Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
File: iX2mABsSODBo_nGjD4zyhcZoMP4.mft (raw, json)
Hash identifier: eHkUHTQ8IpluP7pjTLvyk5JudgDwMgtCLrS23hFtgds=
Subject key identifier: 7D:2B:7F:47:47:AB:63:82:F3:03:B1:40:C7:5E:72:74:EB:E1:3C:A5
Authority key identifier: 89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
Certificate issuer: /CN=897da6001b12383068fe71a30f8cf285c66830fe
Certificate serial: 019918768FD5076D6A67534D16BF3E53DA20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
Manifest number: 166D
Signing time: Fri 05 Sep 2025 06:00:47 +0000
Manifest this update: Fri 05 Sep 2025 06:00:47 +0000
Manifest next update: Sat 06 Sep 2025 06:00:47 +0000
Files and hashes: 1: 9Xk925SUUXfLnbw9FBp9N3qLdfo.roa (hash: Ly02I9+k8vuMGWxnQ136VFvx8sd3hejXT82bKGKV7BM=)
2: PHa1bwg0jlW9wU-ZxMrg4KmG4Zc.roa (hash: sT+3KqlrpBwNw2te0UajmvKsMUapvIEs9YfpHeq4XGU=)
3: iX2mABsSODBo_nGjD4zyhcZoMP4.crl (hash: 2y+7TnyI6WQEstiQIn0TWfIXkI+iqlGVUe5kOySayPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:76:8f:d5:07:6d:6a:67:53:4d:16:bf:3e:53:da:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897da6001b12383068fe71a30f8cf285c66830fe
Validity
Not Before: Sep 5 06:00:47 2025 GMT
Not After : Sep 6 06:00:47 2025 GMT
Subject: CN=7d2b7f4747ab6382f303b140c75e7274ebe13ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a8:04:4d:4e:57:30:9f:95:78:f5:6c:92:be:
e4:ec:7f:eb:65:50:a0:e0:33:17:b6:56:7e:fb:2b:
4a:75:85:39:11:5b:85:46:8c:a8:d1:48:54:17:cd:
4e:c8:88:b8:51:db:90:a2:8e:da:7c:e3:80:23:89:
b8:a4:e8:e8:9c:24:17:5f:fa:5f:96:91:0d:c9:74:
51:ff:80:ae:b1:70:62:a0:7e:3c:85:3e:c0:7c:fb:
1e:7a:88:65:9e:d6:e9:00:a5:d2:05:28:00:8a:21:
dd:6f:60:93:a2:fc:d0:f1:83:d0:ee:85:93:fc:6a:
65:76:6c:5b:58:ae:b8:81:f2:24:34:65:a7:29:7e:
d9:6a:79:64:22:72:bd:a2:5c:e0:e6:ba:d9:c7:a2:
bb:bd:32:90:85:29:4c:f2:c7:2b:e1:ca:d1:f7:ac:
68:41:7a:1c:34:13:dd:dc:8b:29:42:4a:53:f5:f2:
ff:6f:22:ee:5b:4c:22:23:68:37:2a:8f:ce:ee:9b:
3f:27:a5:d3:e3:1f:6c:f6:96:6f:28:3b:52:14:2a:
b3:65:cb:8a:e3:57:29:02:79:e9:66:38:a0:4f:86:
b9:e7:e7:56:37:a1:fb:10:8a:5c:8e:55:c1:10:d1:
8a:45:3f:f1:86:39:3d:3c:73:01:fd:75:89:8b:ab:
41:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2B:7F:47:47:AB:63:82:F3:03:B1:40:C7:5E:72:74:EB:E1:3C:A5
X509v3 Authority Key Identifier:
keyid:89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:5a:67:b1:2a:c9:48:4d:cd:05:e8:86:7b:99:59:a7:6b:56:
5f:3c:e0:b2:f3:6a:f3:93:45:6f:fc:f1:2d:79:16:d5:2e:ea:
80:25:9e:9b:aa:f2:50:d7:8b:c2:ef:96:6b:d7:97:c3:5f:2a:
b9:f1:11:72:2f:90:1c:04:e3:c4:76:18:d9:17:f3:8b:63:05:
5d:4f:ce:6d:80:ce:ad:ad:1e:3e:58:56:7e:54:76:98:f8:fe:
ea:f1:16:1d:e9:c7:ac:8a:1d:b4:48:70:cd:46:8d:ba:5c:01:
e3:eb:99:e7:11:30:7e:c5:9b:a2:7f:c2:90:3e:c9:de:96:19:
c3:2b:5e:54:2c:e9:bd:ad:66:89:5f:fa:81:53:59:46:32:90:
2a:24:96:49:e8:e1:72:96:e1:6f:28:5f:04:ad:85:af:f2:39:
65:89:57:9d:1e:c6:0d:cc:8e:85:32:37:31:ed:ee:b9:fe:3a:
69:5f:e2:42:a4:05:52:f1:12:73:2d:d2:1e:2e:73:cf:b9:22:
d3:a8:9e:69:57:f0:3b:e5:05:fa:7e:b5:94:81:ac:35:74:af:
58:33:b1:75:72:c4:a4:c2:3a:3c:e3:96:bd:db:4c:00:76:55:
8b:b4:be:4f:96:fc:8c:fb:08:8a:51:9d:95:23:4f:64:cd:55:
6e:26:15:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 11:34:06 2025 by rpki-client