
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
File: 00vPISevCy4KJGrkV0MEx653Fek.mft (raw, json)
Hash identifier: QX2UGEJ7RsBsCwehKrDb/mE23Yg2mvOu58p0lszWgFU=
Subject key identifier: 88:82:AE:3D:26:2F:EF:B2:53:B0:24:12:05:EC:0C:38:94:03:F5:BB
Authority key identifier: D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
Certificate issuer: /CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Certificate serial: 0198D472B86E20E0BC48AC22BE0E5A247F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 01:02:24 +0000
Manifest this update: Sat 23 Aug 2025 01:02:24 +0000
Manifest next update: Sun 24 Aug 2025 01:02:24 +0000
Files and hashes: 1: 00vPISevCy4KJGrkV0MEx653Fek.crl (hash: XwdCY4rM6lo8oe0bw5TbASWroh2QmIJ5eXjsCbXYCvg=)
2: SqjmPfaLrtBpjmBn0-LK2-XYK6E.roa (hash: oP41hXDxiX++ad4HH6tMbCxCouHbTfiMX6JPBOFqfjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:b8:6e:20:e0:bc:48:ac:22:be:0e:5a:24:7f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Validity
Not Before: Aug 23 01:02:24 2025 GMT
Not After : Aug 24 01:02:24 2025 GMT
Subject: CN=8882ae3d262fefb253b0241205ec0c389403f5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:61:dd:fb:a8:b7:62:52:cd:84:17:d5:d2:3d:
5f:a3:3c:95:c5:16:6b:80:91:ed:f4:d5:3d:98:d1:
94:8b:6e:52:38:0b:d2:97:3e:83:c0:a2:00:25:7e:
4a:59:26:0d:3e:48:9c:e2:44:18:fc:a4:e1:5e:f3:
e7:2f:80:0c:66:20:62:b5:4a:ee:85:29:cc:7b:43:
ca:33:c3:d4:8c:32:03:da:ff:42:56:ce:de:eb:94:
e5:13:82:b7:a3:e6:2c:a9:0e:c1:b9:b9:a9:49:09:
17:d2:22:06:c6:ed:d1:6a:77:da:9c:78:90:88:50:
5f:88:ee:8d:9c:77:c2:6b:1e:7c:93:0b:c3:ea:ef:
70:2f:80:80:7b:43:bf:06:d1:02:20:7b:f5:37:c3:
04:85:6c:fb:aa:1a:88:64:83:50:dc:f5:b9:b0:c5:
fb:3d:8a:0c:dc:c5:52:29:e6:40:30:d2:3e:16:2c:
1d:17:a0:1e:55:49:db:ea:a7:ac:15:26:5d:64:a0:
49:bf:9e:6b:42:25:08:4f:b5:c9:1a:a2:3e:fd:b5:
57:4f:b1:de:a4:a6:fc:50:ea:d2:46:90:c3:f4:b3:
0a:27:8c:c4:f0:fe:97:53:eb:47:50:8b:2f:ff:f7:
5d:8b:20:65:cc:ec:c4:de:56:a4:2f:4a:37:8a:42:
b5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:82:AE:3D:26:2F:EF:B2:53:B0:24:12:05:EC:0C:38:94:03:F5:BB
X509v3 Authority Key Identifier:
keyid:D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:1a:68:2d:59:cd:21:aa:d3:2d:be:69:2e:d7:67:5a:12:25:
59:51:54:19:48:f7:84:48:24:44:d5:b3:6f:ec:66:28:02:18:
0c:77:73:a4:20:58:d5:4e:e8:74:2d:f6:cf:ee:0d:20:01:b4:
a3:71:0e:1a:65:3a:1a:1d:00:1d:71:2b:d8:1d:0d:4b:3d:43:
a9:8e:b0:a7:9f:1e:3d:ee:99:6a:79:9f:0b:e6:d1:f9:83:79:
77:a8:27:9a:e9:e2:90:0e:ea:26:51:3e:14:dc:e1:8f:6b:49:
8e:9c:39:5f:bb:ae:0b:7f:c3:e7:ef:0c:81:37:ef:d7:0e:1b:
3c:ac:f6:d8:7f:c2:14:91:dd:6a:59:2f:8e:e1:42:7f:14:8e:
55:d4:60:47:e5:54:fe:13:e8:bc:e5:bb:ef:f4:ef:fc:6d:93:
57:c5:27:17:a7:7a:26:7b:f1:7a:ca:78:cc:a2:ed:03:07:a9:
a1:0f:5a:1a:30:99:9f:a8:23:c3:fb:6c:ec:b1:b8:ec:d5:48:
04:1a:df:47:c1:b4:9c:c2:08:0d:75:3c:03:ff:3c:d0:c9:c1:
fc:d9:d0:76:68:33:09:bb:50:ae:05:08:ff:32:ab:8f:fc:70:
7e:a6:57:4d:f7:f7:09:15:45:c8:7f:39:21:8c:61:a2:39:f9:
92:cb:cb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:39 2025 by rpki-client