Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
File: rf_xvXcSh87UxN1tioUdKtdwZh0.mft (raw, json)
Hash identifier: httgwSvxfkNocx22gEKOTni6K0syyeeTs0rt0HhnOpg=
Subject key identifier: F7:AF:75:0B:E4:77:6E:53:CA:8F:34:96:2B:AB:37:1A:9C:E1:5D:AC
Authority key identifier: AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
Certificate issuer: /CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Certificate serial: 0198D5BBA60C0548C5521873B33E52A5CEAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 07:01:41 +0000
Manifest this update: Sat 23 Aug 2025 07:01:41 +0000
Manifest next update: Sun 24 Aug 2025 07:01:41 +0000
Files and hashes: 1: a5yaKlijnL4kZ_oj1IyssANoPrY.roa (hash: Ldfc6br/bRY5cT98+AAZmtT6be1fhfXCxblPXo1RRow=)
2: rf_xvXcSh87UxN1tioUdKtdwZh0.crl (hash: qg3CRFXJ+CDcHQGxtXj16660xJMU9ZUkWgpEcV2Td4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a6:0c:05:48:c5:52:18:73:b3:3e:52:a5:ce:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Validity
Not Before: Aug 23 07:01:41 2025 GMT
Not After : Aug 24 07:01:41 2025 GMT
Subject: CN=f7af750be4776e53ca8f34962bab371a9ce15dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:80:78:7b:87:db:4d:36:a1:5d:42:2d:24:
7b:94:1c:b7:8a:43:72:a0:9e:27:8e:1e:1f:96:0b:
a3:00:9c:98:68:81:51:e6:3c:d4:65:23:f2:e3:c2:
3f:12:92:4f:47:42:b4:bb:bc:4b:df:3b:00:31:39:
17:f1:49:48:76:41:a3:5d:67:03:8a:c8:31:c8:46:
95:a9:e9:5d:8c:b3:3c:60:82:37:fa:4b:7f:2e:2f:
4c:94:8b:6c:0a:6d:41:e0:4e:2c:f9:ea:99:b9:10:
53:36:c2:5f:06:4a:8a:36:5c:1c:b2:66:67:a5:ca:
f1:c0:29:5a:b3:a7:ce:da:aa:b6:2a:e2:ef:82:11:
6b:ae:16:a6:40:27:92:20:b7:4f:01:aa:ad:ab:47:
2a:b7:a5:75:db:9a:4e:57:f6:f4:4e:30:09:f2:7e:
38:c5:45:06:b3:89:35:fe:b1:56:c6:b7:39:8b:f7:
07:12:9b:74:da:2f:91:fc:21:b0:04:78:ce:d1:eb:
43:f4:a2:76:af:3f:39:82:55:03:6a:27:a1:90:d5:
b9:ee:7f:e2:9c:21:e2:95:7b:40:df:16:7f:ec:f0:
b8:c8:aa:3e:87:90:aa:70:c1:59:cf:28:9e:b5:62:
62:d1:1c:c0:10:7d:ff:7b:55:35:8b:c3:a6:82:c2:
16:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AF:75:0B:E4:77:6E:53:CA:8F:34:96:2B:AB:37:1A:9C:E1:5D:AC
X509v3 Authority Key Identifier:
keyid:AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b0:31:3f:44:9e:d2:b2:46:6e:3d:f6:ac:38:c1:9d:5f:e2:
0a:c8:6e:ea:c7:55:cc:55:fd:eb:90:e7:02:02:df:35:83:36:
1b:21:0b:be:af:dd:5d:c0:6a:1c:ad:43:20:58:5f:30:36:b8:
a2:3e:60:ff:3a:7b:4d:1f:9b:3f:9d:73:91:58:fc:42:74:95:
f2:f3:7e:ea:7f:a4:6b:8c:28:c9:15:b1:be:c8:17:2c:74:16:
4d:d2:50:f5:8e:48:ba:a2:3f:34:c9:b9:9f:e8:ce:eb:f2:3b:
bb:3e:67:f2:39:d6:59:28:47:f2:91:e7:c7:ac:95:17:30:64:
d9:06:46:e6:71:22:63:9d:4c:e5:1a:69:60:34:ba:24:e7:ae:
fa:f4:98:98:f1:6d:94:22:a3:29:ce:ef:4e:7d:81:1b:48:3a:
f7:6b:6d:a6:46:f5:97:79:8d:e6:e1:db:6c:2d:98:90:43:f4:
53:3e:0f:f3:4d:4d:67:f4:64:37:51:bb:b8:81:21:d9:19:18:
d0:1d:82:70:04:79:9c:f2:63:a5:99:77:e6:ec:69:5c:35:e8:
e6:c1:5f:80:75:99:d9:06:17:2f:c0:ea:f6:78:15:7f:38:9e:
63:71:dc:4a:b2:dd:ee:72:6a:ff:92:96:35:0f:fb:3f:87:a8:
a1:b0:ef:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:04 2025 by rpki-client