Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
File: tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft (raw, json)
Hash identifier: iID+VKkVFjMQFUta6tsdSSaYeqLac8yD4mW2lhsWt3w=
Subject key identifier: FC:B0:68:20:A8:C5:6F:B2:76:1C:B4:E9:EC:50:61:BA:94:5E:9B:F4
Authority key identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
Certificate issuer: /CN=b4dd6d658e14571e839f7813da31f2217422818e
Certificate serial: 0198D7A8AF6B12FA9BF4B15A6D5FC9C4C22B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 16:00:12 +0000
Manifest this update: Sat 23 Aug 2025 16:00:12 +0000
Manifest next update: Sun 24 Aug 2025 16:00:12 +0000
Files and hashes: 1: i7TTR0PMX6DAq8x2EEX7tvYEy2w.roa (hash: iWmz0ZT2uDCkIA/K5JDubPnWXPlf7zxHizjmswntW2Y=)
2: tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl (hash: fdxQB5W/1XWKG/S+7E2D7UDDMWrcq39ymRIrFnR1+9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:af:6b:12:fa:9b:f4:b1:5a:6d:5f:c9:c4:c2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4dd6d658e14571e839f7813da31f2217422818e
Validity
Not Before: Aug 23 16:00:12 2025 GMT
Not After : Aug 24 16:00:12 2025 GMT
Subject: CN=fcb06820a8c56fb2761cb4e9ec5061ba945e9bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:1e:3d:6f:8b:e3:27:75:1d:9c:53:94:af:
5c:eb:91:dc:4a:66:7b:ad:de:93:e3:5c:aa:a0:35:
38:55:fa:70:78:82:2b:57:b1:62:ab:01:39:60:9d:
7c:28:4e:98:0b:42:39:9f:df:42:18:f8:3b:2c:34:
7c:3b:59:2f:2d:f0:1e:1c:96:f4:50:06:19:21:fe:
8d:b4:33:6d:38:f7:f2:88:32:16:fb:d7:30:16:b5:
88:da:a8:00:f1:49:bb:7e:c9:cb:a7:e5:c8:ca:a4:
2d:83:2b:9d:ef:d6:66:ab:d4:27:94:56:00:a9:7c:
99:df:f9:91:2b:1a:ea:1c:c8:bc:ea:d4:a0:ec:4a:
9c:07:f4:1f:1a:43:92:d5:41:82:21:cc:ee:0d:6a:
3a:6b:b3:58:8a:84:4d:e7:9c:c2:b2:db:c6:96:5a:
2e:62:0d:69:9a:e5:78:11:af:f0:ce:ed:d3:a0:c5:
56:fa:9b:8b:15:92:5e:c1:2b:7e:dc:8b:24:4e:c8:
41:fd:34:b6:e7:72:cd:80:60:d6:83:c7:68:c6:a6:
87:27:28:80:49:92:64:1d:15:9a:b2:39:a0:9b:74:
68:e9:c6:0a:35:a2:32:40:ba:f4:7b:68:d3:87:fa:
4d:71:35:34:1c:f7:34:c5:e0:86:e1:a0:79:c9:b8:
28:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B0:68:20:A8:C5:6F:B2:76:1C:B4:E9:EC:50:61:BA:94:5E:9B:F4
X509v3 Authority Key Identifier:
keyid:B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:bb:73:6d:b7:2b:b9:4f:65:08:df:6b:6c:a6:fa:e0:a9:f6:
71:06:06:29:cd:42:9c:e8:22:ab:85:cb:22:4d:1e:0a:94:b8:
5c:72:ed:b9:0d:50:24:04:0f:32:4e:d7:0d:f4:f3:ec:a0:6d:
84:8d:c9:76:e7:5b:17:44:0b:f8:16:9b:1c:9b:f4:68:92:56:
d4:73:f9:b4:29:3c:21:09:bc:2a:57:48:25:7f:df:bd:34:dc:
dd:37:75:84:0c:ab:d5:f4:0f:e0:24:d1:9c:d2:fb:04:2e:ad:
e2:02:3b:b6:f7:59:38:8c:db:5e:87:ce:a6:3a:c4:30:d2:71:
50:b3:97:58:5a:b2:2d:b6:bc:28:ee:b8:05:21:b2:b4:c3:d6:
d5:c0:02:89:ee:3f:1c:80:2f:22:1a:45:46:50:6f:74:f6:d2:
e7:81:bf:80:13:15:51:82:a8:b6:d3:64:0e:45:9f:ce:ff:dd:
c8:6b:eb:8f:a8:1f:98:a3:66:33:b7:20:f8:58:02:f0:71:f2:
49:ad:15:6f:a7:38:ea:11:ce:54:73:cf:e6:75:09:0c:e5:38:
c8:79:53:19:de:f6:b6:54:37:4e:6d:8b:cf:73:66:73:bb:1a:
bb:d1:57:34:3a:19:cb:12:fa:1a:2d:f2:7e:62:3a:1c:1c:3b:
6f:0f:c5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:09:52 2025 by rpki-client