Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft
File: ILDaIC0sNKRzptdq8JPo3gMRuVs.mft (raw, json)
Hash identifier: 9xd/jsz4V5W0bOWioGVbOQBtMsPoql+db2yQLaGI/d4=
Subject key identifier: 97:C1:DC:BB:A2:04:33:6B:85:07:23:CF:2C:BB:EC:4B:AE:09:F7:56
Authority key identifier: 20:B0:DA:20:2D:2C:34:A4:73:A6:D7:6A:F0:93:E8:DE:03:11:B9:5B
Certificate issuer: /CN=20b0da202d2c34a473a6d76af093e8de0311b95b
Certificate serial: 0198E264528CEC7E094CD9C2957CBFD4B608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILDaIC0sNKRzptdq8JPo3gMRuVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft
Manifest number: 164F
Signing time: Mon 25 Aug 2025 18:01:21 +0000
Manifest this update: Mon 25 Aug 2025 18:01:21 +0000
Manifest next update: Tue 26 Aug 2025 18:01:21 +0000
Files and hashes: 1: ILDaIC0sNKRzptdq8JPo3gMRuVs.crl (hash: FzPiwkJ6vGPIUK0pL7TVcRTsGsnJtttpJs1JujZZF38=)
2: cznyJUVo486opCfwPRwYW5a-bCI.roa (hash: yeo9giLM4O/29X7azlP3H7yqqKlzXfDMEa/1/AZBMhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILDaIC0sNKRzptdq8JPo3gMRuVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Aug 2025 14:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:64:52:8c:ec:7e:09:4c:d9:c2:95:7c:bf:d4:b6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b0da202d2c34a473a6d76af093e8de0311b95b
Validity
Not Before: Aug 25 18:01:21 2025 GMT
Not After : Aug 26 18:01:21 2025 GMT
Subject: CN=97c1dcbba204336b850723cf2cbbec4bae09f756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:08:e6:d2:cc:d4:19:f5:b5:36:33:aa:a9:fc:
ae:7f:c7:ba:cb:75:d2:73:ea:ec:f5:0a:f1:f9:37:
d5:9b:b9:a5:59:9e:4d:5e:c3:10:25:87:c6:27:b8:
fd:c7:e6:cf:24:f1:7f:6b:35:ea:f3:5c:5d:f8:c3:
08:15:f4:23:ef:d8:e5:dd:8e:82:8d:14:f1:83:6f:
63:6c:94:7b:a1:0f:82:eb:c7:6e:22:29:ab:f4:6a:
4d:ec:d4:0d:e4:c0:09:3c:73:3a:71:38:a2:fb:89:
36:50:ce:85:6d:bd:d6:ff:3b:51:2e:92:90:50:7d:
4b:30:db:05:2b:f4:0d:ae:cc:32:5d:cf:10:ae:25:
f4:c2:e1:46:5e:fa:e0:d6:c8:7d:30:13:c4:a9:b2:
6a:3f:4f:1f:8e:2c:4d:da:3c:fb:a7:7a:ba:08:b3:
0f:8a:cd:1d:7e:fb:e5:5b:7f:fe:47:86:90:20:01:
f3:be:6d:35:0a:75:d7:32:22:82:fe:fd:30:a9:c3:
38:ce:97:37:4b:b6:48:f7:dd:9e:48:a0:15:db:25:
a8:7a:66:6d:43:ef:df:b9:ad:26:ff:de:ab:6b:f4:
4b:68:f6:9a:cf:56:7a:f7:fa:6b:b3:62:e0:fc:c9:
08:07:80:d0:a9:c9:51:4d:7f:6a:fd:c9:e6:7d:6f:
00:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C1:DC:BB:A2:04:33:6B:85:07:23:CF:2C:BB:EC:4B:AE:09:F7:56
X509v3 Authority Key Identifier:
keyid:20:B0:DA:20:2D:2C:34:A4:73:A6:D7:6A:F0:93:E8:DE:03:11:B9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILDaIC0sNKRzptdq8JPo3gMRuVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:84:e5:fb:3c:65:e6:75:73:83:fb:94:5c:31:aa:04:7f:c0:
09:9c:07:33:31:ca:b1:d9:d3:d6:10:53:41:3a:df:bd:3b:d8:
4e:14:74:04:4a:c6:31:89:6f:58:56:01:34:d9:65:16:57:f1:
ea:89:0c:ac:f5:34:41:35:78:26:49:e1:d8:7d:71:31:1f:63:
05:9c:16:18:d9:79:4b:0b:22:6d:eb:61:fa:a5:4d:3f:38:9a:
07:49:b4:bc:6e:f2:1c:3d:11:e2:0e:f2:01:00:16:4c:c3:5c:
1f:94:79:de:3e:46:0b:d9:9e:fc:11:83:c0:ad:7c:e5:f8:f1:
a3:82:cd:d5:68:e4:a5:cc:4f:85:3b:b0:a1:71:3f:cc:3b:e7:
7b:33:54:75:bf:0b:d4:2f:d7:ae:6f:a9:5f:2b:39:95:29:1b:
63:00:63:46:7c:50:d9:c0:26:91:f8:7a:9d:a7:75:9f:0a:82:
b8:29:00:97:2d:8b:dd:cf:f3:a9:57:46:93:9b:5b:96:d6:c5:
32:91:2f:c0:2a:25:b3:e1:8b:2c:de:5b:e6:33:24:fc:52:30:
a0:a4:86:a2:12:b6:a6:14:48:83:0a:33:62:23:ed:da:4a:88:
6e:09:50:0e:aa:16:51:62:18:33:34:93:0e:b4:51:80:25:ae:
62:f5:8d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 25 19:42:59 2025 by rpki-client