Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
File: IURHLRaXNp2DK6Em5eFyMqzV9fM.mft (raw, json)
Hash identifier: 1EdXrfgnu9/LZo7KL6L1BOssrIh93PMLwn8+QjsZm7U=
Subject key identifier: BE:E2:E1:3D:92:EC:4C:A1:BF:A6:F8:A9:B0:B4:FD:DB:4F:C6:E0:ED
Authority key identifier: 21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
Certificate issuer: /CN=2144472d1697369d832ba126e5e17232acd5f5f3
Certificate serial: 01993680B44AD1B6AB1C980E61DF6BE0726B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
Manifest number: 167C
Signing time: Thu 11 Sep 2025 02:00:28 +0000
Manifest this update: Thu 11 Sep 2025 02:00:28 +0000
Manifest next update: Fri 12 Sep 2025 02:00:28 +0000
Files and hashes: 1: IURHLRaXNp2DK6Em5eFyMqzV9fM.crl (hash: dpEbWvxn6SEzqdXOpmuAVGUlGYTD3oz6msb39AbF5g0=)
2: jxP3zWsY1gZpCGxBiysaY7EpSc4.roa (hash: 8YozH8Bcb75tXVAEGcttViIiDw3bZdzWBPyjFnX3Zdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:80:b4:4a:d1:b6:ab:1c:98:0e:61:df:6b:e0:72:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2144472d1697369d832ba126e5e17232acd5f5f3
Validity
Not Before: Sep 11 02:00:28 2025 GMT
Not After : Sep 12 02:00:28 2025 GMT
Subject: CN=bee2e13d92ec4ca1bfa6f8a9b0b4fddb4fc6e0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c5:e4:11:8c:5d:f9:7c:ad:a8:a4:bb:4b:be:
32:68:79:0d:10:30:94:1d:4e:63:57:5e:4a:58:3d:
6a:aa:e2:61:ae:59:3c:2d:eb:da:9a:7b:39:cf:bd:
64:7e:2e:4f:a6:4c:75:04:1f:06:f2:5a:e4:d8:db:
b7:04:14:d6:e3:bb:4f:69:95:e1:45:94:e9:db:4e:
88:d8:e3:21:7e:f2:e8:d3:7c:6f:c4:d0:68:43:09:
6a:bf:60:6e:88:d3:7d:f9:c4:d3:db:57:56:58:21:
38:35:32:d7:5d:cb:fb:63:b4:eb:53:7a:91:47:5e:
65:6c:34:55:2a:76:d3:65:a6:ba:23:0e:93:a7:1e:
44:76:1e:b5:66:20:1a:2a:1f:01:5f:10:2c:12:4a:
21:96:74:2b:02:c5:1a:6f:60:31:a5:e3:4f:cc:f1:
39:75:eb:4f:7e:e9:fd:25:6c:1b:e3:f8:2e:a1:fc:
bb:7a:11:cc:bd:af:5d:da:d0:00:58:5c:a6:b6:e7:
58:44:ae:ca:82:43:1b:36:c0:50:cb:eb:be:48:10:
25:8a:2b:98:98:3c:e9:3d:01:02:63:70:47:7f:da:
4a:e5:c3:9c:f3:c8:6b:de:f6:66:14:22:0f:c7:eb:
77:45:07:13:20:fc:2e:a3:0d:6c:2c:0e:c1:b8:bf:
e0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E2:E1:3D:92:EC:4C:A1:BF:A6:F8:A9:B0:B4:FD:DB:4F:C6:E0:ED
X509v3 Authority Key Identifier:
keyid:21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:97:66:98:19:5f:15:b4:bc:ef:75:7d:b4:9a:b7:32:c6:73:
01:cc:2d:c0:8e:cf:af:80:ab:46:ef:cd:8a:67:98:b2:48:ea:
07:8b:13:f7:d9:50:93:76:dc:eb:e0:9e:84:6b:ee:24:46:a3:
97:25:b1:5d:14:84:ba:c5:fb:6a:59:e6:4a:b8:8f:85:c2:c1:
52:73:f8:b3:f3:ae:2a:ea:72:ba:b0:92:93:fa:68:6e:eb:06:
ba:02:26:57:69:4f:8d:8a:04:32:d3:70:25:de:e8:0d:9c:a1:
e2:0d:db:11:f4:e8:12:59:23:f2:6d:2f:b2:ae:fc:48:44:35:
df:4d:2f:16:0b:10:8c:d6:f3:51:79:d7:6c:07:d0:1e:35:42:
49:04:20:25:46:86:a2:b4:2a:ce:73:7e:51:2e:e3:5f:16:81:
3b:97:2d:17:97:57:0e:b8:c3:9d:89:20:d4:b7:fb:f1:67:24:
4f:1f:b9:73:07:f2:26:17:0e:42:e1:f4:30:6c:01:b8:60:cd:
81:a3:23:e4:e5:4b:80:17:46:f4:76:7f:da:4f:5f:a0:ce:31:
be:b5:29:c2:d2:53:39:d5:1a:90:a7:7d:80:65:b5:ed:47:73:
43:95:1f:bd:7b:ad:a4:06:4c:c2:65:cc:d7:a4:fe:83:0a:68:
0f:35:df:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 12:03:39 2025 by rpki-client