Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
File: diY1mUnOzyQYxaLbIayrhd2Rk9g.mft (raw, json)
Hash identifier: Ezwf3fBWoYyarGRM+c2383hsdrYDRTNvFqauPG2A4SE=
Subject key identifier: 00:37:4D:33:FA:CB:CB:05:71:D7:6D:83:BA:1B:5C:28:0C:72:AD:D1
Authority key identifier: 76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
Certificate issuer: /CN=7626359949cecf2418c5a2db21acab85dd9193d8
Certificate serial: 0198D515983B7BE8013C318865FA61CD09B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 04:00:18 +0000
Manifest this update: Sat 23 Aug 2025 04:00:18 +0000
Manifest next update: Sun 24 Aug 2025 04:00:18 +0000
Files and hashes: 1: 808eb-9aLu41roSMSaHO8r-sCJ0.roa (hash: rCM5eGiyr6wuq7y0i6XZdzgH6YJOrFxOSIfhu9ZqAu0=)
2: diY1mUnOzyQYxaLbIayrhd2Rk9g.crl (hash: o8aQgagg70trLLraibWT9bSWNIB26ZvuJYZ7oYTERa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:98:3b:7b:e8:01:3c:31:88:65:fa:61:cd:09:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7626359949cecf2418c5a2db21acab85dd9193d8
Validity
Not Before: Aug 23 04:00:18 2025 GMT
Not After : Aug 24 04:00:18 2025 GMT
Subject: CN=00374d33facbcb0571d76d83ba1b5c280c72add1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a5:01:f5:ae:bb:6b:f2:d3:9e:b1:fd:90:ba:
e4:e6:cc:6c:e5:3c:82:a3:ef:6e:98:32:d1:8c:16:
c6:d7:0a:82:73:24:b4:7c:58:b3:77:6e:f0:25:8a:
1b:68:de:d0:30:69:8d:de:aa:98:ec:e4:ab:71:05:
11:f8:83:85:2d:ea:24:4f:f1:06:de:c1:60:43:5e:
65:6e:7b:72:73:6b:eb:5d:2d:8d:59:8e:13:f4:d2:
36:d3:83:2f:97:20:fb:75:9d:0a:76:89:8a:a6:bb:
c0:73:c1:ca:77:55:43:ff:b4:5d:f2:5d:59:12:7e:
26:32:28:68:4a:6e:ba:44:3a:eb:89:04:f5:ba:78:
e8:3e:f6:23:03:e2:68:cb:53:5d:a9:3d:f3:8a:69:
eb:50:2f:bb:d4:f3:89:a9:df:c5:a1:e0:e4:39:2d:
43:76:b9:03:d7:82:04:c4:4e:61:0c:c5:ea:b5:46:
16:79:4e:4e:b4:96:68:99:04:7f:3f:a9:98:2d:f2:
20:de:e2:c4:d5:15:da:85:03:1e:9b:b5:d4:36:eb:
70:53:d2:57:30:af:ae:bf:61:ce:b1:93:32:20:28:
97:bc:30:fa:c3:af:3a:17:58:98:14:62:11:c7:fa:
76:c5:03:5f:fe:cf:69:11:ad:38:55:54:5c:a5:ae:
b1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:37:4D:33:FA:CB:CB:05:71:D7:6D:83:BA:1B:5C:28:0C:72:AD:D1
X509v3 Authority Key Identifier:
keyid:76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d9:aa:b0:fd:dc:5d:68:e4:92:6c:35:b3:f6:7d:f0:1e:06:
ea:49:59:82:d4:55:bb:25:3b:51:7b:81:a2:85:56:35:ca:d7:
d4:3f:9d:19:ba:82:d7:33:be:f5:7b:e4:34:60:a9:6b:9e:64:
97:89:1a:e1:42:82:53:62:70:2b:46:e3:0f:b1:29:94:c8:57:
4c:36:e4:f3:b8:ed:99:c3:e9:d7:69:6c:b2:57:47:0a:73:c1:
3b:e9:fb:27:48:e1:23:e5:32:85:45:27:81:e0:24:97:1f:8d:
d7:4c:bd:c2:cf:a3:e8:15:02:cd:0a:2c:84:fa:58:67:5e:83:
c8:75:5b:2f:7c:e0:97:3d:c9:6c:bb:df:e7:7c:57:4b:e3:a5:
cc:85:52:16:b9:d2:58:99:05:f9:8c:f8:4e:b9:87:fd:ba:e5:
ef:30:b3:83:fb:91:b7:91:80:b1:ce:52:09:9c:00:46:4d:80:
b0:9b:54:8f:56:fa:b6:6b:0f:9b:80:4b:da:79:df:d5:95:94:
4b:93:f0:f0:ea:46:a9:ea:50:45:f2:80:61:8b:99:3f:2e:c5:
9d:76:f7:ec:3b:3f:47:25:3f:cd:cc:47:81:85:d2:3f:0e:f6:
4a:6f:f9:ed:77:34:32:54:9a:1a:69:d1:af:06:6a:07:5a:ee:
99:69:4d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:09:50 2025 by rpki-client