Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
File: paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft (raw, json)
Hash identifier: L258A8wn4xyTNqSBxJU4vRPihL+0FExxrUl/b+7CWdU=
Subject key identifier: 4E:1F:77:A7:E1:1D:A8:C6:DF:B0:44:D5:50:18:CE:CD:1F:6B:2A:08
Authority key identifier: A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
Certificate issuer: /CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Certificate serial: 0198D54E74CF8CFFFB0BA9A456194CCB5C6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 05:02:25 +0000
Manifest this update: Sat 23 Aug 2025 05:02:25 +0000
Manifest next update: Sun 24 Aug 2025 05:02:25 +0000
Files and hashes: 1: Ef4jdp4ch3bGe_Ka3GRq8dFNRyA.roa (hash: 0HcHv8IPsRtMKEw7Kx2nplJJT6BUJZOb81lct/uUUeg=)
2: NH2BjpUAouOhcpZouA1RZzjRVTY.roa (hash: 24a7YxtpdykxCsVljEKHdP+oA0xGv3G4hBA1X06gGy8=)
3: paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl (hash: r6cTOgqlifDEuHoAJjXni5t0D0DDO3sscinvnRqfNY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:74:cf:8c:ff:fb:0b:a9:a4:56:19:4c:cb:5c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a42d260d5ecdc2fa2b0b5dbf603b90d715444d
Validity
Not Before: Aug 23 05:02:25 2025 GMT
Not After : Aug 24 05:02:25 2025 GMT
Subject: CN=4e1f77a7e11da8c6dfb044d55018cecd1f6b2a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d9:46:8a:a2:06:c3:5a:7d:f2:e3:40:54:be:
ab:4f:37:ad:7a:26:ba:a5:b0:8f:7b:6d:23:ff:9a:
55:cb:d2:8d:6a:36:c1:dd:fc:28:90:1d:3b:31:d7:
a5:85:ec:6a:53:ea:c6:4a:d3:71:56:45:4b:06:0c:
3d:68:2c:f0:b0:f0:76:31:f0:df:53:e1:23:c0:87:
4d:42:61:06:35:63:fb:3e:9f:98:de:a2:7e:b6:4f:
8b:f7:24:bb:1e:0b:15:49:df:34:0b:c5:7a:c6:5a:
d9:6d:94:8d:5b:54:c3:97:cd:7c:a6:ee:7f:0e:c6:
79:58:b3:29:8a:a6:cb:22:10:b6:61:a1:e5:bd:97:
59:8b:08:ee:d5:5f:6f:1c:4c:45:6f:2f:d7:3b:4f:
a4:7a:71:9a:b3:b5:66:68:9f:2e:cf:73:8d:46:dd:
f2:74:eb:d5:59:50:b1:b9:49:6a:35:23:4a:ac:40:
54:85:6d:c6:c7:74:e4:fd:57:b5:81:1b:0f:e4:9a:
c9:42:7e:09:b0:ac:71:ff:d7:5f:d9:ae:36:d8:db:
d6:df:4e:d9:69:0f:af:f8:41:e5:7b:fc:8b:bc:f4:
51:81:2f:9c:fb:0b:06:da:30:54:f6:96:eb:3c:65:
f6:33:65:be:8d:22:ff:62:0a:99:90:01:32:d9:dd:
bb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1F:77:A7:E1:1D:A8:C6:DF:B0:44:D5:50:18:CE:CD:1F:6B:2A:08
X509v3 Authority Key Identifier:
keyid:A5:A4:2D:26:0D:5E:CD:C2:FA:2B:0B:5D:BF:60:3B:90:D7:15:44:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paQtJg1ezcL6Kwtdv2A7kNcVRE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c392d7-0a99-41c9-a2cd-f0d2b943cb53/1/paQtJg1ezcL6Kwtdv2A7kNcVRE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6f:51:ea:ee:49:68:ec:cc:92:7d:13:a7:9c:98:28:fd:78:
2d:99:bf:aa:63:dc:ff:54:8e:c3:62:12:01:70:a6:fa:f8:1a:
45:e2:27:3e:85:ff:bf:e2:25:a9:58:07:e0:c2:ab:97:5a:62:
04:0c:b0:38:53:59:de:69:85:01:e5:0f:3d:5b:6b:d9:49:3a:
1e:a4:1f:97:1f:a6:1d:c7:8e:e9:44:4d:c6:62:57:18:ff:ff:
fd:50:cd:13:7e:7b:8f:6a:e8:df:65:f0:62:7f:30:94:9b:1e:
44:16:fd:d0:7e:c4:18:f7:87:0e:4b:05:29:2b:45:51:12:86:
71:05:5f:d4:18:e2:b2:d3:cd:66:fb:13:88:2e:42:b3:cc:09:
09:3e:9f:da:41:36:fd:11:3b:a8:0f:fd:89:38:b5:db:3d:11:
c5:06:f3:f3:fe:fd:63:3e:2c:cc:99:ad:38:8a:89:34:04:e1:
45:cb:d7:b5:5a:59:04:8f:7f:c0:e8:71:9b:6d:16:54:cc:9b:
f3:50:5a:53:b5:48:66:d0:08:0f:b4:bd:5d:ae:a1:19:f7:c2:
9d:26:3f:bb:01:81:25:be:32:d7:f3:ed:fc:01:f3:d9:e5:2c:
06:69:61:5f:c1:0e:73:ba:d6:2d:a8:5f:dc:80:5c:d7:0f:fc:
06:a6:af:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:16 2025 by rpki-client