Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
File: p0msqF3GbIPOVezcBFyWB1yn3rw.mft (raw, json)
Hash identifier: +jv214kiKY0hjjhjhoSrV+eahD84Y6I0avMiGgWWuiY=
Subject key identifier: AD:96:28:E9:F1:EA:F8:7E:38:12:58:A3:14:16:A3:B3:CC:5A:8E:52
Authority key identifier: A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
Certificate issuer: /CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Certificate serial: 0198D472BC16DBE9F88027A3884C298DB941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 01:02:25 +0000
Manifest this update: Sat 23 Aug 2025 01:02:25 +0000
Manifest next update: Sun 24 Aug 2025 01:02:25 +0000
Files and hashes: 1: p0msqF3GbIPOVezcBFyWB1yn3rw.crl (hash: aXI+SjGnjT+ZqBwlmuXqUUDAIJEl0/PEju6ATaEc8hA=)
2: vPW0vOvqthOlHU6_v3sIc5DQ0j0.roa (hash: uvs0104pFwEVBM0nuV6DqiIGUvrkJtwZhdn8IHcJS3s=)
3: wWNRdFWkzsrzPRdYPLpt7t1EH44.roa (hash: jdk5fXDfmvLAmCXB7Op/+o6QmlltLAtxqbK6vg83GwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:bc:16:db:e9:f8:80:27:a3:88:4c:29:8d:b9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a749aca85dc66c83ce55ecdc045c96075ca7debc
Validity
Not Before: Aug 23 01:02:25 2025 GMT
Not After : Aug 24 01:02:25 2025 GMT
Subject: CN=ad9628e9f1eaf87e381258a31416a3b3cc5a8e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7d:87:0f:a3:1f:a2:a7:6b:92:54:a1:a1:a3:
45:89:70:2b:d0:6d:08:ec:81:41:33:c4:de:85:17:
cf:49:2d:de:97:4e:29:5f:be:73:b5:7b:b2:fa:b9:
98:0c:c6:d1:3c:0f:a4:bf:ae:ec:f1:66:3b:27:06:
15:5a:66:80:22:4f:c2:55:25:74:88:2e:20:64:4b:
bd:c3:9d:93:11:8e:06:73:45:2f:15:a1:17:ed:0a:
f3:13:eb:e2:5d:ae:f5:cc:6c:13:3c:16:2b:c8:ea:
5c:4a:9c:9f:db:1d:04:dc:da:7d:6c:cb:f3:70:15:
58:ad:b4:1b:a2:18:82:3d:e0:68:55:cd:ec:5c:81:
02:10:b7:1c:24:de:d9:9d:f0:bf:9f:7f:1c:56:db:
fe:76:6e:c5:ce:b1:13:9e:67:9d:a5:48:fb:1c:57:
a3:e0:5b:ba:53:26:dc:f8:94:7a:f4:c7:64:66:57:
1d:f8:03:c3:55:2f:42:7e:5a:7e:2e:1a:58:1d:e7:
23:5a:42:2f:3c:01:9c:8a:3c:58:97:9e:88:1c:ca:
81:74:65:40:b8:a0:da:86:95:74:e1:03:1c:a0:f5:
19:7c:c3:ff:cc:15:c1:44:d9:2b:84:b1:22:20:9f:
6c:ff:22:c9:5c:29:05:ae:eb:7d:e3:d6:27:70:3b:
02:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:96:28:E9:F1:EA:F8:7E:38:12:58:A3:14:16:A3:B3:CC:5A:8E:52
X509v3 Authority Key Identifier:
keyid:A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:38:4a:94:66:e2:9d:6e:dc:24:f4:91:7e:9f:b1:72:91:4b:
01:c0:90:c5:f7:1d:8b:63:5c:46:ea:31:70:59:01:bd:29:2b:
32:a2:69:9e:27:e6:76:04:70:52:75:44:4e:81:3a:99:9b:2e:
f2:8a:a7:49:11:69:15:36:30:63:2b:88:e2:55:08:52:01:31:
d2:0e:e6:ee:df:58:70:a1:88:60:5c:c8:2a:da:b8:d8:e2:1f:
bd:be:27:74:c5:15:de:bf:10:b3:cf:d1:7d:72:83:4a:87:da:
4f:3b:dc:a2:63:de:ea:03:c6:8a:05:9f:0b:7c:87:ca:f9:42:
44:3f:22:3c:af:82:30:04:5f:80:7d:ce:8d:15:1f:72:39:56:
76:24:58:52:aa:d1:9f:a9:0b:ce:a1:2a:11:1b:2c:3e:fa:60:
dd:ad:5e:45:c9:25:8e:a8:cd:54:3c:55:38:ed:6c:62:08:e1:
d7:46:89:a8:d1:df:76:64:b2:b6:bb:56:f1:ac:12:a8:33:52:
5e:bc:7b:1f:d9:f4:1a:a8:d8:50:19:b5:e6:0d:5c:70:2c:b3:
d3:f9:01:dc:9b:14:d8:4a:f9:12:9c:79:bf:18:0d:ba:48:79:
79:5c:cb:8d:e9:7b:49:bc:37:7a:41:d0:bc:02:59:68:04:e4:
8d:07:19:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:22 2025 by rpki-client