Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
File: IjayuK-mA20sjoMXc2-qpy2AxPI.mft (raw, json)
Hash identifier: Khw/4w17t9O5d8xTc42DXbC/J8+Xo+ShjlPVSHltx9Y=
Subject key identifier: FA:41:25:24:84:76:C5:59:EC:F4:12:1D:9A:7F:FE:7B:AD:A0:91:F7
Authority key identifier: 22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
Certificate issuer: /CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Certificate serial: 0199172D09CCECAC6B30A296B72C0DEA5FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
Manifest number: 166E
Signing time: Fri 05 Sep 2025 00:00:51 +0000
Manifest this update: Fri 05 Sep 2025 00:00:51 +0000
Manifest next update: Sat 06 Sep 2025 00:00:51 +0000
Files and hashes: 1: IjayuK-mA20sjoMXc2-qpy2AxPI.crl (hash: cmqVVxtVrkddbs7U4ITneru+RETmlFDbmKHHBSv0h9M=)
2: b2NrS79baNCWt7CG0X8Vv_sUMl8.roa (hash: Q1DMA/fao+0mavfnJZ9O2x4iQmJQmqUT84da1WRhc7E=)
3: spimqMKhC9PB1IAAapTxgzK4qRM.roa (hash: Uoz42yC9AHKp3g+1i18MCMkNcCBemOpgqQDvUXFhvIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 00:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:2d:09:cc:ec:ac:6b:30:a2:96:b7:2c:0d:ea:5f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2236b2b8afa6036d2c8e8317736faaa72d80c4f2
Validity
Not Before: Sep 5 00:00:51 2025 GMT
Not After : Sep 6 00:00:51 2025 GMT
Subject: CN=fa4125248476c559ecf4121d9a7ffe7bada091f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:84:f0:24:e2:47:c6:7e:66:0f:21:77:15:
32:e1:5c:71:11:01:05:89:e6:76:54:56:08:74:10:
9d:96:f4:00:07:1e:96:56:af:24:bc:4a:a1:c1:7d:
c1:cc:b3:2f:11:a6:ee:c2:a2:86:13:e0:d3:37:95:
a9:09:18:1a:2b:f8:9f:21:8f:ae:cc:81:84:8a:b4:
7e:ec:3d:42:1f:af:d9:49:9a:79:62:d3:15:84:04:
27:a3:9d:03:ec:f4:b4:ca:fd:f1:d1:d7:ce:9a:26:
f7:07:53:8e:0a:d8:0d:29:e5:9e:35:8a:ed:3f:bf:
98:a3:89:89:a5:97:96:61:89:d8:8c:4e:33:a1:77:
23:91:15:da:71:9d:13:03:6b:64:b0:12:86:5e:d3:
02:da:0d:f4:2e:78:0f:94:1d:cf:2e:cc:2d:d5:7c:
e4:b4:66:f0:8c:e4:7f:02:21:d6:fd:6b:1a:c9:9a:
a6:88:39:19:8a:30:d4:e1:91:1b:9a:6d:7d:98:d3:
31:17:bf:65:a3:65:f6:a8:64:1c:22:d4:d5:b6:9f:
ab:99:df:be:3e:62:7d:bc:6c:85:7d:68:56:b1:b7:
fd:e0:37:42:4a:86:ad:47:11:d8:72:53:32:9b:16:
53:4c:0b:e8:0c:48:16:1d:1e:eb:6d:ea:87:47:33:
86:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:41:25:24:84:76:C5:59:EC:F4:12:1D:9A:7F:FE:7B:AD:A0:91:F7
X509v3 Authority Key Identifier:
keyid:22:36:B2:B8:AF:A6:03:6D:2C:8E:83:17:73:6F:AA:A7:2D:80:C4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IjayuK-mA20sjoMXc2-qpy2AxPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6f895b-7977-445d-b72c-8b5ef41d8c25/1/IjayuK-mA20sjoMXc2-qpy2AxPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:5d:a5:8d:04:3d:fa:5c:7f:a8:fc:d8:5f:74:54:d2:ef:e9:
1f:5a:9d:42:a8:4b:56:1f:ab:99:95:21:f6:ca:2b:4b:fc:22:
fb:87:a3:50:85:76:24:76:92:28:a1:2c:07:ad:31:aa:81:d2:
ec:92:6a:28:b4:a4:9e:c7:4d:2b:08:3d:50:fb:40:0a:fb:03:
d6:c4:ca:f9:e1:30:b8:a5:28:30:9e:4b:a2:01:75:42:38:13:
ba:2f:1e:00:81:11:4c:6a:ad:9c:e5:5d:5f:dd:41:1e:db:5c:
e0:39:76:d5:ae:a1:c5:54:5c:d3:f9:06:d6:61:41:49:92:d0:
23:3e:33:c3:95:73:21:4f:62:bc:d1:e8:a7:f1:f3:c5:1a:2c:
b9:32:07:79:a2:72:37:6e:f6:eb:c0:e9:73:76:ad:35:79:b9:
77:b9:d4:5f:35:3e:25:e6:a6:e7:1f:88:e3:db:87:10:3e:d8:
b0:6c:5f:04:b4:fd:07:72:04:cd:a0:3a:20:6e:17:4a:16:e1:
2f:b4:a0:cb:b3:f1:92:9f:81:71:07:1e:43:7c:de:45:c4:0e:
88:6c:e3:c1:73:b7:43:b2:a3:2d:f8:82:a2:eb:cb:84:3b:f8:
bb:9c:f7:d1:d8:df:41:f4:7c:60:be:7f:7e:b5:6d:16:71:40:
a8:8d:23:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:49:30 2025 by rpki-client