Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
File: f1byiUjIMvLUNLtE1d4OoSJgGwU.mft (raw, json)
Hash identifier: PyZIoFwJcTBUt23F/ICo5eo835dHW+3XQGjy94Lng7U=
Subject key identifier: 3E:66:D7:17:F4:1C:3E:F6:EC:C1:A1:F7:C2:AA:A6:3E:2C:08:0C:C0
Authority key identifier: 7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
Certificate issuer: /CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Certificate serial: 0198D66137E111999C655B58C9171EC7ACF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:02:32 +0000
Manifest this update: Sat 23 Aug 2025 10:02:32 +0000
Manifest next update: Sun 24 Aug 2025 10:02:32 +0000
Files and hashes: 1: NvmfsV1sm7XmyjVKzPOWhb7earQ.roa (hash: r7bWWSDXyiXMj/Swi3flONfAIYfEqRkATWw60gas71A=)
2: WPpLjvv6YbGI7GsTe1ygm0Vy3Lk.roa (hash: N+pPrOkjdISbUNAALF5nqmKzIaYbhj0lt6NwOuwgniw=)
3: f1byiUjIMvLUNLtE1d4OoSJgGwU.crl (hash: //qfLEpGR7/O0AcyBMg+Db0M3tub9kBndvKT5eSodM0=)
4: tLoY5nfmVJWTJGYh886gVbz0Hf0.roa (hash: g2GCG3am8xDu8ahhY94JoBYaTCS9zIT5JVCSvfgRMSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:37:e1:11:99:9c:65:5b:58:c9:17:1e:c7:ac:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Validity
Not Before: Aug 23 10:02:32 2025 GMT
Not After : Aug 24 10:02:32 2025 GMT
Subject: CN=3e66d717f41c3ef6ecc1a1f7c2aaa63e2c080cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3f:e0:83:38:ad:50:3f:7f:ad:00:59:a7:3e:
1e:4a:77:08:13:ef:1a:3c:8d:c8:fa:49:be:a3:ef:
f7:fb:94:f6:56:90:ef:6d:3b:7e:3a:df:2c:cb:d1:
73:3a:cd:f4:40:2b:95:34:bd:0c:2c:99:5d:55:63:
ea:6d:4a:92:50:21:c1:fb:71:53:4f:1a:20:3f:0d:
2d:da:33:c7:fa:8e:fd:97:89:86:3a:f2:22:33:8a:
9d:c2:af:7d:fe:d8:91:0b:b1:af:13:e4:0e:ef:3d:
cc:9d:5a:dc:ab:ca:b8:ad:2b:90:d3:fb:da:3b:08:
04:8d:b6:c2:de:5e:bf:98:7e:d3:08:2e:d4:75:96:
ec:37:81:e4:80:67:83:0c:a7:13:28:66:a6:fc:57:
77:9d:b6:cd:5e:f6:06:bf:5f:79:b9:a2:a5:8f:41:
db:dd:66:b8:31:78:e3:3d:95:00:e2:09:b6:f4:16:
22:eb:84:cd:64:16:f9:b9:41:91:63:ee:8b:37:df:
f1:ae:f5:3c:0c:24:6c:91:b8:db:76:51:ec:81:71:
f2:c8:dc:7c:aa:02:42:2a:c0:1d:9f:81:92:bc:ab:
45:09:7e:dc:5c:c6:e2:f2:35:ff:ab:27:8a:cd:b8:
da:d9:5a:6f:5f:05:0b:e4:1e:80:e7:da:69:23:cc:
22:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:66:D7:17:F4:1C:3E:F6:EC:C1:A1:F7:C2:AA:A6:3E:2C:08:0C:C0
X509v3 Authority Key Identifier:
keyid:7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:89:15:cf:aa:76:24:eb:0e:0d:4e:85:c4:a9:83:27:40:18:
ca:cf:b5:af:b6:ba:ac:1f:fd:a0:46:6a:ba:71:c2:b4:b4:41:
3d:f7:07:4c:68:5c:45:e1:81:32:c4:87:ef:0f:23:66:c3:af:
26:49:2e:58:e0:9d:32:a3:ca:2f:68:94:e5:b3:45:25:4b:b6:
bc:15:12:8e:d9:b9:85:4f:44:06:d7:68:ca:1b:e9:fe:62:f1:
cf:ce:02:27:33:dc:8e:55:60:12:68:80:d7:ad:4a:67:a1:12:
da:d4:a3:e1:df:57:66:4e:33:e0:e0:00:57:db:66:3a:5a:fd:
d5:5e:b7:20:1b:8f:b2:c8:01:2d:17:ca:e4:ed:4e:14:01:4b:
0b:9c:8a:51:d1:34:83:10:4a:c5:b6:6f:fd:bc:01:8f:d4:7a:
db:e6:1a:47:ce:4d:90:72:7d:30:46:41:05:9d:13:c4:69:b8:
16:34:d2:9c:d8:0c:2a:56:ca:b1:fc:13:c7:75:a2:8d:a3:df:
7b:46:94:7c:b8:5c:b5:f1:e9:ec:df:1d:33:94:87:6e:84:a3:
e5:d7:b8:6b:33:e6:6f:e6:7d:3d:d5:9f:62:d7:16:fa:6b:0c:
ce:10:73:b5:84:ab:46:3b:ef:38:42:82:80:c9:f8:e8:9c:4e:
cd:1c:6d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:36 2025 by rpki-client