Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
File: IQ2p568B3nVEj0kGqsQb0pZOiEc.mft (raw, json)
Hash identifier: Q/fPjEoXDLQGakmga/wTYttkcQ4dYTTkGXOxlvtdV9o=
Subject key identifier: 10:92:0F:3A:33:79:14:5E:87:1B:E0:29:00:C1:F6:C6:CE:94:E6:2D
Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847
Certificate serial: 01994F2E1B743F2A91C449732E3566143901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
Manifest number: 168D
Signing time: Mon 15 Sep 2025 21:00:45 +0000
Manifest this update: Mon 15 Sep 2025 21:00:45 +0000
Manifest next update: Tue 16 Sep 2025 21:00:45 +0000
Files and hashes: 1: 84db03xfYelGerORYCPaE18sIuY.roa (hash: mGsmynBl7jLseJdNkmqKYTcle2kapG2/B7E0rIACZPM=)
2: DWb6WF8DjwRTU0qXDx46BO4zwgA.roa (hash: CzOBQqTqajUkprVoUPDiYGmEDab6x3jR9YCHnFVJudw=)
3: IQ2p568B3nVEj0kGqsQb0pZOiEc.crl (hash: CFTNzKtfQC45+Lo4+BRI7F6wOU716akjrNXGjYTpzFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4f:2e:1b:74:3f:2a:91:c4:49:73:2e:35:66:14:39:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847
Validity
Not Before: Sep 15 21:00:45 2025 GMT
Not After : Sep 16 21:00:45 2025 GMT
Subject: CN=10920f3a3379145e871be02900c1f6c6ce94e62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:32:3a:4a:38:f4:bc:ee:12:f3:1d:3d:b2:35:
d5:b0:05:94:f6:6e:1b:ee:ab:aa:ce:a3:fc:0f:49:
25:d3:cf:f9:89:14:92:56:02:17:d7:8d:8d:46:60:
77:f7:27:53:10:f1:1a:7e:c4:c3:2f:45:46:dd:ed:
0f:ec:53:25:b1:ad:1c:41:1a:66:37:6b:11:d1:54:
ce:17:e7:66:a5:d3:79:44:7c:49:94:92:33:a6:a1:
0f:3d:59:51:53:12:c9:1d:23:bd:eb:a9:35:36:4f:
34:0a:72:cc:da:63:fc:32:9f:02:b1:db:ca:92:bd:
ba:03:06:28:4b:26:b3:2b:7b:80:08:a9:8b:47:3d:
dc:2f:14:fc:1c:d6:ca:be:06:d3:52:2d:43:8e:62:
01:ea:dc:f6:e4:1d:58:45:76:69:d1:67:9b:20:06:
27:0b:3f:6a:c5:56:bb:1e:2a:8e:03:7f:87:09:88:
81:22:16:52:10:e4:09:ee:a8:69:bf:15:2f:84:19:
a3:5d:b9:f9:1b:b6:88:44:48:4f:06:41:ab:7e:f0:
de:10:89:3f:5d:a5:e4:c3:9c:89:73:d0:b9:4b:50:
5a:5c:31:14:ff:79:9d:03:bd:4a:1e:01:4a:dd:dd:
82:e6:6b:0d:b3:7d:71:5d:6c:64:68:c3:37:49:de:
06:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:92:0F:3A:33:79:14:5E:87:1B:E0:29:00:C1:F6:C6:CE:94:E6:2D
X509v3 Authority Key Identifier:
keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:14:1d:ae:16:66:49:d0:32:a0:0f:e0:7b:02:c1:72:0c:ae:
c0:8a:6b:39:aa:34:0b:8d:62:07:7a:46:75:b5:c8:13:fd:3a:
c1:89:f2:20:47:ed:0b:c1:29:2b:72:89:f8:68:7c:f8:2a:b2:
9d:8c:3e:52:38:1f:cd:32:44:87:85:31:64:00:ef:90:eb:f5:
ab:7c:4e:b3:5e:4f:34:ce:18:4e:08:4b:2c:f4:b0:27:6a:dd:
0a:c5:84:73:d3:d7:1f:b2:f1:52:74:da:6e:49:27:40:93:14:
8f:7c:8c:d2:3c:e9:51:7d:81:27:c0:ab:a1:ca:9d:80:25:0b:
64:ea:7c:44:11:78:84:41:ff:87:0d:b5:99:77:3a:9c:50:ed:
ff:22:01:ee:5f:e8:d8:ae:bf:60:8f:e3:cc:61:4c:af:61:88:
98:17:55:7e:9d:c1:c1:af:cf:1d:fe:71:d5:22:aa:d0:7b:3d:
6a:80:32:e5:ed:48:4d:fe:a3:a1:a4:06:1c:5f:17:a8:5f:bf:
3e:e1:28:eb:91:ac:8a:c3:43:cc:bf:bd:95:24:d0:32:b8:ec:
29:87:12:fc:3b:8a:ed:91:34:b0:e0:10:fb:1b:8c:1b:9d:5e:
ef:eb:f5:30:c1:29:4c:0e:32:17:48:a9:13:da:57:9b:e2:b9:
c0:4d:09:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 06:04:13 2025 by rpki-client