Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
File: _0cFo2PcHY0OpRybmh7L04B70FQ.mft (raw, json)
Hash identifier: gT7fDIG08Ip9fMjkVcl4so9cBCCQjJZWg5ynm5c6c3c=
Subject key identifier: 23:7A:B6:77:95:85:DA:A0:05:0A:24:73:F5:F1:BD:3A:1C:B5:76:E5
Authority key identifier: FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
Certificate issuer: /CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Certificate serial: 0198D5F155FBDD09C20099B7E452C9E9F4C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 08:00:19 +0000
Manifest this update: Sat 23 Aug 2025 08:00:19 +0000
Manifest next update: Sun 24 Aug 2025 08:00:19 +0000
Files and hashes: 1: Sk4x_HD1LPLgRyf7btPjY4ncmxU.roa (hash: +rugmwU9Eq5brIUvEJKCQXzHVBLNVvEt2u6gto3U47Q=)
2: _0cFo2PcHY0OpRybmh7L04B70FQ.crl (hash: JNv3QsXdGL9/ONABBu2E8XRY03Dm/mlj5P5nIxTCzco=)
3: xNwSYwAbBI1je8GEBcLJwVabZvM.roa (hash: rsROgVJBvuKbZk2mF1z0pX159BnG002ygt7Nhxzcdxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:55:fb:dd:09:c2:00:99:b7:e4:52:c9:e9:f4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Validity
Not Before: Aug 23 08:00:19 2025 GMT
Not After : Aug 24 08:00:19 2025 GMT
Subject: CN=237ab6779585daa0050a2473f5f1bd3a1cb576e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a9:e9:19:46:2d:31:6e:2f:8f:8f:8a:6a:44:
61:0c:de:9d:95:23:71:ea:52:90:e6:39:c5:fe:a2:
f5:01:91:fb:90:78:28:05:61:ce:55:2b:f4:1e:f5:
10:4c:b1:37:10:38:38:51:68:39:96:44:de:5d:98:
9d:82:bb:11:3f:a0:65:6e:6d:66:26:bb:5b:c2:99:
6e:4f:4e:b3:99:36:93:d7:7e:7c:5c:f8:2c:b2:5e:
90:16:e5:91:1d:78:1d:b5:da:74:68:04:fc:57:11:
7f:8b:4a:39:e9:26:83:ab:09:b7:d7:30:00:d0:2a:
da:6d:16:f0:29:44:ab:25:b3:d3:ec:5a:ba:a9:e9:
28:67:4c:1b:58:bf:68:7c:ee:1c:40:2a:bc:3c:89:
04:cf:65:8d:a8:2b:a6:1b:c7:c7:3a:0d:b7:f1:e1:
e9:ad:1b:cc:b1:40:25:98:72:2f:89:48:64:25:b3:
ec:43:2a:3a:3a:52:db:b8:07:ec:03:f9:41:a9:81:
da:77:d7:38:26:bc:ee:37:e4:f4:67:8d:01:f8:c1:
43:26:59:10:3a:72:36:28:f7:71:57:e9:3f:65:80:
fa:4e:2b:1c:e1:92:8e:b2:28:f8:d4:c6:7d:7a:59:
02:23:c4:82:18:76:3d:b0:55:ae:bb:fc:d7:9d:ad:
cb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7A:B6:77:95:85:DA:A0:05:0A:24:73:F5:F1:BD:3A:1C:B5:76:E5
X509v3 Authority Key Identifier:
keyid:FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:61:ec:cf:ee:03:f1:57:7e:b7:f7:3a:72:8f:a2:cc:2d:5c:
65:c6:a6:16:de:8b:9e:56:35:ef:b0:54:2a:f9:72:83:04:cf:
38:21:50:b0:d3:b0:0e:8f:5b:52:93:b7:67:85:0b:dd:b5:63:
37:1c:9c:22:24:3b:c0:10:af:61:b8:3f:11:49:dd:50:a7:f5:
b5:7b:31:f1:53:18:4b:4c:47:8e:1b:0a:8d:1e:72:e5:4a:ee:
c0:27:5c:58:08:25:32:5f:6f:ee:4e:53:3b:3e:47:db:95:1d:
76:9f:b3:06:0a:87:c5:93:24:18:90:a0:02:8d:ea:0d:39:bd:
0d:9b:a3:6e:39:7c:6a:cb:e7:12:c4:7f:2e:1d:e6:85:6f:34:
c2:bb:2f:d6:09:e8:36:39:22:06:76:ff:a2:fb:93:e9:fd:8c:
ff:0f:b7:5a:27:c8:e0:bf:60:76:38:0a:b0:f5:19:76:1d:ee:
29:77:39:f2:12:65:76:4c:6c:ff:e9:2a:68:27:76:fa:92:f5:
d9:d4:41:3d:f1:8f:24:ad:01:9b:da:13:db:f6:36:4e:a5:60:
36:1d:5f:3a:84:93:bb:5d:ba:f5:25:6a:a7:f6:44:87:04:48:
a2:e5:d2:fe:73:e0:1a:40:2c:c8:7f:ae:93:95:59:d4:91:59:
7d:4b:bd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:41:53 2025 by rpki-client