Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
File: 458aboTAJ378tW2UKw615FZHESk.mft (raw, json)
Hash identifier: R1EIxD5MEUg3ixdxss15mCdAZAqNLjpTAOVGziyia5I=
Subject key identifier: 62:0A:02:8C:09:0D:ED:A4:0A:DB:57:51:C9:3C:B4:50:1D:DA:DA:BA
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 0198D4E0A457DB61D974502C34E4C39D897C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 03:02:28 +0000
Manifest this update: Sat 23 Aug 2025 03:02:28 +0000
Manifest next update: Sun 24 Aug 2025 03:02:28 +0000
Files and hashes: 1: 00-pDRnkJ28HOY9PiW3UHtRlnaA.roa (hash: ajRA1r/wZbCFV5DRURYHBboFEqfVmi4nUu+o5RsVv7I=)
2: 458aboTAJ378tW2UKw615FZHESk.crl (hash: gdqmmiPo7XUgqoHkoARFOVovqgrdrOAiswHYSnImySg=)
3: h0icjzgutWd6lA-1BOIfw-Gwjqg.roa (hash: S1MAwDWcpRVxYAC6r+etNs1goxhniGxwWQ8E6EEXeo8=)
4: w1G2WgRwg5TMv1o-ctrHxpnkGg8.roa (hash: agU6Qqy0fnivl3H4SG64+Hxp9Tp7KmPmlQXRx4PQep0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:a4:57:db:61:d9:74:50:2c:34:e4:c3:9d:89:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: Aug 23 03:02:28 2025 GMT
Not After : Aug 24 03:02:28 2025 GMT
Subject: CN=620a028c090deda40adb5751c93cb4501ddadaba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c3:31:08:dc:ee:74:98:37:cf:a8:e0:f3:28:
23:6e:07:44:3f:35:6d:bf:e9:72:59:64:92:c1:ca:
90:6b:27:1a:b0:35:e0:5a:32:b8:e0:de:56:3b:66:
91:64:39:21:68:49:44:3a:db:f9:fe:12:31:19:3c:
ac:50:a4:06:e1:97:88:0d:eb:bc:81:7e:99:f4:53:
87:f0:f6:dc:8f:cb:5c:62:cb:a7:27:9e:45:9e:3d:
e1:bc:5f:b7:d2:d4:7a:e1:cf:5c:b1:6d:f4:9a:0d:
28:60:d5:d9:93:78:b7:d7:f4:ce:60:e7:b3:ed:a6:
b0:8b:99:72:f9:56:f8:37:f6:74:94:8e:cd:de:b2:
b3:b8:e7:27:21:4a:35:45:57:9c:dc:00:a8:93:e3:
84:e6:2f:dd:e3:48:c9:2a:93:d8:96:de:e5:0e:3b:
e5:9c:2e:18:b6:43:76:3a:85:a2:a2:a3:85:fc:ba:
93:f0:89:f5:2a:f7:4a:80:c2:b4:a9:d7:3a:d3:5e:
25:9b:59:78:f6:bb:8b:b5:aa:f8:dc:b4:ca:ef:c7:
e3:00:0c:81:3e:e6:84:f9:c6:17:e6:fd:46:98:02:
e6:15:39:90:9d:7e:df:93:bb:1e:2c:54:99:e5:22:
8e:5b:c1:fa:fb:63:38:c5:87:32:56:8a:41:30:b4:
68:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0A:02:8C:09:0D:ED:A4:0A:DB:57:51:C9:3C:B4:50:1D:DA:DA:BA
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:8d:fb:a2:86:64:c0:02:53:79:c6:63:8b:55:42:86:cd:34:
57:53:ee:d9:24:63:d4:d7:83:2a:3f:67:07:33:70:79:81:6e:
59:bf:d0:57:29:e9:34:40:a4:c4:c7:32:db:ce:5b:8c:b6:aa:
6e:db:d4:e1:7b:63:a1:e1:81:53:da:d9:12:37:50:4b:12:5f:
34:a2:c7:b6:f9:c5:17:aa:f2:9f:68:b4:95:67:82:8d:cd:46:
7b:3c:e8:85:ac:f7:74:79:f4:d1:62:94:7e:7f:22:ad:83:04:
86:22:b5:c1:7c:4d:82:11:5c:51:81:b0:f0:f5:af:e8:10:84:
a5:c8:8c:65:79:8e:36:d4:b0:e2:21:30:11:70:93:4f:7a:16:
6a:10:1f:1c:88:82:61:bc:65:5a:d3:40:fc:36:02:e5:5a:7e:
f9:6c:6d:38:52:45:4c:4f:7b:fb:70:f6:38:d6:d1:fa:38:14:
58:79:ed:4a:d3:68:93:f5:da:cd:1b:c1:da:e9:62:79:88:cf:
c6:58:58:ef:10:dc:76:5f:79:d8:0c:c3:d9:42:20:10:cc:02:
e4:0b:a2:3d:34:cc:78:c1:ae:72:a0:ba:65:57:28:64:d9:9b:
14:58:99:5e:21:a7:35:d1:71:47:82:73:64:8b:80:c9:2e:45:
84:37:e1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:21 2025 by rpki-client