Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
File: ilUqhuMbaeXVMg7egdNLsSikXO4.mft (raw, json)
Hash identifier: NjcpIapmVIlraJz6JJ0v+BfM1fcxlkRWCwqdBLIUjt4=
Subject key identifier: C4:3A:9D:CE:4D:5C:D3:70:75:C6:02:BB:FB:B7:1F:42:9E:3D:36:64
Authority key identifier: 8A:55:2A:86:E3:1B:69:E5:D5:32:0E:DE:81:D3:4B:B1:28:A4:5C:EE
Certificate issuer: /CN=8a552a86e31b69e5d5320ede81d34bb128a45cee
Certificate serial: 019922C3210E3D74FAFB3F251FEAE55874B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 06:00:37 +0000
Manifest this update: Sun 07 Sep 2025 06:00:37 +0000
Manifest next update: Mon 08 Sep 2025 06:00:37 +0000
Files and hashes: 1: gx1SCX17EN8yNFFOaZKqHyy38bg.roa (hash: y86l006aIRQbh6g6sMv1/V04L9sTmUKHfB0xrZAQk4Q=)
2: ilUqhuMbaeXVMg7egdNLsSikXO4.crl (hash: Y0IVB/bZpRg23qDjiBtJK+EfMADinhiPLSDrTHwMUQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:21:0e:3d:74:fa:fb:3f:25:1f:ea:e5:58:74:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a552a86e31b69e5d5320ede81d34bb128a45cee
Validity
Not Before: Sep 7 06:00:37 2025 GMT
Not After : Sep 8 06:00:37 2025 GMT
Subject: CN=c43a9dce4d5cd37075c602bbfbb71f429e3d3664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:36:d0:5c:75:98:88:61:ea:74:aa:8e:8b:
ed:f1:8f:7f:da:26:b6:60:15:0e:4d:c7:36:1d:e0:
27:57:af:08:7b:72:c3:95:03:ca:cb:dc:8e:71:ef:
9e:eb:61:55:2e:2d:05:5c:e8:c4:f0:d9:e1:0d:52:
4c:1f:0a:f0:2e:f0:52:11:18:fb:e0:e8:6a:9c:9f:
34:03:82:c4:90:44:a4:22:37:f1:d7:8f:8e:e5:a9:
b7:e1:bf:35:42:9c:a2:65:ee:40:ff:11:5c:7d:99:
ad:49:46:8f:34:f7:7c:89:bc:e9:fc:11:75:17:16:
ae:69:ea:30:56:0c:fd:33:2f:70:d6:dd:bf:4d:93:
d1:31:18:8b:be:3a:b4:3b:03:1c:29:8c:3f:08:4a:
5b:59:ad:1e:8f:55:54:28:0a:8b:33:17:3a:a5:da:
17:3f:21:22:03:4a:d7:e5:38:39:f7:25:d2:13:df:
8c:2d:b3:26:f2:98:3c:e5:80:13:a0:75:d1:1a:a2:
0a:81:13:6b:8a:23:5e:5b:d8:10:7d:2e:c1:d8:57:
df:b7:64:01:43:dc:14:79:30:d7:0e:3d:ee:61:66:
c4:77:df:1a:b1:89:09:9c:6c:00:63:8a:2d:db:98:
8a:01:49:ff:f0:0a:15:c5:c1:25:80:8e:d8:3f:10:
9a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3A:9D:CE:4D:5C:D3:70:75:C6:02:BB:FB:B7:1F:42:9E:3D:36:64
X509v3 Authority Key Identifier:
keyid:8A:55:2A:86:E3:1B:69:E5:D5:32:0E:DE:81:D3:4B:B1:28:A4:5C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilUqhuMbaeXVMg7egdNLsSikXO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e954b9-8738-4496-89ad-78a126bf0adc/1/ilUqhuMbaeXVMg7egdNLsSikXO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c2:d9:f2:4d:0d:d3:6e:93:cb:94:d6:d9:15:f0:81:a0:ea:
db:a9:27:c5:aa:cf:19:42:6e:61:e8:30:f4:42:84:d2:c2:46:
b8:8b:62:11:31:d3:80:2e:60:8f:c4:e0:6c:3c:f6:c3:38:0a:
72:c0:aa:c4:90:44:af:d7:a0:4b:87:85:8c:5e:c1:58:55:f3:
bf:0d:3d:d5:a8:bc:e7:96:6d:45:12:4f:0e:77:3b:02:86:00:
95:de:f0:d8:2d:67:13:00:68:97:00:e5:8e:48:82:62:37:e3:
a6:35:4e:89:1c:0d:20:31:a6:b9:26:cc:99:05:40:20:dd:de:
65:69:dc:34:f4:7c:30:74:95:eb:f2:3c:2b:7a:3b:87:95:37:
b0:1b:75:14:ab:bc:04:ed:bc:0d:d7:2b:e5:54:01:22:c0:13:
95:c7:ba:3f:cb:af:76:97:fd:6d:60:42:fe:b1:ea:b9:77:73:
ac:e0:ad:2f:ba:ef:c3:0c:ba:37:ed:37:98:8a:26:21:53:73:
1d:df:64:9e:ce:e6:4b:5e:23:83:c7:26:fb:66:78:07:34:51:
4c:57:5a:80:f7:87:92:ad:2b:26:9d:89:e8:8d:d8:90:be:e1:
36:14:15:b7:3f:ad:8c:a3:b2:9c:a5:96:45:fb:5d:f0:3c:b2:
69:d9:9b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:43:46 2025 by rpki-client