlKEl-jrODEem_jT0CGtNO6VYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/afd415-0a86-431f-bc3a-d43207d62dfe/1/IzlKEl-jrODEem_jT0CGtNO6VYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:4a:10:2a:78:44:51:2f:46:18:d4:95:59:6f:2b:09:c6:a7:
94:37:22:7f:4f:81:b5:85:80:58:e2:23:17:ca:a2:09:c0:f1:
4f:42:bf:71:57:73:e8:2a:2f:c3:3f:1f:b3:b8:e7:bf:6e:33:
56:6a:49:49:d4:16:e8:12:ad:8f:a4:35:71:7a:23:eb:5a:5c:
f6:e3:38:8a:94:96:85:7f:6f:4a:6f:a5:d6:b7:e3:ba:52:9a:
95:fe:76:01:74:6f:fb:7a:09:0e:e9:86:bf:96:78:b3:6e:ab:
a9:e3:7e:b4:1e:1f:b9:ec:35:25:c8:3f:04:38:b3:e2:50:76:
23:60:9e:d2:3c:7d:f6:8d:c1:2c:bc:d0:84:36:d3:7c:7b:c1:
dc:80:d0:3e:78:63:2a:08:47:3f:5a:96:f7:1a:fb:01:22:67:
ef:80:1e:98:1c:34:ab:ed:37:36:eb:51:53:aa:eb:9d:3d:dd:
d4:82:30:25:72:30:39:2d:07:8b:4b:08:ae:d0:a5:73:e4:3c:
b5:d7:40:36:97:43:dd:71:7a:c6:da:4f:b7:98:76:90:3d:d2:
2c:e2:1f:13:ec:d4:60:94:9a:d7:9c:71:07:3f:91:b1:27:9b:
8f:78:ef:8d:a6:5c:b7:79:25:0b:e1:8d:3a:43:47:13:05:a4:
f2:fa:43:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:18:49 2025 by rpki-client