Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/aL8cWiHDgluLhlFqGllxIbVLPMM.mft
File: aL8cWiHDgluLhlFqGllxIbVLPMM.mft (raw, json)
Hash identifier: WoZUwPffyW1pSRn74upsG9Zr/++x41vgLw8coQ7kDhU=
Subject key identifier: C7:BB:54:6B:56:F0:14:37:C1:E4:D8:C8:43:89:B1:AB:A5:D4:A8:0A
Authority key identifier: 68:BF:1C:5A:21:C3:82:5B:8B:86:51:6A:1A:59:71:21:B5:4B:3C:C3
Certificate issuer: /CN=68bf1c5a21c3825b8b86516a1a597121b54b3cc3
Certificate serial: 0198D6609BBE262FFCF15ACAAB1998DA0F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL8cWiHDgluLhlFqGllxIbVLPMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/aL8cWiHDgluLhlFqGllxIbVLPMM.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:01:52 +0000
Manifest this update: Sat 23 Aug 2025 10:01:52 +0000
Manifest next update: Sun 24 Aug 2025 10:01:52 +0000
Files and hashes: 1: K-gQWrDorOWk95T1Ck9YnvOvyOw.roa (hash: M7ISU7dx2mACRrVyXnpQ2vx1ALS4joyLkkEwNFtNto0=)
2: aL8cWiHDgluLhlFqGllxIbVLPMM.crl (hash: FcXaWjyzvuM6tQ1WRvleY5qVmU/Sck0wepE6aLk361c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/aL8cWiHDgluLhlFqGllxIbVLPMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/aL8cWiHDgluLhlFqGllxIbVLPMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aL8cWiHDgluLhlFqGllxIbVLPMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:9b:be:26:2f:fc:f1:5a:ca:ab:19:98:da:0f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bf1c5a21c3825b8b86516a1a597121b54b3cc3
Validity
Not Before: Aug 23 10:01:52 2025 GMT
Not After : Aug 24 10:01:52 2025 GMT
Subject: CN=c7bb546b56f01437c1e4d8c84389b1aba5d4a80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:82:ee:98:36:a3:f4:e2:f9:2f:37:46:df:1b:
b2:1c:d8:ce:f3:89:60:17:71:19:34:a1:ee:3d:cb:
10:b0:81:07:fe:44:9c:1d:17:5a:64:c5:7e:93:0d:
9d:a4:52:ac:f7:61:77:94:bf:08:9c:1d:2b:32:02:
c9:2c:85:5f:72:2e:a2:cc:22:3d:bd:b8:90:3f:25:
80:e8:9a:97:d7:bf:fd:9d:c3:9d:13:eb:03:76:2f:
c8:91:26:60:08:0c:34:b3:17:90:b9:80:e0:1b:e7:
3d:37:ee:5d:ac:b3:2e:59:41:45:e0:da:f7:da:a3:
61:a4:2c:ce:0d:10:65:ef:1c:7a:a3:1e:c6:f5:42:
cb:21:70:8e:36:94:62:b1:29:39:02:df:13:bf:a2:
17:e2:a3:c8:62:33:54:a8:e5:78:5a:00:20:08:1c:
fe:33:ba:e5:ee:1a:1c:f4:2d:73:9a:f4:d0:0e:84:
dd:75:01:e8:2d:71:03:30:bf:51:fd:e9:a7:36:c3:
71:af:6f:b8:f0:71:6b:a6:64:3d:55:6a:f7:28:21:
38:8e:a9:30:f7:da:e0:08:0a:bb:3a:9b:38:aa:65:
8a:d7:b5:0c:32:05:0e:91:3b:5c:95:d5:03:8f:8a:
28:bf:e0:14:bb:3e:03:cc:20:4b:b0:e5:de:40:7a:
2d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BB:54:6B:56:F0:14:37:C1:E4:D8:C8:43:89:B1:AB:A5:D4:A8:0A
X509v3 Authority Key Identifier:
keyid:68:BF:1C:5A:21:C3:82:5B:8B:86:51:6A:1A:59:71:21:B5:4B:3C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL8cWiHDgluLhlFqGllxIbVLPMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/aL8cWiHDgluLhlFqGllxIbVLPMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2fce5e-c915-4f02-ad3a-55eb5bb99e45/1/aL8cWiHDgluLhlFqGllxIbVLPMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:1d:44:a5:b8:f5:b4:45:f6:88:be:f8:92:be:cd:92:b4:37:
25:c9:52:05:1b:73:26:14:65:72:7a:55:ac:06:9a:5d:99:7f:
b3:81:55:3b:5c:0e:79:bb:42:eb:75:bc:3c:59:68:fa:ed:47:
74:af:ed:64:b2:32:53:f8:65:e6:14:8d:ec:f6:92:a6:95:22:
ff:99:15:3a:18:9c:59:34:34:eb:0e:97:7b:a4:cd:ed:5f:ac:
63:2d:5d:ad:a2:e0:f5:42:d2:37:ec:c5:9d:71:8a:79:75:b4:
21:94:ba:fc:09:96:61:0e:89:7e:7e:d9:b4:48:f9:02:0d:30:
f3:d3:7b:3b:ce:a4:66:85:79:ba:03:a9:a5:3e:a7:e4:44:d9:
65:21:46:64:21:f3:7c:0d:59:a4:33:4a:a5:41:74:3e:4e:40:
2e:80:ad:dc:d8:5f:69:34:02:dc:cd:8a:d5:13:22:fc:1f:64:
3d:81:eb:f0:48:34:51:65:49:4a:62:7f:e9:13:d4:05:14:05:
61:e0:eb:53:da:d7:12:8c:55:a7:1c:9f:28:2e:88:30:79:84:
18:3f:75:1c:8f:34:49:44:c3:a7:90:f8:1b:80:f8:5c:39:1d:
c5:62:cf:46:45:74:e8:a9:ef:61:5d:43:1a:b4:b0:69:e0:73:
46:9c:c2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:05:16 2025 by rpki-client