Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
File: su0dYGb05GVO9fPMcKXZBamvgpA.mft (raw, json)
Hash identifier: cWY0ieb7OkjPJ2oIxZEy39v10MRUzExuAmEel3+RgpE=
Subject key identifier: 8F:05:7A:DE:60:C9:95:26:EA:AD:B4:10:0B:56:16:0C:AD:13:EC:0E
Authority key identifier: B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
Certificate issuer: /CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Certificate serial: 0198D4E0A66E8853EE25086B57EB79C1CE27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 03:02:29 +0000
Manifest this update: Sat 23 Aug 2025 03:02:29 +0000
Manifest next update: Sun 24 Aug 2025 03:02:29 +0000
Files and hashes: 1: 1-ltIqDmdRri_JzK-WP35nYk2cQM.roa (hash: 0bK+rteLcuTEscCNCfYnJ6bFxtebRlZJOqtPYrohMPw=)
2: Zkat7ibcLmD2h_0_XMZ8A60Ar4Y.roa (hash: S9WARRHeF7XnyVkRNyrlC/MJ9g6e/aBgMKh17IrDCTs=)
3: kLoSSyOqdGXBSQRo8VZp6L-TiaM.roa (hash: 9hIEwlHhl+bUrm5c0k44GlmKeMVBJgHOI+a/J30MoSc=)
4: kweAulzTrCvxJT9UZzTQmhyNMt0.roa (hash: 6ACNdOW4ObJspcsXRMK8EDpIbxmZVEa19iOYRQQmt+I=)
5: su0dYGb05GVO9fPMcKXZBamvgpA.crl (hash: MtfH+mToDxT/42FMvHmyBEfvyNzlafQTyAr3fV4NmGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:a6:6e:88:53:ee:25:08:6b:57:eb:79:c1:ce:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Validity
Not Before: Aug 23 03:02:29 2025 GMT
Not After : Aug 24 03:02:29 2025 GMT
Subject: CN=8f057ade60c99526eaadb4100b56160cad13ec0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:97:64:af:7d:d2:64:24:e4:4c:e5:90:f3:fc:
e7:91:ce:ba:55:17:a9:25:c3:81:c6:26:68:6d:27:
42:4d:b4:58:c8:ee:13:ce:65:09:7d:07:2a:57:33:
de:22:d4:80:fc:3c:a9:82:c5:eb:46:c3:20:7d:06:
02:62:e9:76:db:21:07:10:e7:41:75:1f:9d:38:64:
13:51:7b:8d:5c:46:bf:64:bc:66:3e:3a:a1:98:11:
64:60:08:85:69:d8:e2:97:d1:9e:10:6a:d7:98:5f:
26:9d:b6:b9:ca:aa:c0:50:2a:80:a5:b3:5b:8b:25:
28:5d:52:8d:90:8d:ad:11:93:69:c2:2b:da:33:7b:
99:2b:08:f4:9e:35:2b:e8:e0:d7:ee:61:33:ef:dc:
2a:6a:45:9d:09:ed:bd:0a:9f:46:ce:a7:9d:c3:3c:
6f:5a:0e:e8:6e:45:6e:c7:95:bf:81:0d:a6:b6:1e:
e6:fc:9a:f2:a2:b6:d3:f1:e2:27:02:0e:56:60:77:
f4:e0:32:19:fa:25:4b:7b:60:e4:bb:6b:36:ec:a2:
cc:d7:17:6a:21:7c:4f:d6:47:9a:b1:30:e0:f8:b5:
30:6d:3a:e8:cb:ff:d7:99:6e:18:99:93:91:b2:00:
36:10:90:90:33:1f:d1:2a:72:34:15:bb:8a:c0:91:
22:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:05:7A:DE:60:C9:95:26:EA:AD:B4:10:0B:56:16:0C:AD:13:EC:0E
X509v3 Authority Key Identifier:
keyid:B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a3:5c:f0:b8:69:21:26:20:7c:af:77:a2:53:77:0a:bc:d0:
90:1c:5a:60:d5:6b:c5:20:85:fd:8c:38:b1:18:d6:3b:33:92:
e7:e4:f9:65:76:27:46:fc:e4:aa:7d:15:e2:00:d3:08:3b:36:
74:d4:29:da:45:78:8a:3e:0c:a4:4d:d9:f3:51:9f:a1:ba:ea:
31:e3:c8:93:81:7d:3c:4d:61:c6:61:4c:62:a6:ac:7b:3f:f8:
89:e8:76:a4:5f:98:ab:96:83:d4:07:d2:9e:8c:91:a3:60:fc:
bf:a8:1f:9f:d2:2c:33:30:54:36:67:4a:99:c2:f6:35:5e:be:
d3:81:27:d5:4c:ef:99:8d:ae:bd:0c:0f:3c:61:49:55:24:26:
17:79:1b:c0:19:b4:55:55:82:c8:75:61:1b:68:06:dc:ad:0f:
64:42:f3:64:18:08:d3:b2:c8:24:ed:da:6c:d2:9e:82:ac:89:
64:53:c9:40:25:22:1d:aa:ee:e6:e5:56:95:01:e0:e2:1a:1f:
34:a1:bb:e2:f1:ea:14:86:33:81:6a:a3:e2:f8:a0:e1:b2:d2:
74:06:90:5d:9b:bc:e8:8c:63:d5:a0:92:93:0c:22:76:06:5a:
fa:fb:e7:a2:80:87:1c:81:94:c9:50:8e:5e:c8:d2:dc:5b:05:
ab:ac:48:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:47 2025 by rpki-client