Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
File: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft (raw, json)
Hash identifier: 4SijCbNzQaGLHwimsyvtg2ycTOlyAccp9IF8+Y+HiPU=
Subject key identifier: 46:8D:CF:F6:C8:21:AD:34:59:87:32:71:AD:33:32:6A:23:56:10:C2
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial: 0198D5F1716310CA41C95CB0C8E1FE771F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 08:00:26 +0000
Manifest this update: Sat 23 Aug 2025 08:00:26 +0000
Manifest next update: Sun 24 Aug 2025 08:00:26 +0000
Files and hashes: 1: 1-lmapd5w9HD2F08R09w_tZRWCa0.roa (hash: wweZhb13in2MHBYbFFvgxz1Av+9tarTLaej3LMI0a4A=)
2: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl (hash: Q7niCLzylxmHVPIHWbpn4o/Hk9/GDrO2+n+g277FAE4=)
3: kwtdCRFAZPjQFHCak21_zozRzyg.roa (hash: EWeYVWP/wMFz4uen+0vNjC0GMpRDuD50ya++g2lRAIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:71:63:10:ca:41:c9:5c:b0:c8:e1:fe:77:1f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
Validity
Not Before: Aug 23 08:00:26 2025 GMT
Not After : Aug 24 08:00:26 2025 GMT
Subject: CN=468dcff6c821ad3459873271ad33326a235610c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:fa:ca:ee:1e:80:a0:67:e5:95:14:e9:16:
51:f4:a2:ff:2e:be:13:26:86:11:a1:10:4b:d3:e6:
46:5e:41:ea:97:3e:11:5b:d7:8f:09:67:16:ee:d1:
3e:ff:8d:86:a3:8b:ec:1a:b9:b2:83:6d:db:9f:50:
cc:69:e5:3c:5f:17:63:9f:64:05:e9:20:33:ba:d2:
5a:60:f1:f7:c0:df:fc:92:ea:6a:7f:d2:7f:de:0b:
14:b6:18:8b:34:08:c2:6c:20:ae:39:7a:6d:19:b0:
ae:9a:cc:8f:9c:28:9f:a3:e7:28:08:54:78:a0:3c:
bf:31:3e:90:a4:53:60:9b:f0:20:3a:94:a7:f2:19:
bf:ab:26:9f:d0:b3:0c:43:52:0e:54:9c:3c:bf:72:
94:ab:73:89:d8:34:ab:14:35:fe:18:d0:f7:64:66:
28:16:16:43:b8:f3:9e:37:3e:8c:3c:be:f4:59:a8:
5a:34:00:57:99:c1:8c:4b:b3:aa:ef:c1:6f:54:d8:
71:38:c4:06:0f:ae:4b:4c:39:94:78:41:76:ca:74:
80:a9:25:f5:7e:0e:36:9a:0e:cf:1a:18:c3:1b:2c:
4c:b0:e6:d8:6b:3f:b5:1a:53:c1:b6:d9:1a:56:a3:
4b:2b:aa:4d:65:2d:c6:ba:5e:cd:b8:5f:bf:b4:bb:
a3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8D:CF:F6:C8:21:AD:34:59:87:32:71:AD:33:32:6A:23:56:10:C2
X509v3 Authority Key Identifier:
keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e0:2b:c9:36:6b:f1:39:9e:2a:f7:25:fb:bc:e9:d1:f8:99:
06:26:9d:32:e8:64:72:d9:72:00:c3:fe:95:ee:c2:e5:5a:70:
35:07:5e:1f:31:2d:c2:c2:05:62:45:ab:bb:a4:59:54:b4:a9:
bb:40:5a:05:3e:71:25:70:89:45:34:03:e7:b5:93:99:da:df:
75:92:33:2f:e4:36:dc:4e:09:7c:45:4c:24:c3:e1:d4:57:dc:
7f:98:d8:cd:91:94:d3:57:c0:f7:c9:16:fe:e5:b3:40:4c:e9:
df:ce:f7:00:cc:1a:af:44:18:99:c7:e1:85:54:cd:37:cd:1d:
5b:66:d5:04:44:31:a5:e8:46:06:0b:64:fe:70:22:97:2e:3c:
f8:05:9f:06:3f:8a:e0:36:5d:af:c7:49:68:dd:e0:a6:28:ef:
e5:ae:a9:93:e9:d4:27:d0:0a:05:dd:c3:17:fb:21:c9:d0:28:
13:01:a1:b1:f1:11:30:5f:ae:22:bd:8e:01:9f:04:fd:f7:a0:
d8:c5:e3:e7:15:15:02:af:46:cd:87:17:b8:a4:d0:da:fa:34:
17:d6:51:97:06:65:fa:12:36:1d:75:a7:c1:3f:0a:d9:30:7a:
56:f9:4f:f2:82:bc:74:48:65:c0:a4:aa:2e:61:d3:03:6b:85:
72:2d:ac:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:05 2025 by rpki-client