Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
File: _x9hW5GDn1HtOltTdTsnsCx22pU.mft (raw, json)
Hash identifier: G+DtB5R4jPy3qKyDkFPIGNJ8XeLy6D96iLWdkp2DqzU=
Subject key identifier: 04:38:D2:3E:41:6E:F3:74:67:C1:71:CA:51:7D:B5:C7:02:73:E2:2E
Authority key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
Certificate issuer: /CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Certificate serial: 0198D62981FF56FE5BBDD7CAE1774BC6CC1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 09:01:40 +0000
Manifest this update: Sat 23 Aug 2025 09:01:40 +0000
Manifest next update: Sun 24 Aug 2025 09:01:40 +0000
Files and hashes: 1: 7a7WUL8xvDPo2P-5omM4jYtGU5Y.roa (hash: UostfHkB3oR0Iku8D5pESC2eAmHKknmIvGYXu5RiVk8=)
2: E72VdoRs1WH4lPVFyfKcgtxOU8Q.roa (hash: LmX4spgkKMlRcTCE+F8dcGQpsB1FUNFcfYjRwXtYks0=)
3: _x9hW5GDn1HtOltTdTsnsCx22pU.crl (hash: zVkmZqObupnnQPKJJcftxpul5Q6HxXToDwEGR6+K9sY=)
4: utXzgzMJjaIrp5ghklXHQNuDj0w.roa (hash: Y9s+msDVsT/czxYxM2UzwdwxQOsm8/16ui4R//h8OS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:81:ff:56:fe:5b:bd:d7:ca:e1:77:4b:c6:cc:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Validity
Not Before: Aug 23 09:01:40 2025 GMT
Not After : Aug 24 09:01:40 2025 GMT
Subject: CN=0438d23e416ef37467c171ca517db5c70273e22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3b:23:40:cd:d3:56:25:f3:c1:16:e4:a0:a0:
22:4b:e9:6c:1c:2a:cc:75:d9:12:25:dc:83:a6:6a:
d8:bd:62:65:b1:03:bf:88:ed:51:96:b7:6d:15:c3:
44:d4:9c:00:50:d3:63:4c:e9:43:ba:b5:1a:a0:7e:
cb:65:e0:14:ae:85:e0:90:a0:b8:a0:7e:8a:a0:c9:
4d:91:b4:28:df:fd:ae:f9:b9:8a:b9:42:dd:8f:96:
62:6f:56:01:8d:0a:00:8a:c3:17:58:3a:ad:4e:65:
35:48:31:37:01:7b:55:5f:dd:cb:b9:0e:bb:f1:1a:
22:68:6d:d3:17:e1:c8:ee:fd:e3:7b:f9:18:87:16:
51:4b:7b:5b:e4:68:b6:61:c5:7e:0b:7d:a6:37:cc:
89:97:9b:cb:c2:fd:36:60:3b:35:75:85:17:3c:53:
2d:8d:34:23:4f:36:56:6c:f0:a0:ae:e3:d8:9b:c5:
f7:0f:49:5e:a2:d3:85:7c:32:7e:14:64:39:08:5e:
b6:0e:2f:c2:e9:17:c9:d0:ef:96:1e:10:d5:64:01:
d2:b2:98:99:e6:31:98:1b:c6:53:e8:6d:0c:d7:96:
89:8d:20:8d:b6:ec:bc:c7:ee:6c:ab:5b:3c:4a:a7:
d2:87:ec:ee:0d:21:b2:7c:30:68:b2:89:1b:9b:1e:
2a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:38:D2:3E:41:6E:F3:74:67:C1:71:CA:51:7D:B5:C7:02:73:E2:2E
X509v3 Authority Key Identifier:
keyid:FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e3:b6:35:1a:a2:d3:b0:98:ed:27:b8:58:d4:1f:c2:6a:36:
6b:fb:f6:09:1c:45:db:74:6d:8c:1f:8c:66:aa:c6:70:70:9c:
80:c5:e2:81:d3:8e:ed:03:90:d4:d8:aa:c8:52:d8:43:a3:48:
83:85:ab:d8:a6:fe:5c:c8:d5:d6:59:5d:61:8e:f8:3e:03:cf:
dd:5c:1b:d5:05:3b:16:7e:e4:70:9a:9b:e4:f8:3e:4c:8e:a2:
b6:4e:13:fc:7b:a0:7b:45:b7:75:ea:d5:9c:25:8d:c5:3c:86:
b4:d4:69:13:cc:0e:1d:30:12:08:79:4f:2d:2d:aa:99:00:17:
9f:21:3a:06:f0:9e:de:d1:ee:51:a0:d5:d1:88:62:59:9a:e9:
a0:29:6a:08:17:be:8d:f6:85:b0:29:4c:4b:dd:24:18:04:9f:
08:bc:7b:2e:4d:3c:4d:29:ec:ea:86:56:c1:86:b4:fb:a4:54:
f1:fa:e4:36:94:a4:52:94:11:69:2e:db:12:28:74:be:c8:68:
f1:61:3d:f1:c0:c0:3c:1f:da:54:63:53:8c:c4:4f:8a:50:38:
c7:d7:da:e5:07:3e:24:07:8c:03:7d:bc:4e:c4:a7:18:25:d9:
8c:38:61:8a:6c:50:1b:5a:87:09:45:52:03:ca:ef:73:f3:5b:
de:ba:af:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:44 2025 by rpki-client