Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
File: I_IQvBU0utwI_5R9mTUEcRk1MbM.mft (raw, json)
Hash identifier: IawlbZKLNu43PUgs32TMIHeP9Ti/m3ZHDckvo3yK5S8=
Subject key identifier: C0:6C:D9:89:FC:C9:DF:5A:AF:19:2D:EB:65:16:5B:81:21:8C:F0:86
Authority key identifier: 23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3
Certificate issuer: /CN=23f210bc1534badc08ff947d99350471193531b3
Certificate serial: 0199165154247465B4FC2F55479D3B5CE835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
Manifest number: 166B
Signing time: Thu 04 Sep 2025 20:00:52 +0000
Manifest this update: Thu 04 Sep 2025 20:00:52 +0000
Manifest next update: Fri 05 Sep 2025 20:00:52 +0000
Files and hashes: 1: IQl4HNXKSWovo0ppYzsGnJqwUZ0.roa (hash: I1ThZylWt52H2yyPu4akWSun+BojCZr3Y+wXTnrpft0=)
2: I_IQvBU0utwI_5R9mTUEcRk1MbM.crl (hash: AhY9n8ZpwibTFerV70F9/Xe3vB4NZZzY9yMSBZERrW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:51:54:24:74:65:b4:fc:2f:55:47:9d:3b:5c:e8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f210bc1534badc08ff947d99350471193531b3
Validity
Not Before: Sep 4 20:00:52 2025 GMT
Not After : Sep 5 20:00:52 2025 GMT
Subject: CN=c06cd989fcc9df5aaf192deb65165b81218cf086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f1:ac:1f:f6:3e:41:9e:17:27:54:b9:e0:61:
c9:7e:b4:62:4d:2a:5a:73:f2:d2:0c:9e:79:bb:53:
d1:4a:6a:53:7f:c5:1f:a5:11:1a:41:d6:bc:e4:e6:
7f:47:37:f4:70:ae:03:d0:d7:ff:91:03:26:bd:7b:
98:e3:d2:a9:5d:ef:09:ef:a8:a2:6e:2e:26:f0:9a:
63:37:00:a7:d0:24:93:7c:fc:9e:cf:38:2f:e9:53:
58:f5:90:c2:f4:52:6e:76:6c:e6:9d:3d:d4:a8:5e:
65:08:07:8a:33:cf:f2:4a:da:c3:d7:b5:b7:8b:2a:
45:d3:08:bd:ae:98:b3:ea:95:59:d5:c9:69:88:25:
08:c7:cf:49:89:0f:20:44:ee:55:1e:cd:64:fb:3c:
0e:97:74:a6:c9:e5:43:6a:a4:61:8d:25:2e:64:15:
21:0a:09:4c:60:c6:fc:6a:3e:7e:c1:8d:70:55:aa:
7e:79:cf:c6:91:0f:c3:49:a2:b0:26:35:24:6f:be:
45:6b:bb:ee:81:10:d0:10:d8:b0:e0:da:b5:5e:12:
e5:0e:9c:1c:ce:b3:f7:fd:85:5d:99:41:87:6f:02:
fa:45:0b:73:2f:26:a0:52:7a:ef:49:7c:2f:2c:a6:
ef:d1:83:36:74:56:4c:d1:e1:c6:b6:7e:36:70:a0:
7d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6C:D9:89:FC:C9:DF:5A:AF:19:2D:EB:65:16:5B:81:21:8C:F0:86
X509v3 Authority Key Identifier:
keyid:23:F2:10:BC:15:34:BA:DC:08:FF:94:7D:99:35:04:71:19:35:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_IQvBU0utwI_5R9mTUEcRk1MbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4a67f1-742b-41e3-a60f-11363a2bcfab/1/I_IQvBU0utwI_5R9mTUEcRk1MbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:1c:7c:82:39:ea:ce:89:0b:63:61:e6:3b:ac:a2:31:a3:a1:
b2:f7:34:f4:bb:07:2e:76:18:c6:60:cd:30:35:03:ce:3d:6f:
cb:43:a4:f8:d8:03:80:ec:b1:a4:81:74:a6:f1:29:e0:05:1a:
cf:83:b0:c6:ae:af:df:b7:ff:ae:55:35:67:a5:15:a3:d3:ec:
af:81:5b:2a:bc:c9:75:8f:b7:eb:3e:9b:48:e3:70:2b:83:62:
de:d4:af:3d:81:14:a0:7b:f0:bd:22:17:b0:84:ab:b8:08:11:
e1:ee:4b:1a:de:2a:b5:d1:3b:28:e8:c9:d8:dd:37:b7:c8:20:
04:be:80:b9:29:71:a5:d0:73:c7:6b:9c:3e:a5:73:60:a0:39:
6a:56:d3:13:36:c6:a8:06:4c:d3:84:dc:1d:43:d7:3d:1d:1f:
bd:b9:bd:23:31:54:ed:cb:6d:98:20:ac:6d:6b:3a:ad:cd:5d:
88:b7:24:00:c7:3b:05:8f:ee:01:1f:00:2b:89:15:e8:22:4f:
52:67:ab:7f:93:f7:54:79:d8:98:82:06:9d:85:f9:ed:80:79:
ea:1f:ea:86:83:9c:9c:98:84:51:7d:92:6f:b8:9d:85:1b:84:
47:1b:8d:8c:0a:98:66:e3:c5:0f:e6:ab:99:33:11:a3:01:1f:
5c:7b:ef:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:19 2025 by rpki-client