Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
File: RsyrdHmk4NikF3NQoAppvYg7BI0.mft (raw, json)
Hash identifier: mjMMfCygc9r/AjbrdASbJDGswn6taUeVOqteM25khEU=
Subject key identifier: D5:80:B0:15:1D:94:BB:7F:44:D8:4F:FB:34:D2:27:4B:0E:01:3A:89
Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
Certificate issuer: /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Certificate serial: 0198D84F634BC1143D61AE3759DA40073754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 19:02:18 +0000
Manifest this update: Sat 23 Aug 2025 19:02:18 +0000
Manifest next update: Sun 24 Aug 2025 19:02:18 +0000
Files and hashes: 1: RsyrdHmk4NikF3NQoAppvYg7BI0.crl (hash: m3qoyEw8sYcm0muOmqCuZ5y+d7ZW8TTAuYGPZdbQHSw=)
2: kbK5FbYWiIzhyfd6X1FvOM4LM_M.roa (hash: DqjgdH8s8QL3DkbtV73wzVgdXOipMU6gUg//vr7va8U=)
3: mDUiFexcT2mv6c5O8qGbFAH9b3Y.roa (hash: pPWVkb6MaBCnVH/KCkJGhD1ngVL39J0MeLmVUJGfUTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:63:4b:c1:14:3d:61:ae:37:59:da:40:07:37:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Validity
Not Before: Aug 23 19:02:18 2025 GMT
Not After : Aug 24 19:02:18 2025 GMT
Subject: CN=d580b0151d94bb7f44d84ffb34d2274b0e013a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:67:69:68:c1:23:b2:98:0c:07:8b:1f:fb:bc:
e3:c2:34:71:2d:39:05:bf:65:9e:7c:16:e4:23:5e:
da:12:ce:c9:f3:66:3d:18:7d:61:2f:1d:69:78:2e:
bd:6d:56:b4:e4:97:70:a6:30:a9:ab:a1:1c:90:eb:
65:7a:72:6e:89:5e:64:c6:60:df:3c:e0:48:7f:40:
c1:4f:6a:39:be:bd:a0:a0:48:cd:9f:fe:a0:84:f4:
6e:fe:e1:98:83:04:e4:3b:ba:51:7e:76:8d:21:60:
b3:2f:42:36:f9:99:ac:be:b5:30:41:cb:ab:b6:ca:
3f:89:85:c0:d6:2c:da:1a:4d:92:d7:7b:48:b4:e7:
a1:12:bb:03:18:a0:78:5b:f1:ac:73:aa:25:11:05:
32:c8:43:45:0e:2d:ef:23:e4:90:eb:07:8b:f9:4c:
0c:03:43:ec:bc:27:5d:28:60:4f:c5:81:36:45:1f:
21:d4:e4:f5:19:05:4f:48:9c:13:47:0d:19:54:e4:
1d:bf:b6:60:1c:7a:d0:ce:66:e3:df:07:4a:ca:4f:
78:26:e7:7d:42:98:5e:80:92:fe:2d:e7:a7:0b:cc:
b7:77:9c:09:58:52:e7:07:c1:33:46:b0:e1:db:53:
a8:3d:a5:38:3b:93:7a:e2:13:fa:90:13:02:4b:3b:
cd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:80:B0:15:1D:94:BB:7F:44:D8:4F:FB:34:D2:27:4B:0E:01:3A:89
X509v3 Authority Key Identifier:
keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:76:e4:f8:de:8f:34:0f:de:cd:0c:2f:7b:ee:3c:4e:99:4e:
0b:87:0d:4f:92:97:3f:35:bc:84:88:b6:d0:34:54:48:f3:08:
0e:b6:4f:c0:f7:76:81:2d:11:86:ae:70:fc:ee:c8:c6:01:15:
97:c9:7a:fd:39:d5:38:64:24:5a:bd:a7:d3:50:e5:92:75:6c:
1a:b7:a8:ec:e7:6d:ad:7f:e4:79:ad:7c:e6:0a:c9:47:a8:af:
12:6e:2c:ee:5f:98:b3:24:a5:b7:b9:a3:b0:6d:59:9c:b6:dc:
30:08:e6:b4:4f:3f:02:0f:e2:9b:88:29:64:4b:ec:21:6d:28:
af:89:7d:70:fc:d1:bc:e6:17:1b:b1:50:72:90:e6:fe:52:f2:
53:fa:48:72:43:dc:35:eb:ad:31:f6:c2:4c:b6:f8:05:cd:db:
02:70:53:47:46:60:58:65:ef:f2:4a:b0:13:98:80:f0:b5:bc:
5c:05:3a:48:0e:2f:46:60:35:bf:69:86:85:b1:9c:74:3a:a6:
0b:2b:65:79:38:69:0b:c0:d4:4b:8c:4d:7b:1e:fe:a1:4c:36:
1c:ab:d0:a6:f6:cb:1b:98:cc:f0:d0:de:d9:9a:6d:1a:48:8d:
27:4c:44:0a:95:e0:90:d1:00:b1:03:19:2d:b2:1f:6f:72:02:
e7:22:f4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:50:32 2025 by rpki-client