Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
File: ilUqhuMbaeXVMg7egdNLsSikXO4.mft (raw, json)
Hash identifier: x5ny1PQje9oSeSVfiWc4dHCPbGce/YMDEV/WvdOwSn0=
Subject key identifier: 0D:1C:31:4C:0C:41:A5:76:E9:80:A8:9A:ED:4E:8C:A7:EE:DA:5E:30
Authority key identifier: 8A:55:2A:86:E3:1B:69:E5:D5:32:0E:DE:81:D3:4B:B1:28:A4:5C:EE
Certificate issuer: /CN=8a552a86e31b69e5d5320ede81d34bb128a45cee
Certificate serial: 0198808B561FE93CDCA3CA5A4AAC20F39CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 18:01:11 +0000
Manifest this update: Wed 06 Aug 2025 18:01:11 +0000
Manifest next update: Thu 07 Aug 2025 18:01:11 +0000
Files and hashes: 1: gx1SCX17EN8yNFFOaZKqHyy38bg.roa (hash: y86l006aIRQbh6g6sMv1/V04L9sTmUKHfB0xrZAQk4Q=)
2: ilUqhuMbaeXVMg7egdNLsSikXO4.crl (hash: 4ibfiuhwBg1UCjwiukCfGG+0FZem6E0o9i2RE7Yf31U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:56:1f:e9:3c:dc:a3:ca:5a:4a:ac:20:f3:9c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a552a86e31b69e5d5320ede81d34bb128a45cee
Validity
Not Before: Aug 6 18:01:11 2025 GMT
Not After : Aug 7 18:01:11 2025 GMT
Subject: CN=0d1c314c0c41a576e980a89aed4e8ca7eeda5e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0b:c4:62:96:a1:67:f5:85:81:cd:24:90:6e:
e8:a6:01:8a:37:fc:eb:fd:da:36:0e:95:8f:1e:6a:
e9:72:4b:9e:57:6e:ff:74:af:a2:bb:a6:d0:32:a2:
71:50:74:79:63:04:77:f4:62:9f:7b:4f:cb:a7:3e:
c4:12:a2:73:58:d2:51:bb:fd:8f:89:df:16:a1:6d:
5e:b9:2b:f0:52:de:ad:84:88:c9:3c:fb:70:bb:18:
32:ab:1f:76:e9:55:12:9e:e5:99:0c:ac:25:d5:66:
21:59:1b:e5:a9:ee:76:62:bb:a2:18:35:89:cd:9b:
d6:e6:48:52:6d:4e:67:d5:9c:b5:d5:bf:da:7e:b7:
a5:57:44:8b:14:b5:89:ad:90:ec:28:93:3f:eb:39:
2d:b1:5e:55:e2:c4:14:51:42:b7:b7:25:f8:64:29:
c6:40:77:37:8c:a4:51:e7:7d:0a:38:ea:cf:26:48:
00:32:43:39:7f:25:67:f9:c0:e9:66:e8:8e:c8:d7:
dc:29:76:71:e2:20:6a:e0:f3:6f:cc:31:3c:62:56:
97:74:03:a1:fd:38:16:ea:37:a7:71:66:10:ff:75:
1a:79:1a:7c:c5:9e:a5:0b:54:21:2e:40:1a:29:13:
6c:43:db:0d:6d:57:9e:e6:c7:0f:81:cc:78:db:3b:
2e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1C:31:4C:0C:41:A5:76:E9:80:A8:9A:ED:4E:8C:A7:EE:DA:5E:30
X509v3 Authority Key Identifier:
keyid:8A:55:2A:86:E3:1B:69:E5:D5:32:0E:DE:81:D3:4B:B1:28:A4:5C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:0c:fe:77:5e:cd:cc:e6:7e:fa:9f:3d:50:5e:fa:c1:bd:ea:
b4:53:62:ff:24:a8:07:2c:60:92:e6:20:18:15:d0:9d:46:65:
36:2a:6c:c4:e2:65:a7:34:e8:b6:0b:d3:b5:47:a7:27:19:7e:
69:fd:58:58:30:26:29:1d:cd:4f:23:73:6a:76:93:bb:19:bd:
68:28:7d:7d:88:7b:d7:5d:8f:06:d9:55:76:15:53:67:44:42:
92:b4:d4:6f:f9:f6:f2:a7:dc:2c:4f:e2:a0:1f:13:eb:99:50:
a2:d7:74:65:e9:71:84:d0:94:f4:22:82:d8:f8:ce:47:f4:ce:
73:64:18:6b:fa:59:52:8b:56:80:f7:e5:02:0a:e9:be:32:47:
81:d1:d4:07:1d:50:a2:24:56:df:94:24:47:96:27:34:da:a9:
76:4c:5b:01:a9:15:75:d8:24:83:f1:4b:9b:70:5e:d9:80:0c:
1c:18:cb:81:98:8b:11:29:66:e3:e8:81:7d:e0:20:7d:93:06:
be:df:db:c0:14:07:da:2e:aa:11:86:16:85:97:d3:75:18:9d:
cc:78:a4:74:7a:95:56:c0:5d:f7:3d:39:2f:e4:54:dc:90:7b:
f7:cd:58:1b:ba:9d:f3:e3:c0:c9:42:ba:83:9b:7e:02:a6:a3:
01:10:b3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:55:47 2025 by rpki-client