Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
File: dHWiyViPxpXSdUKD3NPRI9H3eBE.mft (raw, json)
Hash identifier: zgtp7cLznYUxvqs4PXsRxsvggZDPSUxn6GKW6LAB5Qk=
Subject key identifier: 1E:07:FC:52:EB:D7:05:A5:F6:84:54:30:27:A0:FA:6E:39:88:67:B0
Authority key identifier: 74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
Certificate issuer: /CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Certificate serial: 0198D54EB112BF1924140FA44F294C7BB89D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:02:40 +0000
Manifest this update: Sat 23 Aug 2025 05:02:40 +0000
Manifest next update: Sun 24 Aug 2025 05:02:40 +0000
Files and hashes: 1: byfAz36QPO1zWRGDAvBxGCJUgUc.roa (hash: cj5k9JTRqENUIcOxIhQN0l2jcQzpbWQBrAEBDWIt2vI=)
2: dHWiyViPxpXSdUKD3NPRI9H3eBE.crl (hash: fjTtMla2vp+qQYZIMAPM7T07RGRUo5TT9/0gsj+XMHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:b1:12:bf:19:24:14:0f:a4:4f:29:4c:7b:b8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Validity
Not Before: Aug 23 05:02:40 2025 GMT
Not After : Aug 24 05:02:40 2025 GMT
Subject: CN=1e07fc52ebd705a5f684543027a0fa6e398867b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4c:61:50:f6:dd:15:73:45:0e:4b:51:12:e4:
ae:9d:c4:45:e1:77:57:95:8d:5c:c7:55:76:5a:40:
d6:42:d2:8f:8b:92:20:b7:c7:04:b5:c0:da:d7:04:
61:80:a2:af:9f:83:94:7d:41:33:17:8e:53:d5:fd:
be:b6:d4:40:e0:60:6e:dd:e3:8f:d8:b6:10:75:73:
2b:4e:12:15:28:c8:59:ad:1d:03:95:4b:af:9f:8b:
8a:a1:45:3a:12:6c:1d:25:e7:12:3a:ff:ec:b9:22:
8d:0b:f5:f7:ec:e1:b4:51:d5:01:0e:bd:e8:87:8e:
fd:04:d1:bd:7d:21:5f:9e:ec:20:9e:6a:12:e7:18:
9b:c1:10:52:b8:81:65:d4:0f:8d:64:99:c4:f9:c3:
78:31:50:91:7a:83:ac:87:eb:90:3c:50:30:8f:1d:
9e:dd:03:af:bd:91:2b:1e:08:a6:0a:96:65:30:47:
41:28:72:56:bd:5e:ef:31:8d:0d:b5:a2:73:30:42:
e4:bc:f9:bb:36:3a:e5:33:ea:dc:79:b1:b2:cb:64:
97:8c:38:25:85:98:b9:a3:77:95:a6:3f:ff:11:e4:
fe:ed:95:0b:b8:f2:3f:bc:d7:24:8b:8d:f8:66:b0:
20:8e:18:00:63:2b:82:d3:77:b0:b3:57:6a:36:97:
6d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:07:FC:52:EB:D7:05:A5:F6:84:54:30:27:A0:FA:6E:39:88:67:B0
X509v3 Authority Key Identifier:
keyid:74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:d2:8a:1e:00:4b:f6:ef:7d:14:1f:8e:57:e3:ae:46:99:9f:
c1:21:83:a8:25:58:2f:18:0e:05:64:86:8f:08:71:ce:13:3c:
32:46:c2:00:a9:55:7f:13:bb:a1:be:08:97:ed:7e:ef:6b:01:
59:df:0c:7f:0f:ea:a5:90:95:c2:96:d6:a9:8b:af:36:4f:8b:
16:bf:6c:8a:46:5d:4f:c9:a1:68:31:df:1f:c8:7b:ee:42:23:
d1:94:b2:e7:d1:fa:00:b3:17:5e:d7:88:34:ee:2e:6e:b4:81:
b4:3c:30:1f:85:f8:b5:b0:6c:d6:73:d8:5b:31:f7:ca:73:21:
cf:5b:87:48:8c:e3:34:ae:1c:6d:59:21:f6:53:ac:09:82:ba:
78:5f:e5:6f:29:cf:b9:47:2f:9e:31:ff:b5:ae:e1:20:14:d9:
6a:ca:a0:0b:3c:ad:09:cc:62:b1:9a:5f:0d:8e:11:10:01:fb:
06:ad:33:5b:86:6f:0c:f7:f5:5e:b3:a3:14:bb:e8:b4:c2:6c:
2d:bf:cd:26:63:bb:f5:21:22:0e:39:2e:ea:19:87:73:75:aa:
bc:16:2d:b9:c7:0e:0b:93:98:39:fc:bf:e7:2e:93:8a:bc:6d:
75:6e:31:d3:bd:22:60:89:2d:ff:57:34:6e:4f:e3:a1:4c:3f:
55:e1:16:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:49 2025 by rpki-client