Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
File: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft (raw, json)
Hash identifier: u71DczY6s4IKw+xAuGgz480uRTnL5X8iPXuGhw09iV8=
Subject key identifier: BB:4F:01:64:75:C3:C1:5F:7D:E9:C1:A1:10:30:F3:D2:6F:6A:EE:A9
Authority key identifier: FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
Certificate issuer: /CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Certificate serial: 0198D7A986B10463261DB9772BA9F7FBFD02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 16:01:08 +0000
Manifest this update: Sat 23 Aug 2025 16:01:08 +0000
Manifest next update: Sun 24 Aug 2025 16:01:08 +0000
Files and hashes: 1: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl (hash: D9tAJ449wodgAEvF9oQv4KAgsUMX4Zbz4yy9i2OfYlU=)
2: NMUyPdZC5qwvI-uU8yAq__R87OE.roa (hash: wNqu5LklcPh8GK25XCT828wVBYluabvZCKgobN8TPqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:86:b1:04:63:26:1d:b9:77:2b:a9:f7:fb:fd:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Validity
Not Before: Aug 23 16:01:08 2025 GMT
Not After : Aug 24 16:01:08 2025 GMT
Subject: CN=bb4f016475c3c15f7de9c1a11030f3d26f6aeea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6a:78:18:a0:a5:59:8e:c8:c2:70:34:61:87:
4e:98:c2:e7:7d:12:8e:74:8e:77:48:7c:5b:ff:57:
94:b9:3b:39:19:83:ee:99:9a:ee:83:94:55:fc:1e:
a4:d8:a2:b6:70:3b:71:31:50:9d:a5:db:d4:87:7e:
95:30:05:45:7a:fa:66:e6:83:82:6a:40:28:aa:bf:
da:1c:f5:1e:29:ac:03:e9:e9:b4:8f:b3:ee:37:3d:
98:83:c0:d1:a0:06:f4:19:93:55:e3:ca:e7:d4:e3:
83:15:31:58:e9:22:19:45:d9:1f:c7:b4:b8:7d:62:
83:3f:07:a4:0b:9e:e7:3c:77:c4:53:48:a8:c7:3a:
54:99:5b:5c:96:f7:40:81:73:71:4f:38:dc:78:a1:
bb:13:2e:00:d0:86:40:56:29:cd:dd:c4:62:8a:e2:
b5:02:e4:ec:ab:00:6a:21:43:3a:a9:58:13:85:b6:
80:54:ee:d0:5f:25:3f:4b:0e:14:49:8a:61:5c:43:
db:98:37:c4:f9:38:45:0e:fb:02:f3:58:85:fa:b9:
f8:56:8a:10:2a:42:40:e7:58:a5:7a:66:da:80:cd:
a4:34:cb:86:68:b8:59:e1:31:7b:3a:b7:88:71:11:
f0:19:59:9c:98:42:db:40:80:20:42:e1:dd:15:85:
a7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4F:01:64:75:C3:C1:5F:7D:E9:C1:A1:10:30:F3:D2:6F:6A:EE:A9
X509v3 Authority Key Identifier:
keyid:FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f7:35:b9:f5:8a:46:b3:17:8c:da:20:ea:b8:76:13:be:0c:
0e:26:01:6d:41:9b:d1:a9:f3:48:4b:51:e2:e3:1a:44:1b:eb:
2d:bc:23:64:08:c8:5c:4f:45:87:50:f5:b8:27:bc:81:61:c6:
9a:ea:74:37:d0:cf:fe:bf:30:15:de:36:b6:9f:3b:46:4d:39:
c8:b4:7e:b5:05:2e:8b:e8:3c:91:0a:36:14:08:7b:e2:61:46:
f8:02:96:a6:f0:fb:0f:ac:0f:dd:ea:3f:bf:2e:ce:9e:95:21:
69:2c:7e:7f:d8:d1:58:87:50:db:fe:ac:4d:fb:ec:7c:ff:78:
eb:61:76:cf:f4:ae:d4:1a:a2:2c:f9:78:d5:54:aa:29:cd:46:
ff:a6:30:92:6b:b8:d8:65:6b:6e:7a:27:a6:ae:e9:f6:71:16:
1e:8d:01:be:7c:c4:98:f8:37:2e:4a:f7:5c:3a:c7:0d:4e:ce:
ea:6d:75:be:57:2c:28:b2:25:48:85:a5:95:62:cb:03:94:65:
c5:5a:27:63:8d:57:58:41:33:9f:1c:96:f2:a1:98:8d:27:3b:
ab:32:80:6d:7e:2e:e7:88:51:b4:a0:f4:e3:70:ad:84:b7:65:
03:46:68:41:5d:39:dc:dc:9a:84:ab:32:be:e6:f8:d5:99:cf:
70:2a:43:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:41:37 2025 by rpki-client