Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
File: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft (raw, json)
Hash identifier: IMdJKUWdP0hTFbRZyo2VhZSppuEQOHHhqOP9Jmg5A7g=
Subject key identifier: 26:85:3F:F6:76:43:5F:AB:7A:40:54:39:BC:92:20:EC:6C:39:1A:B3
Authority key identifier: 74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
Certificate issuer: /CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Certificate serial: 0199356EECC75194AE0B9949BFBC1705E61B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
Manifest number: 160D
Signing time: Wed 10 Sep 2025 21:01:25 +0000
Manifest this update: Wed 10 Sep 2025 21:01:25 +0000
Manifest next update: Thu 11 Sep 2025 21:01:25 +0000
Files and hashes: 1: 5GQUPOVGommpVDGycPNjbxgsAD0.roa (hash: FIE52nDWdmLHUw5eNYHFQW5KOb1fH0QVln67hfDRIhI=)
2: As_2g2yroeYldeSEBOBcptHFZjw.roa (hash: 2A+ZAisZSqDWuxJUH2YsftgFU0YaUFKEL3In2EBPDcU=)
3: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl (hash: MI9uQHorlm+gJSzxxMJXTGo+L9D6SKCzxni7p2cNT4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6e:ec:c7:51:94:ae:0b:99:49:bf:bc:17:05:e6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Validity
Not Before: Sep 10 21:01:25 2025 GMT
Not After : Sep 11 21:01:25 2025 GMT
Subject: CN=26853ff676435fab7a405439bc9220ec6c391ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d9:14:c5:04:8e:fd:3a:bf:22:b1:7a:d3:a7:
0d:f2:ca:5b:2a:ec:19:58:96:d3:d9:77:cc:52:78:
0a:b8:28:be:d1:f8:69:06:4a:27:fc:df:53:48:8c:
4f:5e:ab:c3:a3:65:3e:cf:94:5a:14:5d:42:2c:3c:
15:5b:07:90:79:0b:ea:13:31:bf:83:d0:92:07:b1:
fd:b9:5e:42:d2:14:00:1c:ee:14:77:75:b5:5b:32:
92:2b:3e:35:39:67:20:26:a8:00:b0:b7:a5:d9:0f:
fa:df:41:c9:38:c7:57:7c:d4:a9:86:27:5a:e4:47:
4b:be:32:d3:77:19:db:41:65:be:b9:21:58:8e:e3:
09:05:a1:7c:25:48:f7:eb:2e:71:4c:33:f8:77:91:
f9:ab:09:c6:bb:9f:31:a3:7c:ff:c0:b3:41:6c:04:
6d:b8:64:4a:2e:e2:e9:27:2f:31:47:8e:b2:6c:d0:
a8:68:2d:7a:4f:e1:b4:ba:ee:43:85:b4:2e:36:2e:
70:db:b4:d1:b4:0e:59:39:1d:8f:22:24:7e:f4:c3:
ac:84:3d:4b:cd:06:76:ef:10:d1:ab:3d:55:26:cb:
9c:66:3c:25:f5:e4:e7:d4:ce:37:73:81:ed:12:b7:
89:c2:66:21:4f:4d:b7:6f:57:ec:d1:29:e3:b5:99:
26:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:85:3F:F6:76:43:5F:AB:7A:40:54:39:BC:92:20:EC:6C:39:1A:B3
X509v3 Authority Key Identifier:
keyid:74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:89:33:bb:fa:e3:cc:ff:f9:a9:1f:56:eb:2a:d0:de:b1:d6:
c6:f1:51:c3:e1:95:86:5f:9b:9a:fd:83:8e:0a:7a:7c:3a:15:
7d:b2:9f:43:29:37:9b:fc:29:1e:cd:16:1f:4c:dc:b9:70:bd:
3e:c5:d5:f0:eb:17:c4:cd:8a:77:ba:75:0c:f4:d0:51:52:67:
0a:66:8b:f3:09:fc:48:34:6c:4e:22:2b:24:fa:b5:65:ba:a7:
ca:79:8a:97:cf:aa:24:75:13:6b:35:3f:26:71:b0:1e:d3:65:
6a:7c:5d:59:fb:90:2e:85:f7:c4:93:4c:7c:fb:77:fe:68:5a:
2f:c3:d5:ce:73:13:57:72:d6:72:49:86:71:df:f1:c3:bc:cb:
a4:24:01:d2:3a:6a:d5:00:c8:80:aa:3a:7e:7c:3c:dc:37:6c:
c6:ed:39:36:07:e9:bc:5d:50:1f:fd:67:2a:1f:c6:bb:2d:e1:
e6:98:19:e7:a6:1a:1e:73:cf:6e:ec:d3:df:6e:b1:f5:97:b0:
34:75:16:cc:80:0a:30:55:59:8d:11:27:c7:68:1d:2f:d6:8b:
75:d2:e2:f6:ca:93:7a:cf:bf:46:2b:9c:63:27:45:80:90:c3:
ea:37:31:b2:37:32:c1:a3:7f:da:62:2e:54:29:ef:b5:71:8a:
c6:bc:d8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:17:59 2025 by rpki-client