Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
File: 88t3pwdfknzEAY1W5s11xZjcOlE.mft (raw, json)
Hash identifier: TCLl0UVMJccAEgu7CagdKKdOr4Y4GJ8xO++74z1bSE4=
Subject key identifier: 60:02:4F:4D:3D:3B:FF:CB:17:2E:05:FB:7D:2C:22:4B:1E:A1:58:70
Authority key identifier: F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
Certificate issuer: /CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Certificate serial: 0198D4E0AB453A43E70CDBAF0B214E40A195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 03:02:30 +0000
Manifest this update: Sat 23 Aug 2025 03:02:30 +0000
Manifest next update: Sun 24 Aug 2025 03:02:30 +0000
Files and hashes: 1: 88t3pwdfknzEAY1W5s11xZjcOlE.crl (hash: izmCcQtUzJ/1ZGnq/9J4O46lKgNnbMlZ0vZxXjCMZrk=)
2: HuqhC6vYeI3U9LbLd2vPzvJJgjY.roa (hash: wSYDAGLK1hTNyvlQrxhKmWYaQ0H+BBeF5/EeuiOBKAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:ab:45:3a:43:e7:0c:db:af:0b:21:4e:40:a1:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Validity
Not Before: Aug 23 03:02:30 2025 GMT
Not After : Aug 24 03:02:30 2025 GMT
Subject: CN=60024f4d3d3bffcb172e05fb7d2c224b1ea15870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:2c:3c:cf:c4:f0:ca:a8:81:d3:92:b3:48:
f8:65:45:4a:cf:e4:15:42:e4:fa:8c:02:6f:c8:4c:
cd:0f:6a:30:e5:1f:c6:88:29:58:54:d8:70:32:66:
c2:bc:f1:c4:83:9f:db:c1:ab:3c:20:9e:bd:66:2b:
2d:71:fc:43:a5:14:d3:5a:24:81:27:34:67:8a:c8:
56:d8:1a:5f:67:4f:04:25:34:ac:a9:e4:23:a0:a0:
06:f7:e2:be:4f:e2:17:fb:8d:17:6d:e7:f7:19:4d:
11:7f:c7:0f:2c:ce:a4:01:f1:45:53:e1:8d:92:11:
52:b5:37:3a:21:7d:2f:00:b3:76:8d:ce:a9:d1:d2:
4e:97:28:1d:e0:8e:a0:13:2d:2b:0d:38:07:09:ed:
f9:0f:f5:52:05:c1:6f:29:e9:6b:5e:12:81:0a:55:
7a:d5:e6:d5:ba:e5:0d:28:9a:e9:7a:fe:f7:47:ec:
22:88:72:55:47:a2:a1:ea:d2:31:5f:f0:c9:19:58:
71:f8:60:27:2d:06:2d:6f:04:bc:c8:b5:19:18:b9:
39:40:66:77:51:21:24:56:1a:cb:07:b5:90:63:b7:
05:73:b5:a5:da:5b:9b:e7:7b:29:85:7f:db:46:f7:
e5:be:42:c6:de:41:f2:8b:c0:5d:4a:b5:c1:ba:ab:
9c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:02:4F:4D:3D:3B:FF:CB:17:2E:05:FB:7D:2C:22:4B:1E:A1:58:70
X509v3 Authority Key Identifier:
keyid:F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:82:20:90:99:a0:c8:bd:c8:93:94:f9:53:4b:85:bc:d2:5f:
d0:15:fa:6b:5c:ab:56:05:7f:9a:db:d8:23:f8:f6:6c:1e:77:
a9:aa:97:f5:f3:51:2f:9a:ce:b2:8a:08:43:b2:d0:7b:ed:64:
d3:fe:73:4d:1a:a8:4a:19:0c:52:12:aa:42:5f:f4:40:7d:6a:
eb:56:91:fd:c8:ee:38:1a:c7:e7:bb:ef:cd:1a:9e:96:13:c7:
3c:d8:78:79:e1:e3:df:7e:f0:8d:04:7e:f1:4b:e2:30:ae:18:
ae:86:d9:ac:ce:a4:e9:3a:f9:21:43:31:2f:46:8e:fe:3f:78:
3f:4d:4d:64:c3:37:1b:c5:79:9d:b5:9d:d5:30:b4:6b:f6:6b:
4e:3c:19:cf:e2:a6:9d:59:1f:ec:06:c6:ae:ee:8f:af:63:fb:
5e:b3:9c:07:28:6f:15:46:81:8b:ff:fb:23:1b:61:50:3f:cf:
7e:c0:fd:59:e7:54:2b:12:6e:ad:81:49:78:f2:79:5e:be:55:
25:ac:22:ba:c9:a2:bb:33:46:ff:7e:e6:64:32:29:81:30:07:
97:1d:94:d0:4c:f5:e4:42:ac:18:7c:26:02:6c:97:4f:b9:4c:
85:ca:68:49:b8:ce:80:68:a9:d0:38:47:80:65:70:e1:17:70:
5f:1e:aa:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:43 2025 by rpki-client