Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
File: rOuZdImZq44CGPfI29zFaY1mnTk.mft (raw, json)
Hash identifier: YVDfPreUYsGriugYhqm7UArV/+b/oXb3+5U/gTfY92c=
Subject key identifier: BE:8B:2E:B4:10:91:99:73:B9:21:15:ED:07:D0:5F:3E:24:C6:4B:2B
Authority key identifier: AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
Certificate issuer: /CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Certificate serial: 0198D4DFD7B226B37697C2F21BF9F76BDA9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 03:01:36 +0000
Manifest this update: Sat 23 Aug 2025 03:01:36 +0000
Manifest next update: Sun 24 Aug 2025 03:01:36 +0000
Files and hashes: 1: AXdtgA9HD_eEgv2xOauCB5PRPTI.roa (hash: eE91r99J937Hp1PJua6WE3j9iIacTvevX68FK66M1mQ=)
2: rOuZdImZq44CGPfI29zFaY1mnTk.crl (hash: SFDv7xKq1+omUbFxdEwCyHkrR7mzBFoRrQCDVl79gsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d7:b2:26:b3:76:97:c2:f2:1b:f9:f7:6b:da:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aceb99748999ab8e0218f7c8dbdcc5698d669d39
Validity
Not Before: Aug 23 03:01:36 2025 GMT
Not After : Aug 24 03:01:36 2025 GMT
Subject: CN=be8b2eb410919973b92115ed07d05f3e24c64b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2b:27:a2:9d:ff:6a:b4:65:eb:35:ef:3b:69:
99:d7:5c:0c:2a:11:bf:a7:22:05:d8:ca:24:58:49:
02:50:a3:1a:97:d0:bc:d3:60:24:0a:62:6e:10:05:
a7:c6:d3:8f:45:fc:40:36:37:96:ce:87:bf:6a:3d:
57:dc:41:3b:50:05:c8:9b:7c:0c:aa:40:64:66:41:
07:8d:2c:61:ce:77:31:af:6a:16:78:c7:b9:2b:18:
ff:31:46:33:85:38:a0:9c:c1:cb:bb:8c:00:a2:71:
21:3f:8e:a5:3c:68:0c:be:da:29:4d:47:21:5f:76:
a7:f2:bc:dd:fb:1d:45:71:14:ed:f8:0d:d4:d8:16:
ea:0b:7a:94:70:9c:24:c3:30:d5:8f:80:bf:3f:08:
9c:8c:27:e8:3a:ab:00:de:9c:40:19:a3:3d:f1:0c:
c2:51:49:98:1e:09:51:de:1c:dd:7d:0d:ab:a2:e3:
27:67:5b:1d:e7:83:2e:ea:b4:e2:ec:61:25:37:20:
a3:33:ec:02:90:63:1b:51:e1:51:3f:c0:8f:94:5a:
b8:c5:ce:c6:9a:5f:8c:5d:e0:6f:47:02:88:83:e7:
e0:e0:da:8c:b4:7c:ab:51:a2:ee:80:35:8c:ae:60:
32:bf:a6:78:67:aa:05:b0:99:f2:eb:c0:aa:38:41:
3a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8B:2E:B4:10:91:99:73:B9:21:15:ED:07:D0:5F:3E:24:C6:4B:2B
X509v3 Authority Key Identifier:
keyid:AC:EB:99:74:89:99:AB:8E:02:18:F7:C8:DB:DC:C5:69:8D:66:9D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOuZdImZq44CGPfI29zFaY1mnTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f60134-6d6d-4dc1-92a9-659ae821991c/1/rOuZdImZq44CGPfI29zFaY1mnTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:09:7c:7f:4c:5e:62:ef:b4:c8:3b:8b:12:28:56:f4:34:18:
60:57:68:92:85:9a:eb:6a:d2:48:10:f3:d3:70:11:eb:d1:a0:
3a:c0:c6:6c:1c:d5:bc:4b:68:59:c3:af:00:4e:cb:9a:a5:c8:
aa:54:5c:e4:63:4b:38:ef:4b:b6:78:c8:da:69:46:c3:8b:da:
58:d4:21:14:0b:d4:98:65:af:d3:5e:af:60:11:3c:a0:c4:bc:
42:9d:9d:84:65:8e:e5:07:cf:e8:00:d4:5c:1a:76:f9:dd:65:
4e:80:2a:30:27:eb:e4:a3:38:0e:ca:52:22:0b:fb:1d:73:a2:
a7:42:69:ac:1b:76:13:3b:29:b5:63:7d:fc:64:16:9f:89:27:
db:6e:67:a8:f0:99:00:77:c6:38:b4:3e:fe:50:32:04:ec:c5:
bf:fd:d3:b2:f7:a5:fd:24:a7:14:36:82:4e:34:88:28:c0:a7:
31:8c:d4:a7:ad:6f:03:32:96:ba:a2:df:87:3a:de:90:bc:6b:
f8:5c:55:47:6f:fc:c0:92:47:23:91:78:4a:53:f9:07:49:25:
22:17:f0:40:99:2e:f3:77:47:19:1c:62:ac:1f:6d:e8:ac:14:
eb:c4:6c:43:0f:8c:52:5e:42:5d:d4:1a:51:58:6d:f7:ce:98:
63:c4:98:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:34:15 2025 by rpki-client