Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
File: C40btyeRyHhVDRudj-9WSsORk2g.mft (raw, json)
Hash identifier: 1lyw2RpHUcpUIfjcWlDvPAmD4NAGqf6Rm188936EhI4=
Subject key identifier: 00:AA:2B:51:83:76:37:DE:80:D4:25:C7:64:5E:4A:15:68:1A:3F:F9
Authority key identifier: 0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
Certificate issuer: /CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Certificate serial: 0198D6CD0FC16E29E6453C9D6E1F31B2955A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 12:00:19 +0000
Manifest this update: Sat 23 Aug 2025 12:00:19 +0000
Manifest next update: Sun 24 Aug 2025 12:00:19 +0000
Files and hashes: 1: C40btyeRyHhVDRudj-9WSsORk2g.crl (hash: yH0QmJjGRdZ7nfJpf75dsevZ/AOrHzupjT0jKPd5Z20=)
2: Knfth6txiDF12eWnRVMBTSZ3N7E.roa (hash: Erv1kSG7AIiPjVidT056wHHSwG5zaW2OWLCIEkBM0Dk=)
3: Wsb9iLccMA3IkT_2bsufbfAmx6s.roa (hash: EeNg1ELWa5JeZ0r5s7rlId0eyflaNS7CxDa9rMshhYk=)
4: XPixcvd-VZdDwp01qDyS6l8HyGk.roa (hash: nEM6mcnfwNKM+CYw9oKK1seFIgWAcWfoaoBK4ckQSSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:0f:c1:6e:29:e6:45:3c:9d:6e:1f:31:b2:95:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Validity
Not Before: Aug 23 12:00:19 2025 GMT
Not After : Aug 24 12:00:19 2025 GMT
Subject: CN=00aa2b51837637de80d425c7645e4a15681a3ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:7c:a6:d6:d4:62:a1:8a:36:db:54:0f:c7:3d:
58:0d:9d:8e:c9:c6:3c:18:4e:ad:c5:06:f3:a6:4c:
6a:3b:2a:0c:65:45:8d:61:38:9d:ff:9b:75:f5:60:
4e:51:56:38:4a:b2:12:08:11:4f:2b:a7:5a:e5:e6:
36:09:0e:3b:56:76:fd:72:0c:db:86:06:16:4e:0f:
bb:6b:11:f1:57:99:f3:bd:c3:31:fa:74:78:27:09:
a6:00:8b:49:ad:53:3a:bb:45:2b:54:51:d5:26:69:
be:b5:b8:e0:c8:a0:45:2b:3a:40:a8:22:b4:8f:44:
3a:46:62:80:5c:c5:1e:f5:0e:c2:f3:91:ba:04:3b:
cc:03:bd:25:4e:10:45:81:e0:1a:8e:78:3a:46:d7:
78:02:f9:00:72:16:4e:59:e7:44:fd:eb:90:37:12:
3d:f1:a0:a9:25:bc:5a:30:e9:36:ad:3f:07:61:2a:
2e:87:e7:8e:87:f7:de:df:c3:18:ea:c0:57:90:6f:
70:f7:8b:e0:5b:63:5a:e1:7f:49:e1:7b:1b:84:88:
8b:82:7e:3d:ca:de:d8:46:f5:0b:48:a6:b0:9e:ef:
3d:52:89:04:73:1a:5d:c3:8b:fa:d6:10:df:3c:b9:
7f:75:47:d8:46:f2:e6:00:e2:6c:dc:d3:56:19:df:
15:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AA:2B:51:83:76:37:DE:80:D4:25:C7:64:5E:4A:15:68:1A:3F:F9
X509v3 Authority Key Identifier:
keyid:0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f4:8f:88:8b:3c:1a:a3:0c:e9:d8:95:7f:4f:b8:9c:50:3f:
b4:35:2e:40:f0:96:31:2e:d9:7e:27:53:81:26:75:f9:a5:ec:
1c:89:c8:10:fb:2f:b3:44:0b:da:33:c1:82:f4:91:5c:4d:57:
45:76:08:12:65:73:7f:60:db:a5:e8:7a:4f:3d:1b:6f:aa:50:
87:ff:de:71:18:8b:7d:f9:a4:65:5b:44:b8:c7:96:e0:0f:4e:
d2:c1:de:cf:16:d1:75:c9:6b:68:7b:46:d5:9f:14:9b:d7:cb:
7b:fd:79:60:21:2f:87:a1:3e:6f:0f:5f:82:ce:11:13:21:0c:
a5:3e:05:15:f7:68:5b:03:50:e8:9a:43:51:58:e2:9f:05:20:
d5:91:12:eb:61:f6:9f:e0:9a:79:cf:a8:f3:74:0a:64:97:47:
e4:92:a1:ae:61:a4:f5:42:9e:32:30:4c:1f:aa:46:0b:6f:ff:
4c:f9:12:cb:4b:1f:5d:21:f1:81:ae:6a:62:98:4f:e9:a4:4e:
51:5e:39:01:1c:a2:2c:16:8a:7f:9b:04:8d:e6:29:f1:46:ed:
6a:ac:1f:4a:aa:80:b3:f2:8f:14:69:9a:18:ea:7a:62:16:22:
17:fd:ce:2f:a4:8b:63:ea:e3:5d:76:a5:7c:5c:c9:22:92:26:
72:29:4e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:30:52 2025 by rpki-client