Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
File: are5zuAEMA6v4JvxL8ttod0wpNc.mft (raw, json)
Hash identifier: Eg9aDhJezAKAwLSTh/furxdWoZrjXTBQszC66rxj8wo=
Subject key identifier: B8:36:BD:33:9A:F8:94:0A:41:F2:A9:A6:7B:60:3F:B2:3D:C5:82:5D
Authority key identifier: 6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
Certificate issuer: /CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Certificate serial: 0198D4E0D6B93C154A9C92AB407707616D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 03:02:41 +0000
Manifest this update: Sat 23 Aug 2025 03:02:41 +0000
Manifest next update: Sun 24 Aug 2025 03:02:41 +0000
Files and hashes: 1: BFGJmraQBgGavzIeZHO0bfSXFRI.roa (hash: e3IZCe3SbuLp2264XxRVhIYJHbqFuU1UA3gCIN6FJhs=)
2: are5zuAEMA6v4JvxL8ttod0wpNc.crl (hash: zLlQSB8BJ4fCgS+Bzdq6+NcVd1J3cBhlidPudLGsZTw=)
3: yIpbFqb6UtZ_6rW_FDbCQTH3LMk.roa (hash: YWCevYeGrsDTRNW9HGKxCubEWRJxVpXV1huOUXJtDd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:d6:b9:3c:15:4a:9c:92:ab:40:77:07:61:6d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Validity
Not Before: Aug 23 03:02:41 2025 GMT
Not After : Aug 24 03:02:41 2025 GMT
Subject: CN=b836bd339af8940a41f2a9a67b603fb23dc5825d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:10:87:a6:61:97:a4:84:c5:25:f0:0f:15:
b7:e8:e2:99:42:b9:d7:48:f2:dc:dc:9f:56:ba:d3:
46:a7:4e:51:a2:c9:d5:86:7c:8b:00:5c:be:e8:78:
82:fe:d6:ba:0e:5f:ae:98:45:c6:f2:09:1a:6d:47:
8d:71:f5:11:1f:05:5c:e3:a2:b6:5e:c9:db:ae:b2:
41:56:97:4c:50:81:b6:3a:43:77:82:0b:04:68:ee:
eb:c1:47:bd:f0:66:b4:09:79:f1:cc:f9:77:11:e1:
d6:05:6d:92:7f:c1:b2:17:47:a6:cf:e1:7e:61:91:
e5:3f:0e:8d:00:7d:8b:7e:f6:7a:ee:a0:bc:28:82:
ff:87:c1:e6:60:10:e0:95:40:81:5b:50:1c:26:5a:
f4:72:9f:78:8c:87:dd:0c:3b:de:fc:5e:e7:9e:39:
19:ec:ba:5e:9a:b5:a6:29:92:c0:2b:43:01:63:e9:
20:61:87:2d:b7:b3:c6:ea:cc:c3:94:ae:24:bf:e2:
dc:4a:79:b1:cc:6e:b9:61:f1:c8:b2:1a:9d:8e:e4:
be:30:a3:e7:4b:44:43:0e:eb:29:51:88:3f:34:47:
66:d0:9e:d0:2b:8d:25:47:91:01:d2:be:2b:3d:18:
8e:1a:7a:18:ab:8a:c3:03:88:79:3e:dd:ae:e9:14:
24:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:36:BD:33:9A:F8:94:0A:41:F2:A9:A6:7B:60:3F:B2:3D:C5:82:5D
X509v3 Authority Key Identifier:
keyid:6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:de:52:c9:40:96:41:e0:4f:33:7c:69:37:c3:e8:c9:ea:68:
c3:07:c0:87:6b:1b:ed:48:13:89:6a:2c:21:55:24:18:04:8f:
a7:d4:12:96:19:51:6e:ac:20:30:a0:bd:8e:e7:dd:cc:66:41:
71:48:91:00:bd:95:32:26:99:dd:33:a3:39:70:41:db:63:90:
93:24:76:57:65:c5:b0:f4:42:4e:51:cf:4f:53:e5:ab:73:3b:
f6:d0:e8:be:db:7a:23:d1:bf:15:b9:c2:e4:00:fe:09:75:1f:
b4:09:e6:08:6a:ff:54:a8:84:43:33:53:57:50:40:c6:9a:78:
3c:20:a2:05:ad:90:9b:7f:7c:28:d0:70:93:e8:be:1d:75:10:
51:e9:cd:2c:7f:dc:83:c0:95:15:46:39:e3:4a:cd:5c:f1:08:
4c:6a:44:72:47:6a:14:2a:4a:37:3c:f9:86:bc:e5:3e:11:fe:
ed:6a:de:41:d9:36:f4:cb:6f:f4:81:93:b3:32:45:5c:d7:5d:
2e:d7:05:64:d3:1d:4d:d0:4a:10:9f:ac:47:f5:dc:76:7f:46:
90:1c:ea:9e:25:ad:98:0a:83:f5:06:47:3f:2a:99:8c:33:e6:
2c:f7:83:6d:55:e8:20:3c:c0:e6:71:44:3f:29:28:90:35:71:
c2:c3:b8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:29 2025 by rpki-client