Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
File: rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft (raw, json)
Hash identifier: lPKCUMAbJZHohIsiIbgSi8HT3OIw3ycajEOer+4XmDQ=
Subject key identifier: B9:F0:81:55:95:9F:29:E1:76:2B:05:4A:B7:C9:34:B6:37:24:63:71
Authority key identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
Certificate issuer: /CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Certificate serial: 0198D4736E564C037E2173E0FD2613DEF08E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:03:11 +0000
Manifest this update: Sat 23 Aug 2025 01:03:11 +0000
Manifest next update: Sun 24 Aug 2025 01:03:11 +0000
Files and hashes: 1: 5qbm6M-eiAs3Sax8KVJ3oyYfrrQ.roa (hash: wspJkKAHBhU/iiN7eXAG5eZQY0gy2K4ZxvhHdsXT2dg=)
2: KDzLGK1Ms1rQ3Sinf5MNoTfrlLk.roa (hash: bPUt0It2HOIJBVKWWo3dmSTmayPGgOml6jz8Zt5aBJ8=)
3: PfTK_laJnQS_hWcI1miH8YmD3XU.roa (hash: YfjG5i7yzO8QQ7ZO7iDAmyK16Fyt++8WwP+MEzSCTdY=)
4: ltmkR62UHp9Wf_efPpxh7HmSnT4.roa (hash: E1AG/jlqYwJrU9a3m+x6UqkYK+Xlbaxzv/rFzMbFu1E=)
5: rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl (hash: TJrfHlM87zfnVwxmQZyjxeGpG8YHQCbNbdUFE7xi33U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:6e:56:4c:03:7e:21:73:e0:fd:26:13:de:f0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Validity
Not Before: Aug 23 01:03:11 2025 GMT
Not After : Aug 24 01:03:11 2025 GMT
Subject: CN=b9f08155959f29e1762b054ab7c934b637246371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a9:14:6c:e0:bd:b7:33:ab:90:94:4e:77:da:
d0:1e:8b:ed:42:90:67:c1:6c:e9:0e:28:28:e6:ec:
03:4d:56:9d:6c:a7:06:db:f3:36:e4:63:cd:b4:ff:
d7:bb:aa:94:2f:13:41:36:6f:59:68:99:9d:69:f7:
1f:b5:0b:2c:fe:8d:f1:0d:c2:b3:33:bb:63:a2:44:
31:c8:ba:34:9c:5b:c6:d9:40:86:ec:80:79:3e:58:
8f:0e:f7:d0:83:20:f0:e2:4c:0e:52:5b:32:95:43:
83:28:25:8c:ba:3c:e8:53:b2:34:1e:12:f0:86:d9:
43:e9:1b:8b:78:b9:bb:ff:5b:6b:c4:ba:c7:47:6f:
89:cd:9c:c4:69:83:50:46:58:8c:ed:f3:7a:c4:fe:
ca:47:f4:cb:c4:0f:e0:23:ad:19:9c:be:35:b9:af:
f6:a0:e5:a5:b1:eb:7f:ec:f6:bc:39:9e:f1:49:c5:
dc:2e:0e:f7:05:6e:0c:98:aa:81:74:06:9f:ae:a9:
b6:22:e8:5e:14:29:f5:90:ae:2a:09:5a:67:b1:5a:
7a:88:56:31:84:0a:3e:e1:c7:c1:47:a3:9c:00:8b:
91:1d:86:58:aa:a1:f6:bc:bf:e7:c6:a0:4e:d6:fb:
e7:95:e7:cc:2b:e5:cf:69:9c:3c:b3:df:6e:46:91:
0d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F0:81:55:95:9F:29:E1:76:2B:05:4A:B7:C9:34:B6:37:24:63:71
X509v3 Authority Key Identifier:
keyid:AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ac:6e:7d:15:76:08:4b:8b:3c:f2:4c:b6:2a:82:03:e7:e6:
97:36:be:bc:d9:92:c6:5a:e0:3e:18:d8:10:70:c5:a9:66:d8:
f0:f8:86:a0:2a:49:50:36:8e:68:7a:29:17:a1:b7:1f:d0:41:
5b:6e:d1:72:72:52:28:bc:e7:db:09:7e:78:8c:7d:55:ac:a4:
bf:34:cb:4a:6d:6c:22:8d:13:27:c8:ba:89:2e:c9:05:13:52:
59:da:27:8c:10:fc:27:a1:9a:7e:77:08:77:dc:ab:bf:40:01:
df:cd:d8:c1:5d:2b:35:84:c3:bd:09:c8:ea:ad:b2:05:5d:f2:
c6:3b:fd:9e:b3:6e:32:e2:04:c4:52:80:90:d0:9e:7a:46:83:
4c:da:b4:89:40:85:b7:74:be:9d:49:f8:95:76:92:34:1a:c2:
89:e4:e7:21:64:2a:3b:99:96:02:92:42:eb:68:a6:45:f9:76:
0b:f0:8f:b5:3a:52:eb:f3:46:57:cc:fb:c0:16:40:fd:a6:98:
52:68:c4:bc:7f:da:3a:31:e2:f0:76:58:87:6a:5a:1c:09:d6:
0a:3b:bb:02:68:e1:12:a5:05:a5:a1:de:83:5f:1b:42:95:af:
f9:8e:23:85:23:d9:52:c4:90:50:76:3a:59:b6:ee:84:06:e8:
bf:a4:a0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:25 2025 by rpki-client