
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
File: sN-v02cwOW_jOOdy2tvkw8hc2VI.mft (raw, json)
Hash identifier: awmpsOEvAh8sje6pyAo3CoZm8hJ5c0ezfpOCgtCCKYI=
Subject key identifier: A5:BA:BA:F8:63:64:A6:35:17:16:CB:75:0A:84:81:BD:17:24:3F:C5
Authority key identifier: B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
Certificate issuer: /CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Certificate serial: 0198D73BAAF5150D54187A7F64A07D8470C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 14:01:08 +0000
Manifest this update: Sat 23 Aug 2025 14:01:08 +0000
Manifest next update: Sun 24 Aug 2025 14:01:08 +0000
Files and hashes: 1: Uly4hJm4n0CW_m9VG7FdyUYLXQ0.roa (hash: W7kTTFRMLEf4OA7s2XNv00hUyVmO5iV/FwUiWEf3g0U=)
2: WsuxGAiaGf_A6Y2lC2J6NUEltcs.roa (hash: xwq4xmwvcXSf9rjrw/uyv+kqTXqSwacSqKQKgPJXLGc=)
3: sN-v02cwOW_jOOdy2tvkw8hc2VI.crl (hash: MpExJCrk1pRewMBdaih3Eo3NXzqkjzyMAAurWfRgD44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:aa:f5:15:0d:54:18:7a:7f:64:a0:7d:84:70:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Validity
Not Before: Aug 23 14:01:08 2025 GMT
Not After : Aug 24 14:01:08 2025 GMT
Subject: CN=a5babaf86364a6351716cb750a8481bd17243fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:81:2f:88:14:98:37:ed:f5:23:69:28:e9:
b0:01:fb:9d:7d:99:df:08:ea:56:c5:0b:96:2e:3c:
2a:46:c1:f3:95:a1:ce:8c:62:49:ad:6a:49:7d:ea:
82:66:df:2f:1b:32:5b:10:45:af:0d:1c:21:bf:b9:
1d:d8:d9:6a:80:f8:71:89:47:49:f4:ef:1c:59:7b:
70:e4:0d:cc:47:41:c7:9f:09:3e:58:7d:ac:47:eb:
ee:19:30:72:45:f6:94:5e:ae:99:2c:84:41:7b:bf:
9c:43:31:18:5c:41:b8:5f:64:a3:3e:40:02:ed:9a:
60:46:1a:22:dd:1a:26:56:29:a1:bd:d8:5f:93:f0:
b2:91:81:f2:ae:fe:16:07:48:55:7e:e4:58:a4:4e:
c7:08:ca:5e:93:4b:95:15:b4:fd:53:8a:a9:dd:e0:
72:01:7e:53:ca:16:d5:26:24:79:70:f0:9f:b6:6e:
f4:45:87:f1:1c:34:69:08:2d:ae:d5:35:82:1e:d5:
f9:ab:eb:b7:38:d2:06:96:fd:84:93:78:de:5f:fe:
0f:11:ad:5e:3d:88:14:55:15:aa:c0:7d:73:71:68:
97:1d:1e:1c:0c:13:64:53:e8:aa:c7:af:65:44:86:
13:e0:09:c7:e7:18:4a:74:26:e7:79:3b:a3:b4:ed:
68:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BA:BA:F8:63:64:A6:35:17:16:CB:75:0A:84:81:BD:17:24:3F:C5
X509v3 Authority Key Identifier:
keyid:B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:06:fa:4e:80:cf:02:45:fc:c2:ba:14:2f:7d:2b:40:77:a6:
93:dc:f8:d7:c2:c5:50:03:a1:d9:0a:44:1e:c8:41:ad:f7:3e:
fe:5d:a3:71:95:82:6a:da:6e:c0:b4:d4:3c:34:68:0f:0d:18:
2f:52:a9:79:5b:d3:fa:9c:36:44:36:62:3a:8e:c7:9c:88:28:
13:05:21:c5:32:89:4c:f6:89:9c:25:fe:ff:08:29:e9:fb:64:
33:d3:80:05:0e:cf:b1:3c:87:fd:a0:db:c5:a1:7d:97:52:a2:
03:c9:71:b4:a0:dd:08:ac:46:fd:05:f1:d1:b2:1b:22:9f:11:
f3:0e:9f:52:fa:b0:82:f4:34:25:ec:ee:b8:8c:df:69:e2:db:
78:58:e8:6f:11:5b:3e:95:a2:f7:c9:37:a1:dc:af:a1:a9:77:
f4:67:1b:64:bd:0c:be:dd:f3:38:cc:0b:29:1b:07:00:1f:9d:
ab:92:11:a3:06:57:cc:00:19:d9:fd:8e:ff:91:98:41:88:97:
7e:36:9e:15:26:bb:ee:c3:7f:ef:03:76:af:ea:56:53:84:84:
21:7a:8f:ab:eb:3c:f1:14:5f:8e:c4:0a:09:d1:af:41:73:bf:
42:bf:30:b3:f9:a6:f9:63:56:06:8a:d3:0e:ea:d3:5b:bc:a4:
de:47:5e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:53 2025 by rpki-client