Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
File: dxBykg2MmitA6zoEXx8qbjNKRJY.mft (raw, json)
Hash identifier: /9E/hPD3qa4qktHfLBu3CGqs1BEOtK765CXG3DtjonM=
Subject key identifier: EF:A1:18:CB:9F:76:16:19:87:DA:41:62:17:7C:86:EA:78:0C:CA:30
Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
Certificate issuer: /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Certificate serial: 0198D6608F28A4FB1B2DDB69402FC311CE9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 10:01:48 +0000
Manifest this update: Sat 23 Aug 2025 10:01:48 +0000
Manifest next update: Sun 24 Aug 2025 10:01:48 +0000
Files and hashes: 1: YkTwnLLBjio1cr_ngfAfzZs1Hh0.roa (hash: Y9RRPtZapEofyZ5MjGOGJpjlqTcZ/UM1TnoKmtwIB40=)
2: dxBykg2MmitA6zoEXx8qbjNKRJY.crl (hash: glkatjEcPKhP858+mHnbHt/IN8DPNIPpi1oIyfRL7no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:8f:28:a4:fb:1b:2d:db:69:40:2f:c3:11:ce:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496
Validity
Not Before: Aug 23 10:01:48 2025 GMT
Not After : Aug 24 10:01:48 2025 GMT
Subject: CN=efa118cb9f76161987da4162177c86ea780cca30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:2c:b8:82:e6:f5:3f:09:a1:c6:25:49:f2:
3c:76:06:9e:03:09:f7:5b:22:2e:96:a6:f8:fa:59:
aa:0b:44:87:78:f7:1f:0b:16:1b:09:4b:92:82:6c:
c6:74:d2:3c:e6:90:6a:bf:39:ab:2d:b3:ca:89:ad:
5e:0d:2d:ba:58:19:71:4a:a7:2a:a0:e5:92:fa:0f:
72:6f:b2:93:b7:8f:f5:2e:ec:44:e8:03:c7:58:be:
0e:3c:a2:e3:eb:7e:bd:d3:29:7d:7b:db:44:ce:e9:
b7:51:75:3d:fd:7b:72:ba:47:0b:37:c9:53:0c:dd:
6c:39:fc:c8:db:af:08:cd:31:c7:2d:cd:3d:30:cc:
c5:8d:28:88:f3:c8:c7:01:12:89:0d:32:70:18:5c:
16:b3:cd:2b:35:8f:8b:87:69:dd:30:85:f6:93:cf:
41:55:e5:57:0d:14:a6:d7:55:3d:29:bb:86:e0:61:
8c:a4:f3:a4:88:b8:c3:86:1d:ff:ad:92:49:45:4f:
de:be:87:c1:45:bf:ae:12:33:dd:ad:f8:3c:cc:3e:
61:67:b3:1c:b5:d2:af:90:70:e4:42:97:0f:6b:eb:
a0:7e:e7:70:eb:4b:c2:08:09:94:df:9c:b8:f6:b0:
9d:c9:8d:33:3a:4c:e0:a3:c4:66:08:4a:fa:a5:63:
da:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A1:18:CB:9F:76:16:19:87:DA:41:62:17:7C:86:EA:78:0C:CA:30
X509v3 Authority Key Identifier:
keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c3:4e:c2:d6:18:c0:31:ed:6b:6d:bf:59:b4:52:4c:67:0f:
0f:f6:0c:7c:d8:a0:23:3c:0e:8a:a7:57:03:59:58:89:e8:4f:
2e:3b:47:b3:85:df:51:e5:a0:51:da:bf:86:ce:5f:4f:37:65:
ee:1f:50:d4:d1:36:cb:cf:a3:aa:0e:a4:69:48:6b:79:d7:4a:
4b:54:89:8e:8f:ec:3a:0f:7d:61:52:3b:5d:9f:73:49:66:53:
39:78:ff:68:04:96:55:63:ea:34:98:33:bc:5e:e8:1b:26:09:
7d:24:53:66:36:66:7d:93:13:a8:b6:f8:d9:d3:e9:5d:69:18:
a6:33:bb:ca:97:10:62:73:46:c1:81:e9:37:ee:c4:4a:b9:0f:
2f:37:23:ca:d5:70:3c:f4:3c:f5:7a:4f:62:7d:a8:9f:74:a1:
ff:ac:32:87:99:10:b5:19:c7:8f:cc:13:ab:4b:3a:3a:38:4a:
72:b7:71:b8:f5:4b:6c:ab:b0:aa:1d:67:7a:e4:98:5d:05:46:
4c:8d:b3:f2:87:5e:bb:a5:04:f9:36:9f:23:b5:a9:6e:fc:de:
8e:c9:61:fd:99:b6:d5:5a:09:e2:c7:67:de:e4:8d:9e:e2:ed:
76:86:9d:1c:82:d8:d7:5b:6e:ca:d5:6b:55:54:fb:58:12:e3:
9e:02:22:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:07:29 2025 by rpki-client